bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8938/3:b..l
rcu: (detected by 1, t=10503 jiffies, g=33673, q=674 ncpus=2)
task:syz.3.598 state:R running task stack:23608 pid:8938 tgid:8929 ppid:5878 task_flags:0x400140 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x1798/0x4cc0 kernel/sched/core.c:6961
preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7288
irqentry_exit+0x6f/0x90 kernel/entry/common.c:197
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__in6_dev_get include/net/addrconf.h:347 [inline]
RIP: 0010:ip6_ignore_linkdown include/net/addrconf.h:443 [inline]
RIP: 0010:find_match+0xa8/0xc90 net/ipv6/route.c:780
Code: fc ff df 42 80 7c 25 00 00 74 08 48 89 df e8 cf ad f2 f7 48 89 d8 bb c0 00 00 00 48 03 18 48 89 d8 48 c1 e8 03 42 80 3c 20 00 <74> 08 48 89 df e8 ae ad f2 f7 48 8b 1b e8 36 56 48 01 41 89 c4 31
RSP: 0018:ffffc9000be36460 EFLAGS: 00000246
RAX: 1ffff1100b7b6c18 RBX: ffff88805bdb60c0 RCX: 0000000000000002
RDX: ffff888067bb8000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 1ffff1100b52ea99 R08: ffffc9000be36760 R09: ffffc9000be36770
R10: ffffc9000be365c0 R11: fffff520017c6cba R12: dffffc0000000000
R13: 0000000000000001 R14: 1ffff1100b52ea9b R15: ffff88805a9754df
__find_rr_leaf+0x23a/0x6d0 net/ipv6/route.c:868
find_rr_leaf net/ipv6/route.c:889 [inline]
rt6_select net/ipv6/route.c:933 [inline]
fib6_table_lookup+0x39f/0xa80 net/ipv6/route.c:2233
ip6_pol_route+0x222/0x1180 net/ipv6/route.c:2269
pol_lookup_func include/net/ip6_fib.h:617 [inline]
fib6_rule_lookup+0x348/0x6f0 net/ipv6/fib6_rules.c:125
ip6_route_output_flags_noref net/ipv6/route.c:2684 [inline]
ip6_route_output_flags+0x364/0x5d0 net/ipv6/route.c:2696
ip6_dst_lookup_tail+0x299/0x1510 net/ipv6/ip6_output.c:1159
ip6_dst_lookup_flow+0x47/0xe0 net/ipv6/ip6_output.c:1262
sctp_v6_get_dst+0xffa/0x1bc0 net/sctp/ipv6.c:385
sctp_transport_route+0x115/0x2f0 net/sctp/transport.c:457
sctp_packet_config+0x478/0xd90 net/sctp/output.c:103
sctp_packet_singleton+0x158/0x330 net/sctp/outqueue.c:777
sctp_outq_flush_ctrl net/sctp/outqueue.c:914 [inline]
sctp_outq_flush+0x4f0/0x3140 net/sctp/outqueue.c:1212
sctp_cmd_interpreter net/sctp/sm_sideeffect.c:-1 [inline]
sctp_side_effects net/sctp/sm_sideeffect.c:1204 [inline]
sctp_do_sm+0x5332/0x5a20 net/sctp/sm_sideeffect.c:1175
sctp_primitive_ASSOCIATE+0x95/0xc0 net/sctp/primitive.c:73
sctp_sendmsg_to_asoc+0x102d/0x1810 net/sctp/socket.c:1842
sctp_sendmsg+0x1941/0x2810 net/sctp/socket.c:2032
sock_sendmsg_nosec net/socket.c:714 [inline]
__sock_sendmsg+0x19c/0x270 net/socket.c:729
____sys_sendmsg+0x52d/0x830 net/socket.c:2614
___sys_sendmsg+0x21f/0x2a0 net/socket.c:2668
__sys_sendmmsg+0x227/0x430 net/socket.c:2757
__do_sys_sendmmsg net/socket.c:2784 [inline]
__se_sys_sendmmsg net/socket.c:2781 [inline]
__x64_sys_sendmmsg+0xa0/0xc0 net/socket.c:2781
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc27d38ebe9
RSP: 002b:00007fc27e271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007fc27d5b6180 RCX: 00007fc27d38ebe9
RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003
RBP: 00007fc27d411e19 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc27d5b6218 R14: 00007fc27d5b6180 R15: 00007fc27d6dfa28
rcu: rcu_preempt kthread starved for 825 jiffies! g33673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27160 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x1798/0x4cc0 kernel/sched/core.c:6961
__schedule_loop kernel/sched/core.c:7043 [inline]
schedule+0x165/0x360 kernel/sched/core.c:7058
schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083
rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285
kthread+0x70e/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 3560 Comm: kworker/u8:9 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker
RIP: 0010:__asan_memset+0x31/0x50 mm/kasan/shadow.c:87
Code: 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 7e e4 ff ff 84 c0 74 11 4c 89 f7 89 ee 48 89 da 5b 41 5e <5d> e9 19 c3 55 09 31 c0 5b 41 5e 5d e9 7e 82 58 09 cc 66 66 66 66
RSP: 0018:ffffc90000007068 EFLAGS: 00000202
RAX: 1ffff92000000e01 RBX: ffffc90000007180 RCX: ffffffff8172cd88
RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000007198
RBP: 0000000000000000 R08: ffffc900000071a7 R09: 1ffff92000000e34
R10: dffffc0000000000 R11: fffff52000000e35 R12: ffffc900000078a0
R13: ffffc90000007198 R14: ffffc90000007148 R15: ffffc90000007190
FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000020000017d030 CR3: 000000000df36000 CR4: 00000000003526f0
Call Trace:
unwind_next_frame+0xc98/0x2390 arch/x86/kernel/unwind_orc.c:592
arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:47 [inline]
kasan_save_track+0x3e/0x80 mm/kasan/common.c:68
kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:576
poison_slab_object mm/kasan/common.c:243 [inline]
__kasan_slab_free+0x5b/0x80 mm/kasan/common.c:275
kasan_slab_free include/linux/kasan.h:233 [inline]
slab_free_hook mm/slub.c:2417 [inline]
slab_free mm/slub.c:4680 [inline]
kmem_cache_free+0x18f/0x400 mm/slub.c:4782
icmpv6_rcv+0x1388/0x1c80 net/ipv6/icmp.c:994
ip6_protocol_deliver_rcu+0xe0b/0x15c0 net/ipv6/ip6_input.c:438
ip6_input_finish+0x191/0x370 net/ipv6/ip6_input.c:489
NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318
ip6_input+0x16a/0x270 net/ipv6/ip6_input.c:500
ip6_mc_input+0x5c8/0xaf0 net/ipv6/ip6_input.c:590
NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318
__netif_receive_skb_one_core net/core/dev.c:5979 [inline]
__netif_receive_skb+0xd3/0x380 net/core/dev.c:6092
process_backlog+0x60e/0x14f0 net/core/dev.c:6444
__napi_poll+0xc4/0x360 net/core/dev.c:7497
napi_poll net/core/dev.c:7560 [inline]
net_rx_action+0x707/0xe30 net/core/dev.c:7687
handle_softirqs+0x283/0x870 kernel/softirq.c:579
do_softirq+0xec/0x180 kernel/softirq.c:480
__local_bh_enable_ip+0x17d/0x1c0 kernel/softirq.c:407
local_bh_enable include/linux/bottom_half.h:33 [inline]
fpregs_unlock arch/x86/include/asm/fpu/api.h:77 [inline]
kernel_fpu_end+0xd2/0x120 arch/x86/kernel/fpu/core.c:479
blake2s_compress+0x5f/0xd0 lib/crypto/x86/blake2s-glue.c:46
blake2s_final+0x116/0x260 lib/crypto/blake2s.c:55
hmac+0x293/0x330 drivers/net/wireguard/noise.c:333
kdf+0x105/0x270 drivers/net/wireguard/noise.c:367
mix_dh drivers/net/wireguard/noise.c:413 [inline]
wg_noise_handshake_create_initiation+0x2f0/0x7e0 drivers/net/wireguard/noise.c:550
wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline]
wg_packet_handshake_send_worker+0x163/0x320 drivers/net/wireguard/send.c:51
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319
worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
kthread+0x70e/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
net_ratelimit: 23865 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:c9:f2:c6:9d:d3, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:c9:f2:c6:9d:d3, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
net_ratelimit: 26867 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:c9:f2:c6:9d:d3, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:c9:f2:c6:9d:d3, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)