bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9243/1:b..l rcu: (detected by 1, t=10503 jiffies, g=166765, q=3148 ncpus=2) task:syz.0.9972 state:R running task stack:25528 pid:9243 tgid:9240 ppid:4607 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0x15dd/0x52d0 kernel/sched/core.c:6908 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7235 irqentry_exit+0x599/0x620 kernel/entry/common.c:239 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_acquire+0x20b/0x2e0 kernel/locking/lockdep.c:5872 Code: e9 30 ff ff ff e8 65 4d 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e1 6a 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 46 33 0f 0a cc 48 8d 3d 6e 65 73 RSP: 0018:ffffc90003d96e18 EFLAGS: 00000286 RAX: f475f25cbbc6c300 RBX: 0000000000000246 RCX: 0000000000000046 RDX: 0000000089ec4413 RSI: ffffffff8e1649f3 RDI: ffffffff8c27b280 RBP: 0000000000000000 R08: ffffffff81767a45 R09: ffffffff8e7602e0 R10: ffffc90003d96f78 R11: ffffffff81b0bb70 R12: 0000000000000002 R13: ffffffff8e7602e0 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:312 [inline] rcu_read_lock include/linux/rcupdate.h:850 [inline] class_rcu_constructor include/linux/rcupdate.h:1193 [inline] unwind_next_frame+0xc2/0x23c0 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1433 [inline] __free_frozen_pages+0xc2b/0xdb0 mm/page_alloc.c:2978 __slab_free+0x263/0x2b0 mm/slub.c:5551 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:406 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5238 [inline] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 mm/slub.c:5346 __kmemdup_nul mm/util.c:64 [inline] kstrdup+0x42/0x100 mm/util.c:84 __kernfs_new_node+0xa9/0x8e0 fs/kernfs/dir.c:633 kernfs_new_node+0x102/0x210 fs/kernfs/dir.c:718 __kernfs_create_file+0x4b/0x2e0 fs/kernfs/file.c:1057 sysfs_add_file_mode_ns+0x238/0x300 fs/sysfs/file.c:313 create_files fs/sysfs/group.c:82 [inline] internal_create_group+0x673/0x1180 fs/sysfs/group.c:189 internal_create_groups fs/sysfs/group.c:229 [inline] sysfs_create_groups+0x59/0x120 fs/sysfs/group.c:255 setup_port drivers/infiniband/core/sysfs.c:1202 [inline] ib_setup_port_attrs+0xf9c/0x2380 drivers/infiniband/core/sysfs.c:1388 add_one_compat_dev+0x448/0x650 drivers/infiniband/core/device.c:977 rdma_dev_init_net+0x243/0x2f0 drivers/infiniband/core/device.c:1193 ops_init+0x35c/0x5c0 net/core/net_namespace.c:137 setup_net+0x118/0x340 net/core/net_namespace.c:446 copy_net_ns+0x50e/0x730 net/core/net_namespace.c:581 create_new_namespaces+0x3e7/0x6a0 kernel/nsproxy.c:130 unshare_nsproxy_namespaces+0x11a/0x160 kernel/nsproxy.c:226 ksys_unshare+0x51d/0x930 kernel/fork.c:3174 __do_sys_unshare kernel/fork.c:3245 [inline] __se_sys_unshare kernel/fork.c:3243 [inline] __x64_sys_unshare+0x38/0x50 kernel/fork.c:3243 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f299ad9c799 RSP: 002b:00007f299bc8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007f299b016090 RCX: 00007f299ad9c799 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 RBP: 00007f299ae32c99 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f299b016128 R14: 00007f299b016090 R15: 00007ffd5df91368 rcu: rcu_preempt kthread starved for 349 jiffies! g166765 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27656 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0x15dd/0x52d0 kernel/sched/core.c:6908 __schedule_loop kernel/sched/core.c:6990 [inline] schedule+0x164/0x360 kernel/sched/core.c:7005 schedule_timeout+0x158/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x312/0x11d0 kernel/rcu/tree.c:2095 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 6724 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker RIP: 0010:match_held_lock+0x7b/0xb0 kernel/locking/lockdep.c:5337 Code: c7 c2 10 c4 c4 93 48 29 d0 48 c1 f8 03 48 ba 29 5c 8f c2 f5 28 5c 8f 48 0f af d0 bb 01 00 00 00 48 39 ca 74 02 31 db 89 d8 5b <41> 5e c3 cc cc cc cc cc 90 e8 c7 47 fd f8 85 c0 74 1c 83 3d f0 f2 RSP: 0018:ffffc90000007668 EFLAGS: 00000046 RAX: 0000000000000001 RBX: ffff88804ad848f8 RCX: 0000000080000101 RDX: 0000000000000100 RSI: ffffffff8e7602e0 RDI: ffff88804ad848f8 RBP: 00000000ffffffff R08: ffff88804ad83d00 R09: 0000000000000004 R10: 0000000000000003 R11: 0000000000000100 R12: 0000000000000246 R13: ffff88804ad83d00 R14: ffffffff8e7602e0 R15: 0000000000000004 FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0ea5000000 CR3: 00000000356fc000 CR4: 00000000003526f0 Call Trace: __lock_is_held kernel/locking/lockdep.c:5601 [inline] lock_is_held_type+0x89/0x150 kernel/locking/lockdep.c:5940 skb_dst_set_noref include/linux/skbuff.h:1235 [inline] br_nf_pre_routing_finish_ipv6+0x720/0xd70 net/bridge/br_netfilter_ipv6.c:148 NF_HOOK include/linux/netfilter.h:318 [inline] br_nf_pre_routing_ipv6+0x374/0x6f0 net/bridge/br_netfilter_ipv6.c:184 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0x1277/0x1510 net/bridge/br_input.c:442 __netif_receive_skb_core+0x98f/0x31a0 net/core/dev.c:6051 __netif_receive_skb_one_core net/core/dev.c:6162 [inline] __netif_receive_skb net/core/dev.c:6277 [inline] process_backlog+0x76d/0x1950 net/core/dev.c:6628 __napi_poll+0xae/0x340 net/core/dev.c:7692 napi_poll net/core/dev.c:7755 [inline] net_rx_action+0x627/0xf70 net/core/dev.c:7912 handle_softirqs+0x22a/0x870 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 blake2s_compress+0xf9/0x1eb0 lib/crypto/x86/blake2s.h:42 blake2s_final+0x116/0x270 lib/crypto/blake2s.c:142 mix_hash drivers/net/wireguard/noise.c:439 [inline] message_ephemeral+0x1b2/0x310 drivers/net/wireguard/noise.c:492 wg_noise_handshake_create_initiation+0x257/0x830 drivers/net/wireguard/noise.c:545 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline] wg_packet_handshake_send_worker+0x18d/0x350 drivers/net/wireguard/send.c:51 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0xb02/0x1830 kernel/workqueue.c:3358 worker_thread+0xa50/0xfc0 kernel/workqueue.c:3439 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 13619 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) net_ratelimit: 14816 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:c6:63:cb:48:1a, vlan:0)