ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 152s! Showing busy workqueues and worker pools: workqueue events: flags=0x0 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 pending: psi_avgs_work, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: vmstat_shepherd workqueue events_long: flags=0x0 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 pending: br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: br_fdb_cleanup workqueue events_unbound: flags=0x2 pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/512 refcnt=6 in-flight: 11434:linkwatch_event linkwatch_event pending: toggle_allocation_gate, flush_memcg_stats_dwork workqueue events_power_efficient: flags=0x80 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, gc_worker, reg_check_chans_work pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 pending: neigh_periodic_work, neigh_managed_work, check_lifetime workqueue rcu_gp: flags=0x8 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 pending: srcu_invoke_callbacks, srcu_invoke_callbacks workqueue mm_percpu_wq: flags=0x8 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: vmstat_update pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: vmstat_update workqueue writeback: flags=0x4a pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wb_workfn workqueue dm_bufio_cache: flags=0x8 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: work_fn workqueue ipv6_addrconf: flags=0x40008 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=15 in-flight: 18167:addrconf_dad_work inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 pending: addrconf_verify_work inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work workqueue wg-kex-wg0: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wg_packet_handshake_send_worker workqueue wg-kex-wg1: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wg_packet_handshake_send_worker workqueue wg-kex-wg2: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker workqueue wg-kex-wg0: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg2: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg0: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker workqueue wg-kex-wg2: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 pending: wg_packet_tx_worker, wg_packet_encrypt_worker workqueue wg-crypt-wg2: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg0: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker workqueue wg-kex-wg2: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg0: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg2: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=153s workers=7 idle: 4836 32252 413 5192 25425 11942 pool 4: cpus=0-1 flags=0x4 nice=0 hung=153s workers=9 idle: 15276 13770 29683 29760 11419 2926 29072 17220 rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: (detected by 0, t=10002 jiffies, g=204377, q=210 ncpus=2) rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4295210403-4295200400), jiffies_till_next_fqs=1, root ->qsmask 0x0 rcu: rcu_preempt kthread starved for 10004 jiffies! g204377 f0x2 RCU_GP_INIT(4) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5420 [inline] __schedule+0xb87/0x14e0 kernel/sched/core.c:6750 preempt_schedule_common+0x9b/0xf0 kernel/sched/core.c:6919 preempt_schedule+0xa7/0xb0 kernel/sched/core.c:6943 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:34 __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline] _raw_spin_unlock_irq+0x60/0x70 kernel/locking/spinlock.c:202 rcu_gp_init+0xbdf/0xf10 kernel/rcu/tree.c:1599 rcu_gp_kthread+0x166/0x370 kernel/rcu/tree.c:1895 kthread+0x281/0x320 kernel/kthread.c:386 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 6350 Comm: syz.2.10019 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:save_xstate_epilog arch/x86/kernel/fpu/signal.c:139 [inline] RIP: 0010:copy_fpstate_to_sigframe+0x8d7/0xaa0 arch/x86/kernel/fpu/signal.c:245 Code: c0 0f 85 67 01 00 00 48 8b 44 24 08 8b 08 4c 01 e1 b8 45 58 50 46 e8 57 42 b9 03 49 81 c4 00 02 00 00 4c 89 e0 e8 f9 88 b8 03 <48> 89 c6 89 d0 09 ce 83 c8 03 4c 89 e1 e8 36 42 b9 03 09 f1 49 09 RSP: 0018:ffffc900033cfac0 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 00007fc042443ed0 RCX: 0000000000000000 RDX: 0000000000000003 RSI: 000000000007ffff RDI: 0000000000080000 RBP: ffffc900033cfc90 R08: 0000000000000000 R09: fffff52000679f72 R10: fffff52000679f72 R11: 1ffff92000679f6c R12: 00007fc042443f00 R13: ffff88813d614c90 R14: ffffc900033cfb60 R15: 0000000000000000 FS: 00007fc0424446c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffe3e14e40 CR3: 000000016b08c000 CR4: 00000000003526a0 Call Trace: get_sigframe arch/x86/kernel/signal.c:297 [inline] __setup_rt_frame arch/x86/kernel/signal.c:472 [inline] setup_rt_frame arch/x86/kernel/signal.c:784 [inline] handle_signal arch/x86/kernel/signal.c:828 [inline] arch_do_signal_or_restart+0x5bd/0x1030 arch/x86/kernel/signal.c:873 exit_to_user_mode_loop+0x7a/0xb0 kernel/entry/common.c:174 exit_to_user_mode_prepare+0x5a/0xa0 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:303 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fc04158ebe9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc0424440e8 EFLAGS: 00000246 RAX: fffffffffffffffc RBX: 00007fc0417b5fa8 RCX: 00007fc04158ebe9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc0417b5fa8 RBP: 00007fc0417b5fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fc0417b6038 R14: 00007fffe3e14f90 R15: 00007fffe3e15078 ---------------- Code disassembly (best guess): 0: c0 0f 85 rorb $0x85,(%rdi) 3: 67 01 00 add %eax,(%eax) 6: 00 48 8b add %cl,-0x75(%rax) 9: 44 24 08 rex.R and $0x8,%al c: 8b 08 mov (%rax),%ecx e: 4c 01 e1 add %r12,%rcx 11: b8 45 58 50 46 mov $0x46505845,%eax 16: e8 57 42 b9 03 call 0x3b94272 1b: 49 81 c4 00 02 00 00 add $0x200,%r12 22: 4c 89 e0 mov %r12,%rax 25: e8 f9 88 b8 03 call 0x3b88923 * 2a: 48 89 c6 mov %rax,%rsi <-- trapping instruction 2d: 89 d0 mov %edx,%eax 2f: 09 ce or %ecx,%esi 31: 83 c8 03 or $0x3,%eax 34: 4c 89 e1 mov %r12,%rcx 37: e8 36 42 b9 03 call 0x3b94272 3c: 09 f1 or %esi,%ecx 3e: 49 rex.WB 3f: 09 .byte 0x9