bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 39s! Showing busy workqueues and worker pools: workqueue events: flags=0x0 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=10 refcnt=11 pending: 3*nsim_dev_hwstats_traffic_work, vmstat_shepherd, 4*ovs_dp_masks_rebalance, 2*psi_avgs_work pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=6 refcnt=7 in-flight: 24:reg_todo ,6613:nsim_fib_event_work nsim_fib_event_work pending: 3*nsim_dev_hwstats_traffic_work workqueue events_highpri: flags=0x10 pwq 3: cpus=0 node=0 flags=0x0 nice=-20 active=1 refcnt=2 pending: fill_page_cache_func workqueue events_long: flags=0x0 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=5 refcnt=6 pending: 5*defense_work_handler workqueue events_unbound: flags=0x2 pwq 8: cpus=0-1 flags=0x6 nice=0 active=21 refcnt=22 in-flight: 15:cfg80211_wiphy_work cfg80211_wiphy_work ,2230:cfg80211_wiphy_work cfg80211_wiphy_work ,41:cfg80211_wiphy_work cfg80211_wiphy_work ,4846:cfg80211_wiphy_work cfg80211_wiphy_work ,4545:cfg80211_wiphy_work cfg80211_wiphy_work ,984:cfg80211_wiphy_work cfg80211_wiphy_work ,4757:cfg80211_wiphy_work cfg80211_wiphy_work pending: macvlan_process_broadcast, 2*nsim_dev_trap_report_work, 4*macvlan_process_broadcast pwq 8: cpus=0-1 flags=0x6 nice=0 active=12 refcnt=13 in-flight: 928:cfg80211_wiphy_work cfg80211_wiphy_work ,12:cfg80211_wiphy_work cfg80211_wiphy_work ,1261:cfg80211_wiphy_work cfg80211_wiphy_work pending: nsim_dev_trap_report_work, toggle_allocation_gate, 3*nsim_dev_trap_report_work, flush_memcg_stats_dwork workqueue events_power_efficient: flags=0x82 pwq 8: cpus=0-1 flags=0x6 nice=0 active=6 refcnt=7 pending: do_cache_clean, neigh_managed_work, 4*check_lifetime pwq 8: cpus=0-1 flags=0x6 nice=0 active=8 refcnt=9 in-flight: 7730:reg_check_chans_work ,7729:crda_timeout_work ,42:neigh_periodic_work pending: gc_worker, wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, check_lifetime workqueue kvfree_rcu_reclaim: flags=0xa pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=4 MAYDAY pending: 2*kfree_rcu_monitor workqueue mm_percpu_wq: flags=0x8 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: vmstat_update workqueue ipv6_addrconf: flags=0x6000a pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=24 in-flight: 4199(RESCUER):addrconf_dad_work inactive: 15*addrconf_dad_work, 4*addrconf_verify_work workqueue bat_events: flags=0x6000a pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=48 in-flight: 4274(RESCUER):batadv_tt_purge inactive: 3*batadv_tt_purge, 5*batadv_nc_worker, 5*batadv_mcast_mla_update, 7*batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_purge_orig, 8*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_tt_purge, batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, 2*batadv_bla_periodic_work, 2*batadv_dat_purge, batadv_bla_periodic_work workqueue hci0: flags=0x20012 pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 in-flight: 52:hci_cmd_sync_work workqueue hci2: flags=0x20012 pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 in-flight: 6554:hci_cmd_sync_work workqueue hci3: flags=0x20012 pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 in-flight: 6555:hci_cmd_sync_work workqueue hci4: flags=0x20012 pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 in-flight: 6564:hci_cmd_sync_work workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg2: flags=0x24 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg2: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg0: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-crypt-wg2: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-crypt-wg1: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg2: flags=0x24 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-kex-wg2: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_tx_worker, wg_packet_encrypt_worker workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker workqueue wg-crypt-wg2: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_tx_worker, wg_packet_encrypt_worker workqueue hci1: flags=0x20012 pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 in-flight: 6567:hci_cmd_sync_work workqueue wg-kex-wg0: flags=0x24 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2 in-flight: 6791:wg_packet_handshake_receive_worker workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 pending: 2*wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker workqueue wg-kex-wg1: flags=0x24 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-kex-wg1: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg2: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x28 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker pool 6: cpus=1 node=0 flags=0x2 nice=0 hung=0s workers=7 manager: 26 idle: 1819 6623 6624 pool 8: cpus=0-1 flags=0x6 nice=0 hung=0s workers=14 manager: 7731 pool 9: cpus=0-1 node=0 flags=0x4 nice=-20 hung=0s workers=8 idle: 6563 6132 6566 Showing backtraces of running workers in stalled CPU-bound worker pools: bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:85:ee:bf:da:38, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:85:ee:bf:da:38, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7131/1:b..l rcu: (detected by 0, t=10502 jiffies, g=6673, q=1998 ncpus=2) task:udevd state:R running task stack:0 pid:7131 tgid:7131 ppid:6168 task_flags:0x400140 flags:0x00800008 Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5357 [inline] __schedule+0x13b0/0x2864 kernel/sched/core.c:6961 preempt_schedule_common+0xe0/0x194 kernel/sched/core.c:7145 preempt_schedule+0x60/0x80 kernel/sched/core.c:7169 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] _raw_spin_unlock_irqrestore+0x94/0x98 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] __wake_up_common_lock kernel/sched/wait.c:127 [inline] __wake_up_sync_key+0x13c/0x18c kernel/sched/wait.c:192 sock_def_readable+0x200/0x5b4 net/core/sock.c:3564 unix_dgram_sendmsg+0xad4/0x1334 net/unix/af_unix.c:2309 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg net/socket.c:729 [inline] sock_write_iter+0x25c/0x378 net/socket.c:1179 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x540/0xa3c fs/read_write.c:686 ksys_write+0x120/0x210 fs/read_write.c:738 __do_sys_write fs/read_write.c:749 [inline] __se_sys_write fs/read_write.c:746 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:746 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 rcu: rcu_preempt kthread starved for 318 jiffies! g6673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:0 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00000010 Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5357 [inline] __schedule+0x13b0/0x2864 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0xb4/0x230 kernel/sched/core.c:7058 schedule_timeout+0x128/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x2b8/0x14e8 kernel/rcu/tree.c:2083 rcu_gp_kthread+0xc0/0x2f8 kernel/rcu/tree.c:2285 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 41 Comm: kworker/u8:2 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 Workqueue: events_unbound cfg80211_wiphy_work pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : kasan_check_range+0x4/0x2a4 mm/kasan/generic.c:188 lr : __asan_memcpy+0x3c/0x84 mm/kasan/shadow.c:105 sp : ffff800080016fb0 x29: ffff800080016fb0 x28: ffff0000ac51eb50 x27: ffff800092b87830 x26: dfff800000000000 x25: 1fffe000158a3d77 x24: dfff800000000000 x23: 0000000000000000 x22: ffff8000892d95c0 x21: ffff0000ac520168 x20: ffff0000ac51eb68 x19: 0000000000000030 x18: 00000000fb00e074 x17: 00000000000a0018 x16: ffff80008af6de48 x15: 0000000000000002 x14: 1fffe000158a4028 x13: 0000000000000000 x12: 0000000000000000 x11: ffff6000158a402a x10: 0000000000ff0100 x9 : 0000000000000000 x8 : 0000000000000000 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000892d95c0 x2 : 0000000000000000 x1 : 0000000000000030 x0 : ffff0000ac51eb68 Call trace: kasan_check_range+0x4/0x2a4 mm/kasan/generic.c:188 (P) __copy_skb_header+0xac/0x50c net/core/skbuff.c:1494 __skb_clone+0x6c/0x5e4 net/core/skbuff.c:1546 skb_clone+0x1e8/0x328 net/core/skbuff.c:2056 deliver_clone net/bridge/br_forward.c:125 [inline] maybe_deliver+0xac/0x178 net/bridge/br_forward.c:190 br_flood+0x294/0x5e8 net/bridge/br_forward.c:237 br_handle_frame_finish+0x1034/0x14c0 net/bridge/br_input.c:221 br_nf_hook_thresh+0x344/0x3d8 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0x87c/0xb98 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:318 [inline] br_nf_pre_routing_ipv6+0x2c4/0x5ac net/bridge/br_netfilter_ipv6.c:184 br_nf_pre_routing+0x578/0x1130 net/bridge/br_netfilter_hooks.c:508 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:283 [inline] br_handle_frame+0x7b0/0x10b8 net/bridge/br_input.c:434 __netif_receive_skb_core+0xe34/0x3850 net/core/dev.c:5866 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x78/0x2a8 net/core/dev.c:6092 process_backlog+0x60c/0x10e4 net/core/dev.c:6444 __napi_poll+0xb4/0x310 net/core/dev.c:7489 napi_poll net/core/dev.c:7552 [inline] net_rx_action+0x5f4/0xd58 net/core/dev.c:7679 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:68 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:73 do_softirq+0x90/0xf8 kernel/softirq.c:480 __local_bh_enable_ip+0x240/0x35c kernel/softirq.c:407 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x3c/0x4c kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] cfg80211_inform_single_bss_data+0xf54/0x1744 net/wireless/scan.c:2395 cfg80211_inform_bss_data+0x1ac/0x2fcc net/wireless/scan.c:3234 cfg80211_inform_bss_frame_data+0x32c/0x738 net/wireless/scan.c:3325 ieee80211_bss_info_update+0x640/0x8b8 net/mac80211/scan.c:226 ieee80211_rx_bss_info net/mac80211/ibss.c:1094 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1573 [inline] ieee80211_ibss_rx_queued_mgmt+0x13bc/0x240c net/mac80211/ibss.c:1600 ieee80211_iface_process_skb net/mac80211/iface.c:1699 [inline] ieee80211_iface_work+0x754/0x106c net/mac80211/iface.c:1753 cfg80211_wiphy_work+0x294/0x49c net/wireless/core.c:435 process_one_work+0x7e8/0x155c kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844