bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:a0:d5:0a:b6:ae, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7147/2:b..l rcu: (detected by 1, t=10502 jiffies, g=16265, q=856 ncpus=2) task:syz.4.742 state:R running task stack:24952 pid:7147 tgid:7123 ppid:5217 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5322 [inline] __schedule+0x1843/0x4ae0 kernel/sched/core.c:6682 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7004 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:kasan_mem_to_shadow include/linux/kasan.h:61 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:130 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:161 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline] RIP: 0010:kasan_check_range+0x4f/0x290 mm/kasan/generic.c:189 Code: 89 fd 48 c1 ed 2f 81 fd fe ff 01 00 0f 86 43 02 00 00 48 89 fb 48 c1 eb 03 49 ba 00 00 00 00 00 fc ff df 4e 8d 1c 13 49 ff c8 <4d> 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c RSP: 0018:ffffc900137c70f8 EFLAGS: 00000283 RAX: 0000000000000001 RBX: 1ffffd40002e503e RCX: ffffffff81ccf884 RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea00017281f4 RBP: 000000000001ffff R08: ffffea00017281f7 R09: 1ffffd40002e503e R10: dffffc0000000000 R11: fffff940002e503e R12: dffffc0000000000 R13: 0000000000000600 R14: ffffffff81ccf78e R15: ffffea00017281f4 instrument_atomic_read_write include/linux/instrumented.h:96 [inline] atomic_add_unless include/linux/atomic/atomic-instrumented.h:1517 [inline] page_ref_add_unless include/linux/page_ref.h:238 [inline] folio_ref_add_unless include/linux/page_ref.h:248 [inline] folio_try_get+0x114/0x350 include/linux/page_ref.h:264 find_get_entry mm/filemap.c:2006 [inline] find_lock_entries+0x2e8/0xef0 mm/filemap.c:2096 shmem_undo_range+0x2c2/0x1cf0 mm/shmem.c:1014 shmem_truncate_range mm/shmem.c:1144 [inline] shmem_fallocate+0x492/0x11d0 mm/shmem.c:3419 vfs_fallocate+0x569/0x6e0 fs/open.c:333 madvise_remove mm/madvise.c:1012 [inline] madvise_vma_behavior mm/madvise.c:1039 [inline] madvise_walk_vmas mm/madvise.c:1274 [inline] do_madvise+0x1ee3/0x4720 mm/madvise.c:1461 __do_sys_madvise mm/madvise.c:1477 [inline] __se_sys_madvise mm/madvise.c:1475 [inline] __x64_sys_madvise+0xa6/0xc0 mm/madvise.c:1475 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0aa6f7dff9 RSP: 002b:00007f0aa7d7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c RAX: ffffffffffffffda RBX: 00007f0aa7136058 RCX: 00007f0aa6f7dff9 RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000000020000000 RBP: 00007f0aa6ff0296 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000001 R14: 00007f0aa7136058 R15: 00007ffea55c7218 rcu: rcu_preempt kthread starved for 4323 jiffies! g16265 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:25888 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5322 [inline] __schedule+0x1843/0x4ae0 kernel/sched/core.c:6682 __schedule_loop kernel/sched/core.c:6759 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6774 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5296 Comm: kworker/0:7 Not tainted 6.12.0-rc2-syzkaller-00323-gcfea70e835b9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: wg-crypt-wg0 wg_packet_tx_worker RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x2f/0x70 kernel/kcov.c:217 Code: 8b 04 24 65 48 8b 0c 25 80 d7 03 00 65 8b 15 70 f0 6e 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 <74> 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b RSP: 0018:ffffc90000006ff8 EFLAGS: 00000246 RAX: ffffffff8a62e518 RBX: ffff88807cfdb8b8 RCX: ffff888025249e00 RDX: 0000000000000100 RSI: 00000000fffffffd RDI: 00000000fffffffd RBP: 0000000000000003 R08: ffffffff8a62e50d R09: ffffc90000007330 R10: ffffc90000007320 R11: fffff52000000e32 R12: ffff88807ccd1654 R13: 00000000fffffffd R14: 1ffff1100f9fb719 R15: 1ffff1100f9fb717 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0e5f69d9c0 CR3: 00000000303b4000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: find_match+0x1f8/0xc10 net/ipv6/route.c:753 __find_rr_leaf+0x275/0x8e0 net/ipv6/route.c:832 find_rr_leaf net/ipv6/route.c:853 [inline] rt6_select net/ipv6/route.c:897 [inline] fib6_table_lookup+0x413/0xbb0 net/ipv6/route.c:2195 ip6_pol_route+0x273/0x15d0 net/ipv6/route.c:2231 pol_lookup_func include/net/ip6_fib.h:616 [inline] fib6_rule_lookup+0x58c/0x790 net/ipv6/fib6_rules.c:117 ip6_route_input_lookup net/ipv6/route.c:2300 [inline] ip6_route_input+0x859/0xd90 net/ipv6/route.c:2596 ip6_rcv_finish+0x144/0x180 net/ipv6/ip6_input.c:77 NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314 __netif_receive_skb_one_core net/core/dev.c:5666 [inline] __netif_receive_skb+0x1ea/0x650 net/core/dev.c:5779 process_backlog+0x662/0x15b0 net/core/dev.c:6111 __napi_poll+0xcb/0x490 net/core/dev.c:6775 napi_poll net/core/dev.c:6844 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6966 handle_softirqs+0x2c5/0x980 kernel/softirq.c:554 do_softirq+0x11b/0x1e0 kernel/softirq.c:455 __local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:382 wg_packet_create_data_done drivers/net/wireguard/send.c:247 [inline] wg_packet_tx_worker+0x160/0x810 drivers/net/wireguard/send.c:276 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 net_ratelimit: 23092 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:a0:d5:0a:b6:ae, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:a0:d5:0a:b6:ae, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:a0:d5:0a:b6:ae, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 27540 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:a0:d5:0a:b6:ae, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:a0:d5:0a:b6:ae, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:a0:d5:0a:b6:ae, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)