ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (1 GPs behind) idle=1904/1/0x4000000000000000 softirq=63445/63446 fqs=1 rcu: (detected by 0, t=10503 jiffies, g=91413, q=457 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 5623 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:memset_orig+0x15/0xb0 arch/x86/lib/memset_64.S:57 Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 <41> 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 RSP: 0018:ffffc90000a08d38 EFLAGS: 00000006 RAX: 0000000000000000 RBX: ffff8880b8528818 RCX: 0000000000000000 RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff88807aaf3308 RBP: dffffc0000000000 R08: ffff88807aaf3317 R09: 1ffff1100f55e662 R10: ffff88807aaf3308 R11: ffffed100f55e663 R12: 1ffff110170a50f8 R13: ffff88807aaf3300 R14: 0000000000000000 R15: ffff8880b8528818 FS: 0000000000000000(0000) GS:ffff888123b6b000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000559ac3962078 CR3: 000000000fb48000 CR4: 00000000003526f0 Call Trace: rb_link_node include/linux/rbtree.h:96 [inline] __rb_add include/linux/rbtree.h:238 [inline] rb_add_linked include/linux/rbtree.h:281 [inline] timerqueue_linked_add+0x23f/0x2e0 lib/timerqueue.c:96 enqueue_hrtimer+0x18e/0x2c0 kernel/time/hrtimer.c:1145 __run_hrtimer kernel/time/hrtimer.c:2091 [inline] __hrtimer_run_queues+0x4ce/0xa10 kernel/time/hrtimer.c:2132 hrtimer_interrupt+0x4cd/0xaa0 kernel/time/hrtimer.c:2251 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline] __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1068 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_acquire+0x232/0x350 kernel/locking/lockdep.c:5947 Code: ff ff ff e8 e0 ca 50 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 d4 f7 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 7f d2 53 0a cc 48 8d 3d c7 d3 db RSP: 0018:ffffc90003f9f2d8 EFLAGS: 00000286 RAX: 2f76e388bb999f00 RBX: 0000000000000000 RCX: 8000000000000002 RDX: 0000000035fe998a RSI: ffffffff8e70fdbb RDI: ffffffff8c6e1780 RBP: ffff88807f1bbe80 R08: ffffffff8245587a R09: 0000000000000000 R10: dffffc0000000000 R11: fffff940002e54f1 R12: ffffffff8fd59d60 R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:309 [inline] rcu_read_lock_sched include/linux/rcupdate.h:947 [inline] pfn_valid+0xd6/0x490 include/linux/mmzone.h:2276 page_table_check_clear+0x21/0x500 mm/page_table_check.c:70 ptep_get_and_clear_full arch/x86/include/asm/jump_label.h:-1 [inline] get_and_clear_full_ptes include/linux/pgtable.h:879 [inline] zap_present_folio_ptes mm/memory.c:1779 [inline] zap_present_ptes mm/memory.c:1861 [inline] do_zap_pte_range mm/memory.c:1963 [inline] zap_pte_range mm/memory.c:2065 [inline] zap_pmd_range mm/memory.c:2151 [inline] zap_pud_range mm/memory.c:2179 [inline] zap_p4d_range mm/memory.c:2200 [inline] __zap_vma_range+0x3a12/0x4f70 mm/memory.c:2240 unmap_vmas+0x38b/0x550 mm/memory.c:2309 exit_mmap+0x293/0x9f0 mm/mmap.c:1315 __mmput+0x118/0x420 kernel/fork.c:1193 exit_mm+0x18e/0x240 kernel/exit.c:586 do_exit+0x6a8/0x2360 kernel/exit.c:967 do_group_exit+0x22d/0x2f0 kernel/exit.c:1123 get_signal+0x1216/0x12c0 kernel/signal.c:3112 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x10e/0x770 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:343 [inline] do_syscall_64+0x328/0x520 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f628455a6d7 Code: Unable to access opcode bytes at 0x7f628455a6ad. RSP: 002b:00007ffe86904c10 EFLAGS: 00000202 ORIG_RAX: 000000000000003d RAX: fffffffffffffe00 RBX: 000055556c6ed500 RCX: 00007f628455a6d7 RDX: 0000000040000000 RSI: 00007ffe86904c6c RDI: ffffffffffffffff RBP: 00007ffe86904c6c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 R13: 0000000000000003 R14: 00007ffe86904ec8 R15: 0000000000000000 rcu: rcu_preempt kthread starved for 10491 jiffies! g91413 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28104 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5583 [inline] __schedule+0x17dd/0x5820 kernel/sched/core.c:7382 __schedule_loop kernel/sched/core.c:7459 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7474 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x1230 kernel/rcu/tree.c:2122 rcu_gp_kthread+0x9c/0x340 kernel/rcu/tree.c:2330 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 8118 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Workqueue: writeback wb_workfn (flush-8:0) RIP: 0010:csd_lock_wait kernel/smp.c:389 [inline] RIP: 0010:csd_lock kernel/smp.c:422 [inline] RIP: 0010:smp_call_function_many_cond+0x62d/0x1500 kernel/smp.c:970 Code: 89 fe 83 e6 01 31 ff e8 71 71 0c 00 41 83 e7 01 75 07 e8 66 6c 0c 00 eb 3f f3 90 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 <84> c0 75 0f f7 03 01 00 00 00 74 1d e8 42 6c 0c 00 eb dc 89 d9 80 RSP: 0018:ffffc9000d6ee120 EFLAGS: 00000293 RAX: 0000000000000000 RBX: ffff8880b85418c8 RCX: ffff888034d48000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc9000d6ee270 R08: ffff888034d4959f R09: 1ffff110069a92b3 R10: dffffc0000000000 R11: ffffffff817a5570 R12: 1ffff110170a8319 R13: 0000000000000001 R14: ffff8880b85418c0 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888123a6b000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055b3ac89e2b0 CR3: 0000000034af6000 CR4: 00000000003526f0 Call Trace: __flush_tlb_multi arch/x86/include/asm/paravirt.h:46 [inline] flush_tlb_multi arch/x86/mm/tlb.c:1361 [inline] flush_tlb_mm_range+0x910/0x10b0 arch/x86/mm/tlb.c:1435 flush_tlb_page arch/x86/include/asm/tlbflush.h:352 [inline] ptep_clear_flush+0x120/0x170 mm/pgtable-generic.c:104 page_vma_mkclean_one+0x4b4/0x830 mm/rmap.c:1146 page_mkclean_one+0x20c/0x2e0 mm/rmap.c:1194 __rmap_walk_file+0x4c8/0x6a0 mm/rmap.c:3120 rmap_walk mm/rmap.c:3164 [inline] folio_mkclean+0x2d5/0x3f0 mm/rmap.c:1226 folio_clear_dirty_for_io+0x190/0x820 mm/page-writeback.c:2903 mpage_submit_folio+0x83/0x2a0 fs/ext4/inode.c:2075 mpage_process_page_bufs+0x6bd/0x8a0 fs/ext4/inode.c:2201 mpage_prepare_extent_to_map+0xf8d/0x1880 fs/ext4/inode.c:2743 ext4_do_writepages+0xb8a/0x4770 fs/ext4/inode.c:2884 ext4_writepages+0x1fe/0x4e0 fs/ext4/inode.c:3032 do_writepages+0x338/0x560 mm/page-writeback.c:2560 __writeback_single_inode+0x136/0x1220 fs/fs-writeback.c:1800 writeback_sb_inodes+0x9de/0x1af0 fs/fs-writeback.c:2111 __writeback_inodes_wb+0x114/0x240 fs/fs-writeback.c:2187 wb_writeback+0x42f/0xad0 fs/fs-writeback.c:2298 wb_check_old_data_flush fs/fs-writeback.c:2402 [inline] wb_do_writeback fs/fs-writeback.c:2481 [inline] wb_workfn+0xc92/0x10f0 fs/fs-writeback.c:2509 process_one_work kernel/workqueue.c:3495 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245