bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:32:08:f6:63:d4, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P10496/1:b..l P15207/1:b..l P15047/1:b..l P15372/1:b..l P15337/1:b..l
rcu: 	(detected by 0, t=10502 jiffies, g=81269, q=881 ncpus=1)
task:syz.5.2064      state:R  running task     stack:22488 pid:15337 tgid:15337 ppid:10496  task_flags:0x400640 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xfee/0x6120 kernel/sched/core.c:6911
 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7238
 irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:lock_acquire+0x5e/0x380 kernel/locking/lockdep.c:5872
Code: 05 bb 02 29 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 86 5f f5 0e 0f 82 c2 02 00 00 8b 35 4e 93 f5 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 5d 02 29 12 0f 85 02 03 00 00 48 83 c4
RSP: 0018:ffffc90004796068 EFLAGS: 00000206
RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000000 RSI: ffffffff8de59622 RDI: ffffffff8c1b0620
RBP: ffffffff8e7e74e0 R08: 000000003bbd47ad R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 rcu_lock_acquire include/linux/rcupdate.h:312 [inline]
 rcu_read_lock include/linux/rcupdate.h:850 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1193 [inline]
 unwind_next_frame+0xd1/0x1ea0 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_stack+0x162/0x1e0 mm/page_owner.c:165
 __set_page_owner+0x8c/0x540 mm/page_owner.c:341
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x153/0x170 mm/page_alloc.c:1889
 prep_new_page mm/page_alloc.c:1897 [inline]
 get_page_from_freelist+0x111d/0x3140 mm/page_alloc.c:3962
 __alloc_frozen_pages_noprof+0x27c/0x2ba0 mm/page_alloc.c:5250
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2484
 folio_alloc_mpol_noprof+0x36/0x340 mm/mempolicy.c:2503
 shmem_alloc_folio+0x135/0x160 mm/shmem.c:1930
 shmem_alloc_and_add_folio+0x833/0xd40 mm/shmem.c:1959
 shmem_get_folio_gfp+0xab1/0x1900 mm/shmem.c:2555
 shmem_fault+0x1f9/0xa20 mm/shmem.c:2768
 __do_fault+0x10d/0x550 mm/memory.c:5364
 do_read_fault mm/memory.c:5799 [inline]
 do_fault+0xabb/0x1990 mm/memory.c:5933
 do_pte_missing mm/memory.c:4477 [inline]
 handle_pte_fault mm/memory.c:6317 [inline]
 __handle_mm_fault+0x180f/0x2b60 mm/memory.c:6455
 handle_mm_fault+0x36d/0xa20 mm/memory.c:6624
 faultin_page mm/gup.c:1126 [inline]
 __get_user_pages+0xf9c/0x34d0 mm/gup.c:1428
 __get_user_pages_locked mm/gup.c:1692 [inline]
 get_dump_page+0x27e/0x3d0 mm/gup.c:2192
 dump_user_range+0x18d/0xb50 fs/coredump.c:1367
 elf_core_dump+0x2d5f/0x3d10 fs/binfmt_elf.c:2110
 coredump_write fs/coredump.c:1050 [inline]
 do_coredump fs/coredump.c:1127 [inline]
 vfs_coredump+0x27bc/0x5570 fs/coredump.c:1201
 get_signal+0x1f2a/0x21e0 kernel/signal.c:3019
 arch_do_signal_or_restart+0x91/0x770 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:98 [inline]
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
 irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:270 [inline]
 irqentry_exit_to_user_mode include/linux/irq-entry-common.h:339 [inline]
 irqentry_exit+0x1f8/0x670 kernel/entry/common.c:219
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x0
RSP: 002b:000000000000000a EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007fd660015fa0 RCX: 00007fd65fd9c799
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46
RBP: 00007fd65fe32c99 R08: 0000000000000002 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd660016038 R14: 00007fd660015fa0 R15: 00007ffe9d1269d8
 </TASK>
task:syz.4.2074      state:R  running task     stack:23560 pid:15372 tgid:15372 ppid:15371  task_flags:0x400640 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xfee/0x6120 kernel/sched/core.c:6911
 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7238
 irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:unwind_next_frame+0x182/0x1ea0 arch/x86/kernel/unwind_orc.c:510
Code: f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 f7 0a 00 00 48 89 e9 41 0f b6 45 35 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 <0f> 85 8b 16 00 00 4d 8b 7d 48 3c 01 49 83 df 00 4d 85 ff 0f 84 f0
RSP: 0018:ffffc90003ba6378 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 1ffff92000774c86
RDX: dffffc0000000000 RSI: ffffffff8c1b05a0 RDI: ffffffff8e12d8e0
RBP: ffffc90003ba6430 R08: 000000009aa1c946 R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000000000 R12: ffffc90003ba6438
R13: ffffc90003ba63e8 R14: ffffc90003ba641d R15: ffff8880318b8000
 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_stack+0x162/0x1e0 mm/page_owner.c:165
 __set_page_owner+0x8c/0x540 mm/page_owner.c:341
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x153/0x170 mm/page_alloc.c:1889
 prep_new_page mm/page_alloc.c:1897 [inline]
 get_page_from_freelist+0x111d/0x3140 mm/page_alloc.c:3962
 __alloc_frozen_pages_noprof+0x27c/0x2ba0 mm/page_alloc.c:5250
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2484
 folio_alloc_mpol_noprof+0x36/0x340 mm/mempolicy.c:2503
 shmem_alloc_folio+0x135/0x160 mm/shmem.c:1930
 shmem_alloc_and_add_folio+0x371/0xd40 mm/shmem.c:1972
 shmem_get_folio_gfp+0x6ab/0x1900 mm/shmem.c:2567
 shmem_get_folio mm/shmem.c:2673 [inline]
 shmem_write_begin+0x1a4/0x420 mm/shmem.c:3327
 generic_perform_write+0x292/0xa40 mm/filemap.c:4319
 shmem_file_write_iter+0x10e/0x140 mm/shmem.c:3502
 __kernel_write_iter+0x2ac/0x920 fs/read_write.c:621
 dump_emit_page fs/coredump.c:1299 [inline]
 dump_user_range+0x3f9/0xb50 fs/coredump.c:1373
 elf_core_dump+0x2d5f/0x3d10 fs/binfmt_elf.c:2110
 coredump_write fs/coredump.c:1050 [inline]
 do_coredump fs/coredump.c:1127 [inline]
 vfs_coredump+0x27bc/0x5570 fs/coredump.c:1201
 get_signal+0x1f2a/0x21e0 kernel/signal.c:3019
 arch_do_signal_or_restart+0x91/0x770 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:98 [inline]
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
 irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:270 [inline]
 irqentry_exit_to_user_mode include/linux/irq-entry-common.h:339 [inline]
 irqentry_exit+0x1f8/0x670 kernel/entry/common.c:219
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x0
RSP: 002b:000000000000000a EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007fca9c215fa0 RCX: 00007fca9bf9c799
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46
RBP: 00007fca9c032c99 R08: 0000000000000002 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fca9c216038 R14: 00007fca9c215fa0 R15: 00007fffdcc0f288
 </TASK>
task:syz.2.2003      state:R  running task     stack:21256 pid:15047 tgid:15047 ppid:5821   task_flags:0x400e40 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xfee/0x6120 kernel/sched/core.c:6911
 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7238
 irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__orc_find+0x97/0xf0 arch/x86/kernel/unwind_orc.c:110
Code: b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 <4d> 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 c4 08 5b 5d 41
RSP: 0018:ffffc90004425b70 EFLAGS: 00000297
RAX: ffffffff9185e7b4 RBX: ffffffff90faf184 RCX: dffffc0000000000
RDX: ffffffff826548c3 RSI: 0000000000000000 RDI: ffffffff90faf184
RBP: ffffffff90faf188 R08: ffffffff9185e7ba R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000016553 R12: ffffffff90faf184
R13: ffffffff82655389 R14: ffffffff90faf184 R15: ffffffff90faf184
 orc_find arch/x86/kernel/unwind_orc.c:238 [inline]
 unwind_next_frame+0x2ec/0x1ea0 arch/x86/kernel/unwind_orc.c:510
 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_stack+0x162/0x1e0 mm/page_owner.c:165
 __reset_page_owner+0x84/0x190 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1433 [inline]
 free_unref_folios+0xaea/0x1790 mm/page_alloc.c:3040
 shrink_folio_list+0x2f10/0x6000 mm/vmscan.c:1610
 shrink_inactive_list mm/vmscan.c:2023 [inline]
 shrink_list mm/vmscan.c:2260 [inline]
 shrink_lruvec+0xf5a/0x2a50 mm/vmscan.c:5818
 shrink_node_memcgs mm/vmscan.c:6020 [inline]
 shrink_node+0x8e7/0x3e20 mm/vmscan.c:6061
 shrink_zones mm/vmscan.c:6300 [inline]
 do_try_to_free_pages+0x340/0x1870 mm/vmscan.c:6362
 try_to_free_mem_cgroup_pages+0x2b2/0x820 mm/vmscan.c:6683
 try_charge_memcg+0x3e3/0xc90 mm/memcontrol.c:2414
 try_charge mm/memcontrol.c:2556 [inline]
 charge_memcg+0xa6/0x280 mm/memcontrol.c:4744
 __mem_cgroup_charge+0x2b/0x1e0 mm/memcontrol.c:4761
 mem_cgroup_charge include/linux/memcontrol.h:664 [inline]
 shmem_alloc_and_add_folio+0x451/0xd40 mm/shmem.c:1982
 shmem_get_folio_gfp+0x6ab/0x1900 mm/shmem.c:2567
 shmem_get_folio mm/shmem.c:2673 [inline]
 shmem_write_begin+0x1a4/0x420 mm/shmem.c:3327
 generic_perform_write+0x292/0xa40 mm/filemap.c:4319
 shmem_file_write_iter+0x10e/0x140 mm/shmem.c:3502
 __kernel_write_iter+0x2ac/0x920 fs/read_write.c:621
 dump_emit_page fs/coredump.c:1299 [inline]
 dump_user_range+0x3f9/0xb50 fs/coredump.c:1373
 elf_core_dump+0x2d5f/0x3d10 fs/binfmt_elf.c:2110
 coredump_write fs/coredump.c:1050 [inline]
 do_coredump fs/coredump.c:1127 [inline]
 vfs_coredump+0x27bc/0x5570 fs/coredump.c:1201
 get_signal+0x1f2a/0x21e0 kernel/signal.c:3019
 arch_do_signal_or_restart+0x91/0x770 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:98 [inline]
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
 irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:270 [inline]
 irqentry_exit_to_user_mode include/linux/irq-entry-common.h:339 [inline]
 irqentry_exit+0x1f8/0x670 kernel/entry/common.c:219
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x0
RSP: 002b:000000000000000a EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f50e0015fa0 RCX: 00007f50dfd9c799
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46
RBP: 00007f50dfe32c99 R08: 0000000000000002 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f50e0016038 R14: 00007f50e0015fa0 R15: 00007fff22586c48
 </TASK>
task:syz.2.2036      state:R  running task     stack:20344 pid:15207 tgid:15207 ppid:5821   task_flags:0x400640 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xfee/0x6120 kernel/sched/core.c:6911
 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7238
 irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:on_stack arch/x86/include/asm/stacktrace.h:58 [inline]
RIP: 0010:stack_access_ok+0x24/0x1d0 arch/x86/kernel/unwind_orc.c:409
Code: 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 55 41 54 49 89 d4 48 89 fa 55 48 c1 ea 03 48 89 f5 53 48 89 fb 48 83 ec 08 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 3f 01 00 00 8b 13 85 d2 74 65
RSP: 0018:ffffc90004d86348 EFLAGS: 00000296
RAX: dffffc0000000000 RBX: ffffc90004d863e8 RCX: ffffffff917d4b4a
RDX: 1ffff920009b0c7d RSI: ffffc90004d86510 RDI: ffffc90004d863e8
RBP: ffffc90004d86510 R08: ffffffff917d4b4e R09: 0000000000000007
R10: 0000000000000200 R11: 000000000000f2c2 R12: 0000000000000008
R13: ffffc90004d863e8 R14: ffffc90004d86518 R15: ffffc90004d8641c
 deref_stack_reg arch/x86/kernel/unwind_orc.c:419 [inline]
 unwind_next_frame+0xb0b/0x1ea0 arch/x86/kernel/unwind_orc.c:600
 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_stack+0x162/0x1e0 mm/page_owner.c:165
 __set_page_owner+0x8c/0x540 mm/page_owner.c:341
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x153/0x170 mm/page_alloc.c:1889
 prep_new_page mm/page_alloc.c:1897 [inline]
 get_page_from_freelist+0x111d/0x3140 mm/page_alloc.c:3962
 __alloc_frozen_pages_noprof+0x27c/0x2ba0 mm/page_alloc.c:5250
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2484
 folio_alloc_mpol_noprof+0x36/0x340 mm/mempolicy.c:2503
 shmem_alloc_folio+0x135/0x160 mm/shmem.c:1930
 shmem_alloc_and_add_folio+0x371/0xd40 mm/shmem.c:1972
 shmem_get_folio_gfp+0x6ab/0x1900 mm/shmem.c:2567
 shmem_get_folio mm/shmem.c:2673 [inline]
 shmem_write_begin+0x1a4/0x420 mm/shmem.c:3327
 generic_perform_write+0x292/0xa40 mm/filemap.c:4319
 shmem_file_write_iter+0x10e/0x140 mm/shmem.c:3502
 __kernel_write_iter+0x2ac/0x920 fs/read_write.c:621
 dump_emit_page fs/coredump.c:1299 [inline]
 dump_user_range+0x3f9/0xb50 fs/coredump.c:1373
 elf_core_dump+0x2d5f/0x3d10 fs/binfmt_elf.c:2110
 coredump_write fs/coredump.c:1050 [inline]
 do_coredump fs/coredump.c:1127 [inline]
 vfs_coredump+0x27bc/0x5570 fs/coredump.c:1201
 get_signal+0x1f2a/0x21e0 kernel/signal.c:3019
 arch_do_signal_or_restart+0x91/0x770 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:98 [inline]
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
 irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:270 [inline]
 irqentry_exit_to_user_mode include/linux/irq-entry-common.h:339 [inline]
 irqentry_exit+0x1f8/0x670 kernel/entry/common.c:219
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x7f50dfd9c7a1
RSP: 002b:0000000080010007 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f50e0015fa0 RCX: 00007f50dfd9c799
RDX: 9999999999999999 RSI: 0000000080010007 RDI: 0000000000000936
RBP: 00007f50dfe32c99 R08: 0000000000000004 R09: 0000000000000000
R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f50e0016038 R14: 00007f50e0015fa0 R15: 00007fff22586c48
 </TASK>
task:syz-executor    state:R  running task     stack:24008 pid:10496 tgid:10496 ppid:10491  task_flags:0x400140 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xfee/0x6120 kernel/sched/core.c:6911
 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7238
 irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__orc_find+0x52/0xf0 arch/x86/kernel/unwind_orc.c:101
Code: fc 72 7b 48 b9 00 00 00 00 00 fc ff df 49 89 ff 48 89 fd eb 0c 48 8d 6b 04 49 89 df 49 39 ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 <48> c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da
RSP: 0018:ffffc9000528f6f8 EFLAGS: 00000206
RAX: ffffffff916eb816 RBX: 0000000000000001 RCX: dffffc0000000000
RDX: 0000000000000084 RSI: 0000000000000084 RDI: ffffffff90eb7c70
RBP: ffffffff90eb7c70 R08: ffffffff916eb8e2 R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000000001 R12: ffffffff90eb7cf4
R13: ffffffff8100012f R14: ffffffff90eb7c70 R15: ffffffff90eb7c70
 orc_find arch/x86/kernel/unwind_orc.c:238 [inline]
 unwind_next_frame+0x2ec/0x1ea0 arch/x86/kernel/unwind_orc.c:510
 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __do_kmalloc_node mm/slub.c:5260 [inline]
 __kvmalloc_node_noprof+0x360/0xa00 mm/slub.c:6752
 xt_alloc_table_info+0x44/0xa0 net/netfilter/x_tables.c:1193
 do_replace net/ipv6/netfilter/ip6_tables.c:1143 [inline]
 do_ip6t_set_ctl+0x488/0xb00 net/ipv6/netfilter/ip6_tables.c:1644
 nf_setsockopt+0x8d/0xf0 net/netfilter/nf_sockopt.c:101
 ipv6_setsockopt+0x135/0x170 net/ipv6/ipv6_sockglue.c:978
 tcp_setsockopt+0xa7/0x100 net/ipv4/tcp.c:4218
 do_sock_setsockopt+0xf3/0x1d0 net/socket.c:2322
 __sys_setsockopt+0x119/0x190 net/socket.c:2347
 __do_sys_setsockopt net/socket.c:2353 [inline]
 __se_sys_setsockopt net/socket.c:2350 [inline]
 __x64_sys_setsockopt+0xbd/0x160 net/socket.c:2350
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd65fd9dfda
RSP: 002b:00007ffe9d126648 EFLAGS: 00000206 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007ffe9d1266d0 RCX: 00007fd65fd9dfda
RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000000000558 R09: 0000000000000000
R10: 00007fd65ffe8be0 R11: 0000000000000206 R12: 00007fd65ffe8b80
R13: 00007ffe9d12666c R14: 0000000000000000 R15: 00007fd65ffe9fc0
 </TASK>
rcu: rcu_preempt kthread starved for 859 jiffies! g81269 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27736 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xfee/0x6120 kernel/sched/core.c:6911
 __schedule_loop kernel/sched/core.c:6993 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7008
 schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2095
 rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2297
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 12439 Comm: kworker/u10:12 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker
RIP: 0010:lock_release+0x19e/0x320 kernel/locking/lockdep.c:5893
Code: ff 65 0f c1 05 4b 43 29 12 83 f8 01 0f 85 3d 01 00 00 9c 58 f6 c4 02 0f 85 28 01 00 00 41 f7 c6 00 02 00 00 0f 85 de 00 00 00 <48> 8b 44 24 10 65 48 2b 05 9d fb 28 12 0f 85 63 01 00 00 48 83 c4
RSP: 0018:ffffc90000006530 EFLAGS: 00000206
RAX: 0000000000000046 RBX: ffffffff8e7e74e0 RCX: ffffc9000000653c
RDX: 0000000000000009 RSI: ffffffff8de59622 RDI: ffffffff8c1b0620
RBP: ffffffff81b7b2fe R08: 0000000000000001 R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000086087 R12: ffff88805e25db80
R13: ffffc900000065e8 R14: 0000000000000202 R15: 000000000000000a
FS:  0000000000000000(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f869378be80 CR3: 0000000035b0c000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 rcu_lock_release include/linux/rcupdate.h:322 [inline]
 rcu_read_unlock include/linux/rcupdate.h:881 [inline]
 class_rcu_destructor include/linux/rcupdate.h:1193 [inline]
 unwind_next_frame+0x3c3/0x1ea0 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 unpoison_slab_object mm/kasan/common.c:340 [inline]
 __kasan_slab_alloc+0x89/0x90 mm/kasan/common.c:366
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4538 [inline]
 slab_alloc_node mm/slub.c:4866 [inline]
 kmem_cache_alloc_noprof+0x241/0x6e0 mm/slub.c:4873
 skb_clone+0x190/0x400 net/core/skbuff.c:2120
 dev_queue_xmit_nit+0x255/0xa60 net/core/dev.c:2574
 xmit_one net/core/dev.c:3867 [inline]
 dev_hard_start_xmit+0x2f5/0x7d0 net/core/dev.c:3887
 __dev_queue_xmit+0x32c1/0x4800 net/core/dev.c:4837
 dev_queue_xmit include/linux/netdevice.h:3384 [inline]
 br_dev_queue_push_xmit+0x360/0x550 net/bridge/br_forward.c:53
 br_nf_dev_queue_xmit+0x741/0x2a20 net/bridge/br_netfilter_hooks.c:920
 NF_HOOK include/linux/netfilter.h:318 [inline]
 NF_HOOK include/linux/netfilter.h:312 [inline]
 br_nf_post_routing+0xcbb/0x16a0 net/bridge/br_netfilter_hooks.c:966
 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
 nf_hook_slow+0xbf/0x220 net/netfilter/core.c:623
 nf_hook include/linux/netfilter.h:273 [inline]
 NF_HOOK include/linux/netfilter.h:316 [inline]
 br_forward_finish+0x261/0x4d0 net/bridge/br_forward.c:66
 br_nf_hook_thresh+0x30d/0x420 net/bridge/br_netfilter_hooks.c:1167
 br_nf_forward_finish+0x693/0xb30 net/bridge/br_netfilter_hooks.c:662
 NF_HOOK include/linux/netfilter.h:318 [inline]
 NF_HOOK include/linux/netfilter.h:312 [inline]
 br_nf_forward_ip.part.0+0x61e/0x820 net/bridge/br_netfilter_hooks.c:716
 br_nf_forward_ip net/bridge/br_netfilter_hooks.c:676 [inline]
 br_nf_forward+0xfe5/0x19f0 net/bridge/br_netfilter_hooks.c:773
 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
 nf_hook_slow+0xbf/0x220 net/netfilter/core.c:623
 nf_hook include/linux/netfilter.h:273 [inline]
 NF_HOOK include/linux/netfilter.h:316 [inline]
 __br_forward+0x2f6/0x970 net/bridge/br_forward.c:115
 deliver_clone net/bridge/br_forward.c:131 [inline]
 br_flood+0x37f/0x650 net/bridge/br_forward.c:250
 br_handle_frame_finish+0xff4/0x1f60 net/bridge/br_input.c:229
 br_nf_hook_thresh+0x30d/0x420 net/bridge/br_netfilter_hooks.c:1167
 br_nf_pre_routing_finish_ipv6+0x769/0xfb0 net/bridge/br_netfilter_ipv6.c:154
 NF_HOOK include/linux/netfilter.h:318 [inline]
 br_nf_pre_routing_ipv6+0x39c/0x8b0 net/bridge/br_netfilter_ipv6.c:184
 br_nf_pre_routing+0x90d/0x1550 net/bridge/br_netfilter_hooks.c:508
 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:291 [inline]
 br_handle_frame+0xcdd/0x1520 net/bridge/br_input.c:442
 __netif_receive_skb_core.constprop.0+0x6c5/0x3550 net/core/dev.c:6051
 __netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:6162
 __netif_receive_skb+0x1f/0x120 net/core/dev.c:6277
 process_backlog+0x37a/0x1580 net/core/dev.c:6628
 __napi_poll.constprop.0+0xaf/0x450 net/core/dev.c:7692
 napi_poll net/core/dev.c:7755 [inline]
 net_rx_action+0xa40/0xf20 net/core/dev.c:7912
 handle_softirqs+0x1eb/0x9e0 kernel/softirq.c:622
 do_softirq kernel/softirq.c:523 [inline]
 do_softirq+0xac/0xe0 kernel/softirq.c:510
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0xf8/0x120 kernel/softirq.c:450
 spin_unlock_bh include/linux/spinlock.h:395 [inline]
 wg_index_hashtable_insert+0x105/0x9f0 drivers/net/wireguard/peerlookup.c:126
 wg_noise_handshake_create_initiation+0x4fc/0x610 drivers/net/wireguard/noise.c:569
 wg_packet_send_handshake_initiation+0x19c/0x360 drivers/net/wireguard/send.c:34
 wg_packet_handshake_send_worker+0x1c/0x30 drivers/net/wireguard/send.c:51
 process_one_work+0xa23/0x19a0 kernel/workqueue.c:3276
 process_scheduled_works kernel/workqueue.c:3359 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3440
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
net_ratelimit: 6162 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:32:08:f6:63:d4, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:32:08:f6:63:d4, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:32:08:f6:63:d4, vlan:0)
net_ratelimit: 6753 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:32:08:f6:63:d4, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:32:08:f6:63:d4, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)