hsr_slave_0: hsr_addr_subst_dest: Unknown node hsr_slave_1: hsr_addr_subst_dest: Unknown node hsr_slave_0: hsr_addr_subst_dest: Unknown node hsr_slave_1: hsr_addr_subst_dest: Unknown node rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14713/1:b..l P14715/1:b..l rcu: (detected by 1, t=10503 jiffies, g=239225, q=475872 ncpus=2) task:syz.5.9477 state:R running task stack:25576 pid:14715 tgid:14715 ppid:5929 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7606 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x920 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:arch_static_branch arch/x86/include/asm/jump_label.h:37 [inline] RIP: 0010:trace_lock_release include/trace/events/lock.h:68 [inline] RIP: 0010:lock_release+0x25/0x3c0 kernel/locking/lockdep.c:5954 Code: 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 68 87 f2 12 48 89 44 24 28 <0f> 1f 44 00 00 65 8b 05 67 87 f2 12 83 f8 08 0f 83 60 02 00 00 89 RSP: 0018:ffffc90004f7f5c8 EFLAGS: 00000282 RAX: c90c091e0a941a00 RBX: 0000000000000001 RCX: ffff88802cd63e80 RDX: 0000000000000000 RSI: ffffffff824316fe RDI: ffffffff8fd5c8e0 RBP: ffff88801e42e944 R08: ffff88801e42e907 R09: 1ffff11003c85d20 R10: dffffc0000000000 R11: ffffed1003c85d21 R12: ffff88802cd644c4 R13: ffffffff824316fe R14: ffffffff8fd5c8e0 R15: 0000000000000001 rcu_lock_release include/linux/rcupdate.h:319 [inline] rcu_read_unlock include/linux/rcupdate.h:880 [inline] __update_page_owner_free_handle+0x466/0x4a0 mm/page_owner.c:313 __reset_page_owner+0x85/0x1f0 mm/page_owner.c:339 reset_page_owner include/linux/page_owner.h:26 [inline] __free_pages_prepare mm/page_alloc.c:1418 [inline] __free_frozen_pages+0xc93/0xd90 mm/page_alloc.c:2962 __slab_free+0x274/0x2c0 mm/slub.c:5823 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:361 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] __kmalloc_cache_noprof+0x29f/0x600 mm/slub.c:5559 _kmalloc_noprof include/linux/slab.h:991 [inline] _kzalloc_noprof include/linux/slab.h:1312 [inline] get_undo_list ipc/sem.c:1856 [inline] copy_semundo+0xb6/0x240 ipc/sem.c:2312 copy_process+0x1c76/0x4400 kernel/fork.c:2296 kernel_clone+0x2d7/0x940 kernel/fork.c:2771 __do_sys_clone3 kernel/fork.c:3074 [inline] __se_sys_clone3+0x33c/0x360 kernel/fork.c:3053 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9432f9f349 RSP: 002b:00007ffc748f2ac8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007f9432f5a8e0 RCX: 00007f9432f9f349 RDX: 00007f9432f5a8e0 RSI: 0000000000000058 RDI: 00007ffc748f2b20 RBP: 00007f9433f256c0 R08: 00007f9433f256c0 R09: 00007ffc748f2c07 R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 R13: 000000000000000b R14: 00007ffc748f2b20 R15: 00007ffc748f2c08 task:syz.3.9476 state:R running task stack:25576 pid:14713 tgid:14713 ppid:12077 task_flags:0x40044c flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 preempt_schedule_common+0x7f/0xd0 kernel/sched/core.c:7463 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:201 [inline] _raw_spin_unlock+0x41/0x50 kernel/locking/spinlock.c:213 spin_unlock include/linux/spinlock.h:401 [inline] zap_pte_range mm/memory.c:2095 [inline] zap_pmd_range mm/memory.c:2151 [inline] zap_pud_range mm/memory.c:2179 [inline] zap_p4d_range mm/memory.c:2200 [inline] __zap_vma_range+0x40e1/0x4f80 mm/memory.c:2240 unmap_vmas+0x390/0x550 mm/memory.c:2309 exit_mmap+0x293/0x9f0 mm/mmap.c:1315 __mmput+0x118/0x420 kernel/fork.c:1193 exit_mm+0x18e/0x240 kernel/exit.c:592 do_exit+0x6cd/0x2360 kernel/exit.c:974 do_group_exit+0x22d/0x2f0 kernel/exit.c:1129 get_signal+0x121b/0x12c0 kernel/signal.c:3112 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x10e/0x770 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:343 [inline] do_syscall_64+0x328/0x520 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa4b299e559 RSP: 002b:00007ffe90936088 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000000 RBX: 000000000011ab2e RCX: 00007fa4b299e559 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa4b2c25fac RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 R10: 00007ffe90936190 R11: 0000000000000246 R12: 00007ffe909361b0 R13: 00007fa4b2c25fac R14: 000000000011ab60 R15: 00007ffe90936190 rcu: rcu_preempt kthread starved for 347 jiffies! g239225 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27656 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2122 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2330 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 43 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker RIP: 0010:get_page_from_freelist+0x3e6/0x2280 mm/page_alloc.c:3880 Code: 00 00 39 2b 0f b6 74 24 07 0f 85 08 1e 00 00 40 80 fe 01 75 4c 48 8b 44 24 08 48 8d 58 68 48 89 d8 48 c1 e8 03 42 80 3c 20 00 <74> 08 48 89 df e8 30 2d 0e 00 48 8b 1b b8 c8 50 00 00 48 01 c3 48 RSP: 0018:ffffc90000a17a00 EFLAGS: 00000246 RAX: 1ffff11027fff72d RBX: ffff88813fffb968 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88813fffd910 RBP: ffff88813fffd918 R08: 0000000000000001 R09: ffffc90000a17b01 R10: 0000000000000001 R11: fffff52000142f89 R12: dffffc0000000000 R13: 0000000000000801 R14: ffff88813fffd910 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888123bbd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc748f3000 CR3: 0000000026bc0000 CR4: 00000000003526f0 Call Trace: __alloc_frozen_pages_noprof+0x217/0x5a0 mm/page_alloc.c:5436 alloc_slab_page mm/slub.c:3347 [inline] allocate_slab+0x7d/0x620 mm/slub.c:3462 new_slab mm/slub.c:3513 [inline] refill_objects+0x2d5/0x350 mm/slub.c:7418 refill_sheaf mm/slub.c:2885 [inline] __pcs_replace_empty_main+0x2c8/0x6c0 mm/slub.c:4774 alloc_from_pcs mm/slub.c:4850 [inline] slab_alloc_node mm/slub.c:4984 [inline] kmem_cache_alloc_noprof+0x399/0x600 mm/slub.c:5010 dst_alloc+0x105/0x170 net/core/dst.c:90 rt_dst_alloc net/ipv4/route.c:1690 [inline] __mkroute_output net/ipv4/route.c:2693 [inline] ip_route_output_key_hash_rcu+0x14ac/0x2720 net/ipv4/route.c:2913 ip_route_output_key_hash+0x18d/0x2a0 net/ipv4/route.c:2743 __ip_route_output_key include/net/route.h:175 [inline] ip_route_output_flow+0x2a/0x150 net/ipv4/route.c:2970 ip_route_output_key include/net/route.h:185 [inline] ip_route_me_harder+0x762/0xfe0 net/ipv4/netfilter.c:54 synproxy_send_tcp+0x332/0x670 net/netfilter/nf_synproxy_core.c:434 synproxy_send_client_synack+0x89b/0xde0 net/netfilter/nf_synproxy_core.c:487 nft_synproxy_eval_v4+0x362/0x4e0 net/netfilter/nft_synproxy.c:59 nft_synproxy_do_eval+0x389/0x5d0 net/netfilter/nft_synproxy.c:142 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline] nft_do_chain+0x48d/0x1b10 net/netfilter/nf_tables_core.c:285 nft_do_chain_inet+0x360/0x4b0 net/netfilter/nft_chain_filter.c:162 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline] nf_hook_slow+0xc5/0x220 net/netfilter/core.c:633 nf_hook include/linux/netfilter.h:280 [inline] NF_HOOK+0x21f/0x3c0 include/linux/netfilter.h:323 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:325 __netif_receive_skb_one_core net/core/dev.c:6405 [inline] __netif_receive_skb net/core/dev.c:6518 [inline] process_backlog+0xa6b/0x18b0 net/core/dev.c:6869 __napi_poll+0xaa/0x330 net/core/dev.c:7938 napi_poll net/core/dev.c:8001 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8158 handle_softirqs+0x226/0x860 kernel/softirq.c:645 do_softirq+0x77/0xd0 kernel/softirq.c:546 __local_bh_enable_ip+0x100/0x140 kernel/softirq.c:473 blake2s_compress+0xfa/0x1c00 lib/crypto/x86/blake2s.h:42 blake2s_update+0x140/0x450 lib/crypto/blake2s.c:119 hmac+0x2d1/0x3b0 drivers/net/wireguard/noise.c:332 kdf+0x12d/0x290 drivers/net/wireguard/noise.c:367 mix_precomputed_dh drivers/net/wireguard/noise.c:426 [inline] wg_noise_handshake_create_initiation+0x460/0x810 drivers/net/wireguard/noise.c:560 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline] wg_packet_handshake_send_worker+0x18c/0x370 drivers/net/wireguard/send.c:51 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 hsr_slave_0: hsr_addr_subst_dest: Unknown node hsr_slave_1: hsr_addr_subst_dest: Unknown node