ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! INFO: task syz-executor.2:25085 blocked for more than 140 seconds. Not tainted 4.9.155+ #27 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D28072 25085 21704 0x80000002 ffff8801c8120000 0000000000000000 ffff8801db721000 ffff8801a2e697c0 ffff8801db721018 ffff8801a756f7f8 ffffffff82806806 2e9a66cea3a4544a 0000000000000000 ffff8801c81208b0 0000000000000006 ffff8801db7218f0 Call Trace: [] schedule+0x92/0x1c0 kernel/sched/core.c:3553 [] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3586 [] __mutex_lock_common kernel/locking/mutex.c:582 [inline] [] mutex_lock_nested+0x38d/0x920 kernel/locking/mutex.c:621 [] blkdev_put+0x2b/0x560 fs/block_dev.c:1629 [] blkdev_close+0x8b/0xb0 fs/block_dev.c:1678 [] __fput+0x274/0x720 fs/file_table.c:208 [] ____fput+0x16/0x20 fs/file_table.c:244 [] task_work_run+0x108/0x180 kernel/task_work.c:116 [] exit_task_work include/linux/task_work.h:21 [inline] [] do_exit+0x78b/0x2aa0 kernel/exit.c:841 [] do_group_exit+0x111/0x300 kernel/exit.c:945 [] get_signal+0x4fd/0x14d0 kernel/signal.c:2321 [] do_signal+0x9c/0x1920 arch/x86/kernel/signal.c:807 [] exit_to_usermode_loop+0x11c/0x160 arch/x86/entry/common.c:158 [] prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] [] syscall_return_slowpath arch/x86/entry/common.c:263 [inline] [] do_syscall_64+0x3f7/0x570 arch/x86/entry/common.c:290 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11b/0xa40 kernel/hung_task.c:239 #1: (tasklist_lock){.+.?..}, at: [] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/1899: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xa8/0xd0 fs/file.c:781 2 locks held by getty/2027: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 1 lock held by syz-executor.2/25085: #0: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_put+0x2b/0x560 fs/block_dev.c:1629 1 lock held by syz-executor.2/28889: #0: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_put+0x2b/0x560 fs/block_dev.c:1629 1 lock held by syz-executor.0/30009: #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10e/0xeb0 fs/block_dev.c:1273 2 locks held by syz-executor.5/30528: #0: (loop_ctl_mutex/1){+.+.+.}, at: [] lo_ioctl+0x85/0x1a10 drivers/block/loop.c:1404 #1: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_reread_part+0x1f/0x40 block/ioctl.c:189 2 locks held by blkid/30529: #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_put+0xbb/0x840 fs/block_dev.c:1587 #1: (loop_ctl_mutex){+.+.+.}, at: [] lo_release+0x1e/0x190 drivers/block/loop.c:1641 2 locks held by blkid/30530: #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_put+0xbb/0x840 fs/block_dev.c:1587 #1: (loop_ctl_mutex){+.+.+.}, at: [] lo_release+0x1e/0x190 drivers/block/loop.c:1641 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.155+ #27 ffff8801d9907cd0 ffffffff81b47871 0000000000000000 0000000000000000 0000000000000000 ffffffff81097301 00000000003fff5c ffff8801d9907d08 ffffffff81b52afc 0000000000000000 0000000000000000 0000000000000000 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x5f7/0xa40 kernel/hung_task.c:239 [] kthread+0x278/0x310 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 1899 Comm: rsyslogd Not tainted 4.9.155+ #27 task: ffff8801d42ac740 task.stack: ffff8801d3080000 RIP: 0010:[] c [] hlock_class kernel/locking/lockdep.c:149 [inline] RIP: 0010:[] c [] mark_lock+0x60/0x12e0 kernel/locking/lockdep.c:3039 RSP: 0018:ffff8801d3087790 EFLAGS: 00000006 RAX: 00000000000002b7 RBX: 0000000000000000 RCX: 0000000000000006 RDX: dffffc0000000000 RSI: ffff8801d42acff0 RDI: ffff8801d42ac740 RBP: ffff8801d30877d8 R08: 0000000000000000 R09: ffff8801d42ad010 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d42acff0 R13: 0000000000000040 R14: 0000000000000006 R15: ffff8801d42ac740 FS: 00007f5197223700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000009ea000 CR3: 00000001d3e0e000 CR4: 00000000001606b0 Stack: ffffffff81243811c ffff8801d3087850c 0000000000000046c ffff8801d30877b8c 0000000000000000c ffff8801d42acff0c 0000000000000006c ffff8801d42ac740c dffffc0000000000c ffff8801d3087820c ffffffff81207081c 0000000000000000c Call Trace: [] mark_held_locks+0xb1/0x100 kernel/locking/lockdep.c:2660 [] __trace_hardirqs_on_caller kernel/locking/lockdep.c:2689 [inline] [] trace_hardirqs_on_caller+0x385/0x5a0 kernel/locking/lockdep.c:2736 [] trace_hardirqs_on+0xd/0x10 kernel/locking/lockdep.c:2743 [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:162 [inline] [] _raw_spin_unlock_irqrestore+0x5a/0x70 kernel/locking/spinlock.c:191 [] spin_unlock_irqrestore include/linux/spinlock.h:362 [inline] [] avc_reclaim_node security/selinux/avc.c:541 [inline] [] avc_alloc_node security/selinux/avc.c:559 [inline] [] avc_alloc_node+0x29a/0x3c0 security/selinux/avc.c:547 [] avc_insert security/selinux/avc.c:670 [inline] [] avc_compute_av+0x182/0x610 security/selinux/avc.c:976 [] avc_has_perm_noaudit security/selinux/avc.c:1112 [inline] [] avc_has_perm+0x355/0x3a0 security/selinux/avc.c:1146 [] task_has_system+0x159/0x230 security/selinux/hooks.c:1681 [] selinux_syslog security/selinux/hooks.c:2237 [inline] [] selinux_syslog+0x35/0xa0 security/selinux/hooks.c:2216 [] security_syslog+0x73/0xb0 security/security.c:210 [] check_syslog_permissions+0x5b/0xb0 kernel/printk/printk.c:635 [] do_syslog+0x9b/0xaf0 kernel/printk/printk.c:1440 [] kmsg_read+0x74/0xa0 fs/proc/kmsg.c:39 [] proc_reg_read+0xfd/0x180 fs/proc/inode.c:203 [] __vfs_read+0x116/0x550 fs/read_write.c:451 [] vfs_read+0x137/0x380 fs/read_write.c:474 [] SYSC_read fs/read_write.c:590 [inline] [] SyS_read+0xdc/0x1c0 fs/read_write.c:583 [] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c53 c48 c83 cec c20 c0f cb6 c04 c02 c84 cc0 c74 c08 c3c c01 c0f c8e cf7 c07 c00 c00 c41 c0f cb7 c44 c24 c20 c66 ca9 cff c1f c74 c7d c48 cba c00 c00 c00 c00 c00 cfc cff cdf c<4c> c89 cc9 c48 cc1 ce9 c03 c0f cb6 c14 c11 c84 cd2 c74 c09 c80 cfa c03 c0f c8e cde c