ip6_tunnel: ip6gre1 xmit: Local address not yet configured! rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (1 ticks this GP) idle=a5f4/1/0x4000000000000000 softirq=53277/53277 fqs=0 rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12863/1:b..l rcu: (detected by 0, t=10502 jiffies, g=51729, q=257 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 12868 Comm: syz.0.2502 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 RIP: 0010:timerqueue_del+0xb4/0x100 lib/timerqueue.c:58 Code: 43 80 3c 2f 00 74 0e 4c 89 e7 49 89 c7 e8 c4 c0 e3 f6 4c 89 f8 49 89 04 24 4c 89 f7 48 89 de e8 e2 6a ff ff 42 80 7c 2d 00 00 <74> 08 4c 89 f7 e8 a2 c0 e3 f6 4d 89 36 48 89 d8 48 c1 e8 03 42 80 RSP: 0018:ffffc90000a08d08 EFLAGS: 00000046 RAX: 1ffff11017124fa2 RBX: ffff8880b8927d10 RCX: dffffc0000000000 RDX: 0000000000010000 RSI: ffff8880b8927d10 RDI: ffff88802ea72348 RBP: 1ffff11005d4e468 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: ffff8880b8927d18 R13: dffffc0000000000 R14: ffff88802ea72340 R15: 1ffff11017124fa3 FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b3071aff8 CR3: 000000005c83a000 CR4: 0000000000350ef0 Call Trace: __remove_hrtimer kernel/time/hrtimer.c:1114 [inline] __run_hrtimer kernel/time/hrtimer.c:1757 [inline] __hrtimer_run_queues+0x364/0xc60 kernel/time/hrtimer.c:1841 hrtimer_interrupt+0x45b/0xaa0 kernel/time/hrtimer.c:1903 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1041 [inline] __sysvec_apic_timer_interrupt+0x10b/0x410 arch/x86/kernel/apic/apic.c:1058 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1052 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:210 Code: 89 fb e8 23 00 00 00 48 8b 3d a4 c1 d2 0b 48 89 de 5b e9 93 86 5a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 20 6e 92 65 8b 15 a8 1b RSP: 0018:ffffc9000db5f550 EFLAGS: 00000202 RAX: ffffffff8230ebdd RBX: ffffffff8230eaca RCX: ffff888026313c80 RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffff8230eaca R10: dffffc0000000000 R11: fffff940003439a1 R12: dffffc0000000000 R13: 0000000000000008 R14: 0000000000068734 R15: ffff88813fffa5a0 pfn_valid+0x267/0x490 include/linux/mmzone.h:2196 page_table_check_clear+0x21/0x700 mm/page_table_check.c:70 ptep_get_and_clear_full arch/x86/include/asm/jump_label.h:-1 [inline] get_and_clear_full_ptes include/linux/pgtable.h:725 [inline] zap_present_folio_ptes mm/memory.c:1627 [inline] zap_present_ptes mm/memory.c:1709 [inline] do_zap_pte_range mm/memory.c:1810 [inline] zap_pte_range mm/memory.c:1854 [inline] zap_pmd_range mm/memory.c:1946 [inline] zap_pud_range mm/memory.c:1975 [inline] zap_p4d_range mm/memory.c:1996 [inline] unmap_page_range+0x344b/0x4370 mm/memory.c:2017 unmap_single_vma mm/memory.c:2060 [inline] unmap_vmas+0x399/0x580 mm/memory.c:2104 exit_mmap+0x240/0xb40 mm/mmap.c:1280 __mmput+0x118/0x430 kernel/fork.c:1133 exit_mm+0x1da/0x2c0 kernel/exit.c:582 do_exit+0x648/0x2300 kernel/exit.c:954 do_group_exit+0x21c/0x2d0 kernel/exit.c:1107 __do_sys_exit_group kernel/exit.c:1118 [inline] __se_sys_exit_group kernel/exit.c:1116 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1116 x64_sys_call+0x21f7/0x2200 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f735038efc9 Code: Unable to access opcode bytes at 0x7f735038ef9f. RSP: 002b:00007ffdf6a7d998 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f735038efc9 RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007ffdf6a7d9fc R08: 00000004f6a7da8f R09: 00000000000927c0 R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001b5 R13: 00000000000927c0 R14: 0000000000056836 R15: 00007ffdf6a7da50 task:syz.3.2500 state:R running task stack:25304 pid:12863 tgid:12861 ppid:5830 task_flags:0x400040 flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7256 irqentry_exit+0x6f/0x90 kernel/entry/common.c:211 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_is_held_type+0x137/0x190 kernel/locking/lockdep.c:5945 Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 09 0a 28 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f RSP: 0018:ffffc9000d6af368 EFLAGS: 00000206 RAX: 69db471a4ef92800 RBX: 0000000000000001 RCX: 69db471a4ef92800 RDX: ffff888040561e40 RSI: ffffffff8d8f29f0 RDI: ffffffff8bbf05e0 RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff847286cd R10: dffffc0000000000 R11: fffff94000364e9f R12: 0000000000000246 R13: ffff888040561e40 R14: ffffffff8df3d2e0 R15: 0000000000000001 task_css include/linux/cgroup.h:459 [inline] blkcg_css+0x113/0x1d0 block/blk-cgroup.c:110 blk_cgroup_congested+0xbc/0x210 block/blk-cgroup.c:2238 __folio_throttle_swaprate+0x67/0x190 mm/swapfile.c:4065 folio_throttle_swaprate include/linux/swap.h:617 [inline] shmem_add_to_page_cache+0x6f1/0xba0 mm/shmem.c:882 shmem_alloc_and_add_folio+0x846/0xf60 mm/shmem.c:1936 shmem_get_folio_gfp+0x59d/0x1660 mm/shmem.c:2533 shmem_fault+0x179/0x390 mm/shmem.c:2734 __do_fault+0x138/0x390 mm/memory.c:5280 do_read_fault mm/memory.c:5698 [inline] do_fault mm/memory.c:5832 [inline] do_pte_missing mm/memory.c:4361 [inline] handle_pte_fault mm/memory.c:6177 [inline] __handle_mm_fault+0x35e3/0x5400 mm/memory.c:6318 handle_mm_fault+0x40a/0x8e0 mm/memory.c:6487 faultin_page mm/gup.c:1126 [inline] __get_user_pages+0x165c/0x2a00 mm/gup.c:1428 populate_vma_page_range+0x29f/0x3a0 mm/gup.c:1860 __mm_populate+0x24c/0x380 mm/gup.c:1963 mm_populate include/linux/mm.h:3471 [inline] vm_mmap_pgoff+0x387/0x4d0 mm/util.c:586 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fea1138efc9 RSP: 002b:00007fea12264038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007fea115e5fa0 RCX: 00007fea1138efc9 RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 RBP: 00007fea11411f91 R08: ffffffffffffffff R09: 0000000089f9b000 R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fea115e6038 R14: 00007fea115e5fa0 R15: 00007ffc8325d9b8 rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g51729 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=1 timer-softirq=27991 rcu: rcu_preempt kthread starved for 10502 jiffies! g51729 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:27288 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0x165/0x360 kernel/sched/core.c:7026 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245