bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9929/1:b..l
rcu: (detected by 0, t=10503 jiffies, g=21457, q=384 ncpus=2)
task:syz-executor state:R running task stack:26752 pid:9929 tgid:9929 ppid:5860 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x1850/0x4c30 kernel/sched/core.c:6756
preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7078
irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:save_stack+0x11f/0x1f0
Code: 00 e8 15 74 76 ff 4c 89 f7 89 c6 8b 54 24 1c e8 97 d5 ed 02 41 89 c6 31 ff 89 c6 e8 ab b7 8a ff 45 85 f6 74 15 e8 61 b3 8a ff 1a e8 5a b3 8a ff 44 8b 35 b3 6f 3e 18 eb 19 e8 4c b3 8a ff 44
RSP: 0018:ffffc90003947820 EFLAGS: 00000293
RAX: ffffffff820b29bf RBX: ffff88802faf4180 RCX: ffff88802faf3c00
RDX: 0000000000000000 RSI: 0000000003a003dc RDI: 0000000000000000
RBP: ffffc90003947948 R08: ffffffff820b29b5 R09: 000000000000000d
R10: dffffc0000000000 R11: fffffbfff203cb27 R12: dffffc0000000000
R13: 1ffff92000728f08 R14: 0000000003a003dc R15: 1ffff11005f5e830
__reset_page_owner+0x76/0x430 mm/page_owner.c:297
reset_page_owner include/linux/page_owner.h:25 [inline]
free_pages_prepare mm/page_alloc.c:1127 [inline]
free_unref_page+0xdf9/0x1140 mm/page_alloc.c:2657
__slab_free+0x31b/0x3d0 mm/slub.c:4509
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329
kasan_slab_alloc include/linux/kasan.h:250 [inline]
slab_post_alloc_hook mm/slub.c:4104 [inline]
slab_alloc_node mm/slub.c:4153 [inline]
__do_kmalloc_node mm/slub.c:4282 [inline]
__kmalloc_noprof+0x236/0x4c0 mm/slub.c:4295
kmalloc_noprof include/linux/slab.h:905 [inline]
kmalloc_array_noprof include/linux/slab.h:946 [inline]
security_inode_init_security+0x126/0x480 security/security.c:1824
shmem_symlink+0x165/0x740 mm/shmem.c:3927
vfs_symlink+0x139/0x2e0 fs/namei.c:4669
do_symlinkat+0x222/0x3a0 fs/namei.c:4695
__do_sys_symlinkat fs/namei.c:4711 [inline]
__se_sys_symlinkat fs/namei.c:4708 [inline]
__x64_sys_symlinkat+0x95/0xb0 fs/namei.c:4708
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f972ad7fd87
RSP: 002b:00007ffe37851828 EFLAGS: 00000202 ORIG_RAX: 000000000000010a
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f972ad7fd87
RDX: 00007f972adf504a RSI: 00000000ffffff9c RDI: 00007f972adf3d01
RBP: 00007ffe3785185c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032
R13: 00000000000342a3 R14: 0000000000033dab R15: 00007ffe378518b0
rcu: rcu_preempt kthread starved for 6240 jiffies! g21457 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:25296 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x1850/0x4c30 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6848
schedule_timeout+0x15a/0x290 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045
rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247
kthread+0x2f2/0x390 kernel/kthread.c:389
ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5920 Comm: kworker/1:4 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker
RIP: 0010:br_mdb_entry_skb_get+0x201/0x9a0 net/bridge/br_multicast.c:159
Code: de 83 e6 08 31 ff e8 fe d4 f9 f6 83 e3 08 4c 8b 6c 24 20 75 0c e8 4f d1 f9 f6 31 db e9 8d 04 00 00 e8 43 d1 f9 f6 49 8d 5f 32 <48> 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 05 05 00 00 0f b6
RSP: 0018:ffffc90000a17fa0 EFLAGS: 00000246
RAX: ffffffff8a9c0b6d RBX: ffff8880436a0cb2 RCX: ffff888031929e00
RDX: 0000000000000100 RSI: 0000000000000040 RDI: 0000000000000000
RBP: ffffc90000a180b0 R08: ffffffff8a9c0abd R09: 1ffff110069681c2
R10: dffffc0000000000 R11: ffffed10069681c3 R12: dffffc0000000000
R13: 1ffff92000142ffc R14: ffff888034b410e8 R15: ffff8880436a0c80
FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f34f1400210 CR3: 000000007d826000 CR4: 0000000000350ef0
Call Trace:
br_handle_frame_finish+0xebf/0x1fe0 net/bridge/br_input.c:183
br_nf_hook_thresh+0x474/0x590
br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0
NF_HOOK include/linux/netfilter.h:314 [inline]
br_nf_pre_routing_ipv6+0x379/0x770 net/bridge/br_netfilter_ipv6.c:184
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:277 [inline]
br_handle_frame+0x9ff/0x1530 net/bridge/br_input.c:424
__netif_receive_skb_core+0x14ed/0x4690 net/core/dev.c:5566
__netif_receive_skb_one_core net/core/dev.c:5670 [inline]
__netif_receive_skb+0x12f/0x650 net/core/dev.c:5785
process_backlog+0x662/0x15b0 net/core/dev.c:6117
__napi_poll+0xcd/0x490 net/core/dev.c:6877
napi_poll net/core/dev.c:6946 [inline]
net_rx_action+0x89b/0x1240 net/core/dev.c:7068
handle_softirqs+0x2c7/0x980 kernel/softirq.c:554
do_softirq+0x11b/0x1e0 kernel/softirq.c:455
__local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:382
wg_receive_handshake_packet drivers/net/wireguard/receive.c:202 [inline]
wg_packet_handshake_receive_worker+0x7a5/0xf50 drivers/net/wireguard/receive.c:213
process_one_work kernel/workqueue.c:3229 [inline]
process_scheduled_works+0xa65/0x1850 kernel/workqueue.c:3310
worker_thread+0x870/0xd30 kernel/workqueue.c:3391
kthread+0x2f2/0x390 kernel/kthread.c:389
ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
net_ratelimit: 10983 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:6e:fe:67:ef:1a, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:6e:fe:67:ef:1a, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:6e:fe:67:ef:1a, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)