ip6_tunnel: K xmit: Local address not yet configured!
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	1-...!: (1 GPs behind) idle=a304/1/0x4000000000000000 softirq=67394/67396 fqs=1
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P12702/1:b..l P12654/1:b..l P4977/1:b..l
rcu: 	(detected by 0, t=10506 jiffies, g=72305, q=516 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 12841 Comm: syz.3.1799 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:124 [inline]
RIP: 0010:lock_acquire kernel/locking/lockdep.c:5844 [inline]
RIP: 0010:lock_acquire+0x15d/0x370 kernel/locking/lockdep.c:5825
Code: 0d 6c f6 3c 0f 85 c9 0f 84 bd 00 00 00 65 8b 05 c9 24 7e 12 85 c0 0f 85 ae 00 00 00 65 48 8b 05 01 de 7d 12 8b 90 9c 0b 00 00 <85> d2 0f 85 98 00 00 00 9c 8f 04 24 fa 48 c7 c7 9f 96 29 8e e8 3a
RSP: 0018:ffffc90000a08d70 EFLAGS: 00000046
RAX: ffff88802f54a540 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff89c700b8 RDI: fffffbfff1d7cc20
RBP: ffffffff8ebe6100 R08: 0000000000000000 R09: 0000000000000000
R10: ffff8880292d12ab R11: 0000000000000000 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00007fbcaf3b46c0(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9c3175da08 CR3: 00000000735ff000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 rcu_read_lock include/linux/rcupdate.h:840 [inline]
 advance_sched+0x718/0xd20 net/sched/sch_taprio.c:992
 __run_hrtimer kernel/time/hrtimer.c:2032 [inline]
 __hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2096
 hrtimer_interrupt+0x3e5/0x940 kernel/time/hrtimer.c:2215
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline]
 __sysvec_apic_timer_interrupt+0x109/0x470 arch/x86/kernel/apic/apic.c:1068
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0x9e/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:check_kcov_mode kernel/kcov.c:185 [inline]
RIP: 0010:write_comp_data+0x3a/0x90 kernel/kcov.c:246
Code: 65 48 8b 3d f0 7b 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 87 24 17 00 00 85 c0 74 f1 <8b> 87 f8 16 00 00 83 f8 03 75 e6 48 8b 87 00 17 00 00 8b bf fc 16
RSP: 0018:ffffc900034f79f8 EFLAGS: 00000246
RAX: 0000000080000001 RBX: 0000000000000000 RCX: ffffffff81fd45bd
RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802f54a540
RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880
 csd_lock_wait kernel/smp.c:342 [inline]
 smp_call_function_many_cond+0x5ad/0x16c0 kernel/smp.c:892
 clock_was_set+0x61c/0x850 kernel/time/hrtimer.c:999
 do_adjtimex+0x302/0x370 kernel/time/timekeeping.c:3006
 do_clock_adjtime kernel/time/posix-timers.c:1169 [inline]
 __do_sys_clock_adjtime+0x177/0x290 kernel/time/posix-timers.c:1181
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbcb119de59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbcaf3b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
RAX: ffffffffffffffda RBX: 00007fbcb1426180 RCX: 00007fbcb119de59
RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000
RBP: 00007fbcb1233e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fbcb1426218 R14: 00007fbcb1426180 R15: 00007ffedea04d78
 </TASK>
task:udevd           state:R  running task     stack:23480 pid:4977  tgid:4977  ppid:1      task_flags:0x400140 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x125c/0x6730 kernel/sched/core.c:7234
 preempt_schedule_notrace+0x5f/0xd0 kernel/sched/core.c:7506
 preempt_schedule_notrace_thunk+0x16/0x30 arch/x86/entry/thunk.S:13
 rcu_is_watching+0x8e/0xc0 kernel/rcu/tree.c:753
 rcu_read_unlock include/linux/rcupdate.h:869 [inline]
 class_rcu_destructor include/linux/rcupdate.h:1183 [inline]
 unwind_next_frame+0x745/0x2090 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2705 [inline]
 slab_free mm/slub.c:6405 [inline]
 kfree+0x22b/0x6c0 mm/slub.c:6720
 kobject_uevent_env+0x2e2/0x18b0 lib/kobject_uevent.c:643
 kobject_synth_uevent+0x6f0/0x7d0 lib/kobject_uevent.c:207
 uevent_store+0x24/0x50 drivers/base/core.c:2843
 dev_attr_store+0x58/0x80 drivers/base/core.c:2505
 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:145
 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x6ac/0x1050 fs/read_write.c:687
 ksys_write+0x12a/0x250 fs/read_write.c:739
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f002d0a7407
RSP: 002b:00007ffcea003280 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f002d78e880 RCX: 00007f002d0a7407
RDX: 0000000000000007 RSI: 0000559bdf69f060 RDI: 000000000000000c
RBP: 0000559bdf69f060 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000007
R13: 0000559bdf6981e0 R14: 00007f002d1efea0 R15: 00007ffcea0035c0
 </TASK>
task:syz.3.1746      state:R  running task     stack:22856 pid:12654 tgid:12654 ppid:5607   task_flags:0x40064c flags:0x00080001
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x125c/0x6730 kernel/sched/core.c:7234
 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:unwind_next_frame+0x1500/0x2090 arch/x86/kernel/unwind_orc.c:677
Code: ff 48 ba 00 00 00 00 00 fc ff df 48 8d 79 02 48 89 f8 48 c1 e8 03 0f b6 34 10 48 8d 41 03 49 89 c0 49 c1 e8 03 41 0f b6 14 10 <49> 89 f8 41 83 e0 07 44 38 c6 41 0f 9e c0 40 84 f6 40 0f 95 c6 41
RSP: 0018:ffffc9001068ef30 EFLAGS: 00000a02
RAX: ffffffff91d57901 RBX: 0000000000000001 RCX: ffffffff91d578fe
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff91d57900
RBP: ffffc9001068efe8 R08: 1ffffffff23aaf20 R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000019569 R12: ffffc9001068eff0
R13: ffffc9001068efa0 R14: ffffc9001068fa30 R15: ffffc9001068efd4
 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_stack+0x162/0x1e0 mm/page_owner.c:165
 __reset_page_owner+0x84/0x190 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1406 [inline]
 free_unref_folios+0xa44/0x1710 mm/page_alloc.c:3011
 folios_put_refs+0x585/0xaa0 mm/swap.c:1057
 folio_batch_release include/linux/folio_batch.h:101 [inline]
 shmem_undo_range+0x5e5/0x1570 mm/shmem.c:1149
 shmem_truncate_range mm/shmem.c:1277 [inline]
 shmem_evict_inode+0x3a5/0xbe0 mm/shmem.c:1407
 evict+0x3c2/0xad0 fs/inode.c:825
 iput_final fs/inode.c:2019 [inline]
 iput.part.0+0x989/0x1050 fs/inode.c:2068
 iput+0x35/0x40 fs/inode.c:2034
 dentry_unlink_inode+0x284/0x470 fs/dcache.c:479
 dentry_kill+0x25d/0xc20 fs/dcache.c:826
 finish_dput fs/dcache.c:1001 [inline]
 dput.part.0+0xd7/0x240 fs/dcache.c:1042
 dput+0x1f/0x30 fs/dcache.c:1037
 __fput+0x519/0xb50 fs/file_table.c:520
 task_work_run+0x150/0x240 kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x951/0x2ae0 kernel/exit.c:1009
 do_group_exit+0xd5/0x2a0 kernel/exit.c:1152
 get_signal+0x1ec7/0x21e0 kernel/signal.c:3046
 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:101 [inline]
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline]
 irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline]
 irqentry_exit+0x402/0xa00 kernel/entry/common.c:165
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7fbcb119de61
RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007fbcb1426090 RCX: 00007fbcb119de59
RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
RBP: 00007fbcb1233e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fbcb1426128 R14: 00007fbcb1426090 R15: 00007ffedea04d78
 </TASK>
task:syz.2.1762      state:R  running task     stack:23016 pid:12702 tgid:12702 ppid:5621   task_flags:0x40064c flags:0x00080001
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x125c/0x6730 kernel/sched/core.c:7234
 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__orc_find+0x97/0xf0 arch/x86/kernel/unwind_orc.c:110
Code: b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 <4d> 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 c4 08 5b 5d 41
RSP: 0018:ffffc9001a7a6ef0 EFLAGS: 00000297
RAX: ffffffff91d09c0a RBX: ffffffff91437080 RCX: dffffc0000000000
RDX: ffffffff825584e7 RSI: 0000000000000000 RDI: ffffffff91437080
RBP: ffffffff91437084 R08: ffffffff91d09c10 R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000015585 R12: ffffffff91437080
R13: ffffffff825585d4 R14: ffffffff91437080 R15: ffffffff91437080
 orc_find arch/x86/kernel/unwind_orc.c:238 [inline]
 unwind_next_frame+0x2ec/0x2090 arch/x86/kernel/unwind_orc.c:510
 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_stack+0x162/0x1e0 mm/page_owner.c:165
 __reset_page_owner+0x84/0x190 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1406 [inline]
 free_unref_folios+0xa44/0x1710 mm/page_alloc.c:3011
 folios_put_refs+0x585/0xaa0 mm/swap.c:1057
 folio_batch_release include/linux/folio_batch.h:101 [inline]
 shmem_undo_range+0x5e5/0x1570 mm/shmem.c:1149
 shmem_truncate_range mm/shmem.c:1277 [inline]
 shmem_evict_inode+0x3a5/0xbe0 mm/shmem.c:1407
 evict+0x3c2/0xad0 fs/inode.c:825
 iput_final fs/inode.c:2019 [inline]
 iput.part.0+0x989/0x1050 fs/inode.c:2068
 iput+0x35/0x40 fs/inode.c:2034
 dentry_unlink_inode+0x284/0x470 fs/dcache.c:479
 dentry_kill+0x25d/0xc20 fs/dcache.c:826
 finish_dput fs/dcache.c:1001 [inline]
 dput.part.0+0xd7/0x240 fs/dcache.c:1042
 dput+0x1f/0x30 fs/dcache.c:1037
 __fput+0x519/0xb50 fs/file_table.c:520
 task_work_run+0x150/0x240 kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x951/0x2ae0 kernel/exit.c:1009
 do_group_exit+0xd5/0x2a0 kernel/exit.c:1152
 get_signal+0x1ec7/0x21e0 kernel/signal.c:3046
 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:101 [inline]
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline]
 irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline]
 irqentry_exit+0x402/0xa00 kernel/entry/common.c:165
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f9c3099de61
RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f9c30c26090 RCX: 00007f9c3099de59
RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
RBP: 00007f9c30a33e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f9c30c26128 R14: 00007f9c30c26090 R15: 00007ffdbd366248
 </TASK>
rcu: rcu_preempt kthread starved for 10500 jiffies! g72305 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27528 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x125c/0x6730 kernel/sched/core.c:7234
 __schedule_loop kernel/sched/core.c:7311 [inline]
 schedule+0xdd/0x2c0 kernel/sched/core.c:7326
 schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2123
 rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2325
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:native_pause arch/x86/include/asm/vdso/processor.h:13 [inline]
RIP: 0010:cpu_relax arch/x86/include/asm/vdso/processor.h:18 [inline]
RIP: 0010:csd_lock_wait kernel/smp.c:342 [inline]
RIP: 0010:smp_call_function_many_cond+0x587/0x16c0 kernel/smp.c:892
Code: 54 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 c9 95 0c 00 <f3> 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45
RSP: 0000:ffffc90000117878 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fd45bd
RDX: ffff88801e6aca80 RSI: ffffffff81fd4597 RDI: ffff88801e6aca80
RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880
FS:  0000000000000000(0000) GS:ffff888123deb000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9c30978240 CR3: 000000000e992000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1057
 on_each_cpu include/linux/smp.h:72 [inline]
 smp_text_poke_sync_each_cpu arch/x86/kernel/alternative.c:2773 [inline]
 smp_text_poke_batch_finish+0x337/0xc60 arch/x86/kernel/alternative.c:2983
 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146
 jump_label_update+0x37a/0x550 kernel/jump_label.c:910
 static_key_enable_cpuslocked+0x1bc/0x270 kernel/jump_label.c:210
 static_key_enable+0x1a/0x20 kernel/jump_label.c:223
 toggle_allocation_gate mm/kfence/core.c:911 [inline]
 toggle_allocation_gate+0xfe/0x2d0 mm/kfence/core.c:903
 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322
 process_scheduled_works kernel/workqueue.c:3405 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>