bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) BUG: workqueue lockup - pool cpus=0 node=0 flags=0x2 nice=0 stuck for 174s! Showing busy workqueues and worker pools: workqueue events: flags=0x100 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=11 refcnt=12 pending: psi_avgs_work, ovs_dp_masks_rebalance, vmstat_shepherd, 2*ovs_dp_masks_rebalance, psi_avgs_work, 2*ovs_dp_masks_rebalance, psi_avgs_work, rht_deferred_worker, drain_vmap_area_work pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=18 refcnt=19 in-flight: 29:switchdev_deferred_process_work ,5886:rfkill_global_led_trigger_worker ,5879:rfkill_sync_work pending: rht_deferred_worker, destroy_super_work, 6*nsim_dev_hwstats_traffic_work, rht_deferred_worker, 3*psi_avgs_work, ovs_dp_masks_rebalance, switchdev_deferred_process_work, rht_deferred_worker workqueue events_long: flags=0x100 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=8 refcnt=9 pending: 5*defense_work_handler, 3*br_fdb_cleanup pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=6 refcnt=7 pending: 3*br_multicast_gc_work, br_fdb_cleanup, defense_work_handler, br_multicast_gc_work workqueue events_unbound: flags=0x2 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 in-flight: 36:call_usermodehelper_exec_work workqueue events_unbound: flags=0x2 pwq 8: cpus=0-1 flags=0x6 nice=0 active=8 refcnt=9 in-flight: 1001:nsim_dev_trap_report_work pending: 3*macvlan_process_broadcast, idle_cull_fn, toggle_allocation_gate, nsim_dev_trap_report_work, macvlan_process_broadcast pwq 8: cpus=0-1 flags=0x6 nice=0 active=7 refcnt=8 in-flight: 146:nsim_dev_trap_report_work ,976:nsim_dev_trap_report_work ,48:nsim_dev_trap_report_work pending: idle_cull_fn, nsim_dev_trap_report_work, crng_reseed, flush_memcg_stats_dwork workqueue events_freezable: flags=0x104 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2 pending: update_balloon_stats_func workqueue events_power_efficient: flags=0x180 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=6 refcnt=7 in-flight: 5951:hash_netportnet6_gc pending: hash_mac4_gc, 4*check_lifetime pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=10 refcnt=11 in-flight: 1217:neigh_periodic_work pending: hash_netportnet6_gc, gc_worker, neigh_managed_work, do_cache_clean, wg_ratelimiter_gc_entries, hash_netportnet6_gc, nft_rhash_gc, neigh_managed_work, neigh_periodic_work workqueue rcu_gp: flags=0x108 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2 pending: process_srcu pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: process_srcu workqueue mm_percpu_wq: flags=0x108 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2 pending: vmstat_update pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: vmstat_update workqueue krxrpcd: flags=0x2001a pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=9 pending: rxrpc_peer_keepalive_worker inactive: 5*rxrpc_peer_keepalive_worker workqueue bat_events: flags=0x6000a pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=45 MAYDAY in-flight: 3410(RESCUER):batadv_tt_purge pending: mayday_cursor_func inactive: 2*batadv_tt_purge, 5*batadv_mcast_mla_update, 3*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge, batadv_bla_periodic_work, 2*batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, 2*batadv_bla_periodic_work, 9*batadv_iv_send_outstanding_bat_ogm_packet, 5*batadv_purge_orig, 3*batadv_iv_send_outstanding_bat_ogm_packet, batadv_dat_purge, batadv_tt_purge workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 pending: 2*wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 pending: wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-kex-wg2: flags=0x124 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-kex-wg2: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_tx_worker workqueue wg-kex-wg1: flags=0x124 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-kex-wg1: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 in-flight: 12:wg_packet_handshake_send_worker pending: wg_packet_handshake_send_worker pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 in-flight: 3000:wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_decrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg2: flags=0x124 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 in-flight: 5908:wg_packet_handshake_receive_worker pending: wg_packet_handshake_receive_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 in-flight: 5893:wg_packet_handshake_receive_worker workqueue wg-kex-wg2: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 in-flight: 58:wg_packet_handshake_send_worker pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_tx_worker workqueue wg-kex-wg0: flags=0x124 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 in-flight: 7693:wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_decrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg1: flags=0x124 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 in-flight: 5900:wg_packet_handshake_receive_worker workqueue wg-kex-wg1: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 pending: 2*wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_tx_worker workqueue wg-kex-wg2: flags=0x124 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 in-flight: 795:wg_packet_handshake_receive_worker pending: wg_packet_handshake_receive_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 in-flight: 5901:wg_packet_handshake_receive_worker workqueue wg-kex-wg2: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_tx_worker workqueue wg-kex-wg0: flags=0x124 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg0: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2 pending: wg_packet_decrypt_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_tx_worker workqueue wg-kex-wg1: flags=0x124 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 in-flight: 24:wg_packet_handshake_receive_worker workqueue wg-kex-wg1: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 pending: 2*wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_tx_worker workqueue wg-kex-wg2: flags=0x124 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-kex-wg2: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 pending: 2*wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=1 refcnt=2 pending: wg_packet_tx_worker workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 pending: 2*wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg1: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 in-flight: 3002:wg_packet_handshake_send_worker pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_tx_worker workqueue wg-kex-wg2: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 in-flight: 13:wg_packet_handshake_send_worker pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x128 pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker pool 2: cpus=0 node=0 flags=0x2 nice=0 hung=174s workers=9 manager: 5909 idle: 7485 5910 9 10 5911 pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=25s workers=9 idle: 1209 pool 8: cpus=0-1 flags=0x6 nice=0 hung=5s workers=12 manager: 7694 Showing backtraces of running workers in stalled CPU-bound worker pools: pool 2: task:kworker/0:7 state:R running task stack:21064 pid:5951 tgid:5951 ppid:2 task_flags:0x4208160 flags:0x00080000 Workqueue: events_power_efficient hash_netportnet6_gc Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0x15dd/0x52d0 kernel/sched/core.c:6908 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7092 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0xe1/0x130 kernel/softirq.c:457 hash_netportnet6_gc+0x24e/0x5f0 net/netfilter/ipset/ip_set_hash_gen.h:583 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0xb02/0x1830 kernel/workqueue.c:3358 worker_thread+0xa50/0xfc0 kernel/workqueue.c:3439 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 pool 2: task:kworker/0:3 state:R running task stack:21480 pid:5908 tgid:5908 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0x15dd/0x52d0 kernel/sched/core.c:6908 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7092 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0xe1/0x130 kernel/softirq.c:457 blake2s_compress+0xf9/0x1eb0 lib/crypto/x86/blake2s.h:42 blake2s_final+0x116/0x270 lib/crypto/blake2s.c:142 hmac+0x2de/0x3b0 drivers/net/wireguard/noise.c:333 kdf drivers/net/wireguard/noise.c:360 [inline] message_ephemeral+0x233/0x310 drivers/net/wireguard/noise.c:493 wg_noise_handshake_consume_initiation+0x21a/0x9a0 drivers/net/wireguard/noise.c:605 wg_receive_handshake_packet drivers/net/wireguard/receive.c:144 [inline] wg_packet_handshake_receive_worker+0x674/0x10c0 drivers/net/wireguard/receive.c:213 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0xb02/0x1830 kernel/workqueue.c:3358 worker_thread+0xa50/0xfc0 kernel/workqueue.c:3439 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 pool 2: task:kworker/0:2 state:R running task stack:21608 pid:795 tgid:795 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0x15dd/0x52d0 kernel/sched/core.c:6908 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7092 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0xe1/0x130 kernel/softirq.c:457 local_bh_enable include/linux/bottom_half.h:33 [inline] wg_receive_handshake_packet drivers/net/wireguard/receive.c:199 [inline] wg_packet_handshake_receive_worker+0x863/0x10c0 drivers/net/wireguard/receive.c:213 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0xb02/0x1830 kernel/workqueue.c:3358 worker_thread+0xa50/0xfc0 kernel/workqueue.c:3439 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7683/1:b..l rcu: (detected by 0, t=10502 jiffies, g=27273, q=842 ncpus=2) task:syz-executor state:R running task stack:23328 pid:7683 tgid:7683 ppid:5812 task_flags:0x400100 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0x15dd/0x52d0 kernel/sched/core.c:6908 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7235 irqentry_exit+0x599/0x620 kernel/entry/common.c:239 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:orc_ip arch/x86/kernel/unwind_orc.c:81 [inline] RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:103 [inline] RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:238 [inline] RIP: 0010:unwind_next_frame+0x50f/0x23c0 arch/x86/kernel/unwind_orc.c:510 Code: c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 RSP: 0018:ffffc90004747158 EFLAGS: 00000a02 RAX: 1ffffffff2068457 RBX: ffffffff903422b8 RCX: dffffc0000000000 RDX: ffffffff903422b8 RSI: ffffffff90b5594e RDI: ffffffff8c27bca0 RBP: ffffffff903422b8 R08: 0000000000000001 R09: ffffffff8e75e420 R10: ffffc90004747278 R11: ffffffff81b0c070 R12: ffffffff82436bcc R13: ffffffff903422b8 R14: ffffc90004747228 R15: ffffffff903422b8 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1433 [inline] __free_frozen_pages+0xc2b/0xdb0 mm/page_alloc.c:2978 __slab_free+0x263/0x2b0 mm/slub.c:5573 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4538 [inline] slab_alloc_node mm/slub.c:4866 [inline] __kmalloc_cache_noprof+0x2ba/0x660 mm/slub.c:5375 kmalloc_noprof include/linux/slab.h:950 [inline] kzalloc_noprof include/linux/slab.h:1188 [inline] rfkill_fop_open+0x198/0x820 net/rfkill/core.c:1185 misc_open+0x2d5/0x350 drivers/char/misc.c:163 chrdev_open+0x4cd/0x5e0 fs/char_dev.c:411 do_dentry_open+0x785/0x14e0 fs/open.c:949 vfs_open+0x3b/0x340 fs/open.c:1081 do_open fs/namei.c:4671 [inline] path_openat+0x2e08/0x3860 fs/namei.c:4830 do_file_open+0x23e/0x4a0 fs/namei.c:4859 do_sys_openat2+0x113/0x200 fs/open.c:1366 do_sys_open fs/open.c:1372 [inline] __do_sys_openat fs/open.c:1388 [inline] __se_sys_openat fs/open.c:1383 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1383 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f893875cfce RSP: 002b:00007ffe7b24f0e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055558e5be500 RCX: 00007f893875cfce RDX: 0000000000000001 RSI: 00007f8938832d87 RDI: ffffffffffffff9c RBP: 000055558e5be4e8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 R13: 0000000000000006 R14: 00007ffe7b24f468 R15: 0000000000000000 bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 22634 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 23220 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 23612 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 23231 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 7693 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker RIP: 0010:find_held_lock kernel/locking/lockdep.c:-1 [inline] RIP: 0010:__lock_release kernel/locking/lockdep.c:5535 [inline] RIP: 0010:lock_release+0x111/0x3d0 kernel/locking/lockdep.c:5889 Code: 24 83 f8 32 0f 83 2a 02 00 00 4a 8d 1c ad 00 00 00 00 4c 01 eb 48 8d 6c dd 00 48 89 ef 4c 89 f6 e8 84 8d 0c 0a 44 89 64 24 14 <45> 89 e5 85 c0 0f 84 d7 00 00 00 48 85 ed 0f 84 13 01 00 00 83 7d RSP: 0000:ffffc90000006cf0 EFLAGS: 00000046 RAX: 0000000000000001 RBX: 0000000000000019 RCX: 0000000080000101 RDX: ffffc90000006e01 RSI: ffffffff8e75e420 RDI: ffff888029594920 RBP: ffff888029594920 R08: ffffc90000007c00 R09: 0000000000000000 R10: ffffc90000006e78 R11: fffff52000000dd1 R12: 0000000000000005 R13: 0000000000000005 R14: ffffffff8e75e420 R15: ffff888029593d00 FS: 0000000000000000(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000561dc4b9d008 CR3: 000000007e49e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000002 DR2: 0000000000000005 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: rcu_lock_release include/linux/rcupdate.h:322 [inline] rcu_read_unlock include/linux/rcupdate.h:881 [inline] class_rcu_destructor include/linux/rcupdate.h:1193 [inline] unwind_next_frame+0x1aaa/0x23c0 arch/x86/kernel/unwind_orc.c:695 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4538 [inline] slab_alloc_node mm/slub.c:4866 [inline] kmem_cache_alloc_node_noprof+0x384/0x690 mm/slub.c:4918 kmalloc_reserve net/core/skbuff.c:613 [inline] __alloc_skb+0x27d/0x7d0 net/core/skbuff.c:713 alloc_skb include/linux/skbuff.h:1383 [inline] nlmsg_new include/net/netlink.h:1055 [inline] fdb_notify+0xa6/0x160 net/bridge/br_fdb.c:188 br_fdb_update+0x4c8/0x690 net/bridge/br_fdb.c:1040 br_handle_frame_finish+0x573/0x1bb0 net/bridge/br_input.c:144 br_nf_hook_thresh+0x3dd/0x4c0 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:318 [inline] br_nf_pre_routing_ipv6+0x374/0x6f0 net/bridge/br_netfilter_ipv6.c:184 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0x1277/0x1510 net/bridge/br_input.c:442 __netif_receive_skb_core+0x98f/0x31a0 net/core/dev.c:6051 __netif_receive_skb_one_core net/core/dev.c:6162 [inline] __netif_receive_skb net/core/dev.c:6277 [inline] process_backlog+0x76d/0x1950 net/core/dev.c:6628 __napi_poll+0xae/0x340 net/core/dev.c:7692 napi_poll net/core/dev.c:7755 [inline] net_rx_action+0x627/0xf70 net/core/dev.c:7912 handle_softirqs+0x22a/0x870 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 blake2s_compress+0xf9/0x1eb0 lib/crypto/x86/blake2s.h:42 blake2s_final+0x116/0x270 lib/crypto/blake2s.c:142 hmac+0x20c/0x3b0 drivers/net/wireguard/noise.c:325 kdf+0x126/0x2b0 drivers/net/wireguard/noise.c:367 mix_precomputed_dh drivers/net/wireguard/noise.c:426 [inline] wg_noise_handshake_create_initiation+0x473/0x830 drivers/net/wireguard/noise.c:560 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline] wg_packet_handshake_send_worker+0x18d/0x350 drivers/net/wireguard/send.c:51 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0xb02/0x1830 kernel/workqueue.c:3358 worker_thread+0xa50/0xfc0 kernel/workqueue.c:3439 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: c1 f9 02 sar $0x2,%ecx 3: 48 c1 e8 3f shr $0x3f,%rax 7: 48 01 c8 add %rcx,%rax a: 48 83 e0 fe and $0xfffffffffffffffe,%rax e: 4c 8d 3c 45 00 00 00 lea 0x0(,%rax,2),%r15 15: 00 16: 49 01 ef add %rbp,%r15 19: 4c 89 f8 mov %r15,%rax 1c: 48 c1 e8 03 shr $0x3,%rax 20: 48 b9 00 00 00 00 00 movabs $0xdffffc0000000000,%rcx 27: fc ff df * 2a: 0f b6 04 08 movzbl (%rax,%rcx,1),%eax <-- trapping instruction 2e: 84 c0 test %al,%al 30: 75 27 jne 0x59 32: 49 63 07 movslq (%r15),%rax 35: 4c 01 f8 add %r15,%rax 38: 49 8d 4f 04 lea 0x4(%r15),%rcx 3c: 4c 39 e0 cmp %r12,%rax 3f: 48 rex.W