bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:29:aa:28:ff:a8, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18215/1:b..l rcu: (detected by 1, t=10503 jiffies, g=71089, q=1886 ncpus=2) task:syz.4.3467 state:R running task stack:26216 pid:18215 tgid:18212 ppid:15936 task_flags:0x400140 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5351 [inline] __schedule+0x1737/0x4d30 kernel/sched/core.c:6954 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7281 irqentry_exit+0x6f/0x90 kernel/entry/common.c:196 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x175/0x360 kernel/locking/lockdep.c:5872 Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 cb 8e fc 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e RSP: 0018:ffffc9000e4c6e58 EFLAGS: 00000206 RAX: 06e9e22adb1cc600 RBX: 0000000000000000 RCX: 06e9e22adb1cc600 RDX: 0000000000000000 RSI: ffffffff8db6608d RDI: ffffffff8be30a00 RBP: ffffffff8172cd05 R08: 0000000000000000 R09: ffffffff8172cd05 R10: ffffc9000e4c7018 R11: ffffffff81ac3450 R12: 0000000000000002 R13: ffffffff8e13c4e0 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:841 [inline] class_rcu_constructor include/linux/rcupdate.h:1155 [inline] unwind_next_frame+0xc2/0x2390 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4328 [inline] __kmalloc_node_track_caller_noprof+0x271/0x4e0 mm/slub.c:4347 __kmemdup_nul mm/util.c:63 [inline] kstrdup+0x42/0x100 mm/util.c:83 __kernfs_new_node+0x9c/0x7e0 fs/kernfs/dir.c:633 kernfs_new_node+0x102/0x210 fs/kernfs/dir.c:713 __kernfs_create_file+0x4b/0x2e0 fs/kernfs/file.c:1039 sysfs_add_file_mode_ns+0x238/0x300 fs/sysfs/file.c:319 create_files fs/sysfs/group.c:76 [inline] internal_create_group+0x66d/0x1110 fs/sysfs/group.c:183 internal_create_groups fs/sysfs/group.c:223 [inline] sysfs_create_groups+0x59/0x120 fs/sysfs/group.c:249 setup_port drivers/infiniband/core/sysfs.c:1247 [inline] ib_setup_port_attrs+0xd96/0x2070 drivers/infiniband/core/sysfs.c:1433 add_one_compat_dev+0x3d6/0x5c0 drivers/infiniband/core/device.c:968 rdma_dev_init_net+0x1dd/0x270 drivers/infiniband/core/device.c:1184 ops_init+0x359/0x5c0 net/core/net_namespace.c:136 setup_net+0x10c/0x320 net/core/net_namespace.c:438 copy_net_ns+0x31b/0x4d0 net/core/net_namespace.c:570 create_new_namespaces+0x3f3/0x720 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0x11c/0x170 kernel/nsproxy.c:218 ksys_unshare+0x4c8/0x8c0 kernel/fork.c:3124 __do_sys_unshare kernel/fork.c:3195 [inline] __se_sys_unshare kernel/fork.c:3193 [inline] __x64_sys_unshare+0x38/0x50 kernel/fork.c:3193 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb34198eb69 RSP: 002b:00007fb34277c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007fb341bb6080 RCX: 00007fb34198eb69 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 RBP: 00007fb341a11df1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fb341bb6080 R15: 00007ffd9402d778 rcu: rcu_preempt kthread starved for 539 jiffies! g71089 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5351 [inline] __schedule+0x1737/0x4d30 kernel/sched/core.c:6954 __schedule_loop kernel/sched/core.c:7036 [inline] schedule+0x165/0x360 kernel/sched/core.c:7051 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2054 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2256 kthread+0x70e/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 11482 Comm: kworker/u8:33 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker RIP: 0010:__rcu_read_unlock+0x6/0xe0 kernel/rcu/tree_plugin.h:431 Code: c1 03 38 c1 7c dc 48 89 df e8 76 bd 7b 00 eb d2 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3c 25 RSP: 0018:ffffc90000006ce0 EFLAGS: 00000286 RAX: fd7fcfd0acbc0600 RBX: ffffffff8a51d46e RCX: fd7fcfd0acbc0600 RDX: 0000000000000006 RSI: ffffffff8db6608d RDI: ffffffff8be30a00 RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8a51d46e R10: 000000000000000a R11: ffffffff8a523d90 R12: ffff88805b2c3800 R13: ffff88807c1a4880 R14: ffff88805c4b1a80 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fdb3da00218 CR3: 00000000779b6000 CR4: 00000000003526f0 Call Trace: rcu_read_unlock include/linux/rcupdate.h:873 [inline] net_generic+0x1f4/0x240 include/net/netns/generic.h:48 is_vlan_arp net/bridge/br_netfilter_hooks.c:109 [inline] br_nf_forward_finish+0x1cd/0xe60 net/bridge/br_netfilter_hooks.c:642 NF_HOOK+0x618/0x6b0 include/linux/netfilter.h:318 br_nf_forward_ip+0x647/0x7e0 net/bridge/br_netfilter_hooks.c:719 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_slow+0xc2/0x220 net/netfilter/core.c:623 nf_hook include/linux/netfilter.h:273 [inline] NF_HOOK+0x215/0x3c0 include/linux/netfilter.h:316 __br_forward+0x41e/0x600 net/bridge/br_forward.c:115 br_handle_frame_finish+0x14b4/0x19b0 net/bridge/br_input.c:221 br_nf_hook_thresh+0x3c3/0x4a0 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0x948/0xd00 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:318 [inline] br_nf_pre_routing_ipv6+0x37e/0x6b0 net/bridge/br_netfilter_ipv6.c:184 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:283 [inline] br_handle_frame+0x982/0x14c0 net/bridge/br_input.c:434 __netif_receive_skb_core+0x10b6/0x4020 net/core/dev.c:5866 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x72/0x380 net/core/dev.c:6092 process_backlog+0x60e/0x14f0 net/core/dev.c:6444 __napi_poll+0xc4/0x360 net/core/dev.c:7497 napi_poll net/core/dev.c:7560 [inline] net_rx_action+0x707/0xe30 net/core/dev.c:7687 handle_softirqs+0x283/0x870 kernel/softirq.c:579 do_softirq+0xec/0x180 kernel/softirq.c:480 __local_bh_enable_ip+0x17d/0x1c0 kernel/softirq.c:407 local_bh_enable include/linux/bottom_half.h:33 [inline] fpregs_unlock arch/x86/include/asm/fpu/api.h:77 [inline] kernel_fpu_end+0xd2/0x120 arch/x86/kernel/fpu/core.c:479 blake2s_compress+0x5f/0xd0 lib/crypto/x86/blake2s-glue.c:46 blake2s_update+0x14b/0x450 lib/crypto/blake2s.c:33 hmac+0x288/0x330 drivers/net/wireguard/noise.c:332 kdf+0xde/0x270 drivers/net/wireguard/noise.c:360 mix_precomputed_dh drivers/net/wireguard/noise.c:426 [inline] wg_noise_handshake_create_initiation+0x462/0x7e0 drivers/net/wireguard/noise.c:560 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline] wg_packet_handshake_send_worker+0x163/0x320 drivers/net/wireguard/send.c:51 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3321 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x70e/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 12346 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:29:aa:28:ff:a8, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:29:aa:28:ff:a8, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:29:aa:28:ff:a8, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:29:aa:28:ff:a8, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:29:aa:28:ff:a8, vlan:0) net_ratelimit: 15378 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:29:aa:28:ff:a8, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:29:aa:28:ff:a8, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:29:aa:28:ff:a8, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:29:aa:28:ff:a8, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:29:aa:28:ff:a8, vlan:0)