ip6_tunnel: § xmit: Local address not yet configured! INFO: task syz-executor.4:6425 blocked for more than 140 seconds. Not tainted 4.9.170+ #48 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D28976 6425 13792 0x00000004 ffff8801a3fc17c0 0000000000000000 ffff8801db721000 ffff8801da6817c0 ffff8801db721018 ffff8801a2587990 ffffffff82801a4e 0000000000000246 ffff8801a3fc17c0 0000000000000000 ffff8801db7218f0 1ffff100344b0f21 Call Trace: [<000000005b076aae>] schedule+0x92/0x1c0 kernel/sched/core.c:3546 [<000000002ed5bbb0>] __rt_mutex_slowlock+0x99/0x290 kernel/locking/rtmutex.c:1221 [<0000000090c0ba59>] rt_mutex_slowlock+0x199/0x4c0 kernel/locking/rtmutex.c:1293 [<0000000053d54022>] rt_mutex_fastlock kernel/locking/rtmutex.c:1439 [inline] [<0000000053d54022>] rt_mutex_lock+0x2d/0x40 kernel/locking/rtmutex.c:1499 [<0000000070c37939>] process_notifier drivers/misc/uid_sys_stats.c:636 [inline] [<0000000070c37939>] process_notifier+0x96/0x670 drivers/misc/uid_sys_stats.c:625 [<0000000034c5032d>] notifier_call_chain+0xb4/0x1d0 kernel/notifier.c:93 [<000000004bc2099d>] __blocking_notifier_call_chain kernel/notifier.c:317 [inline] [<000000004bc2099d>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] [<000000004bc2099d>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] [<000000004bc2099d>] blocking_notifier_call_chain+0x80/0xa0 kernel/notifier.c:325 [<00000000437b27bb>] profile_task_exit+0x1f/0x30 kernel/profile.c:140 [<00000000ab637dc1>] do_exit+0x90/0x2aa0 kernel/exit.c:744 [<000000005c83ae5d>] do_group_exit+0x111/0x300 kernel/exit.c:945 [<000000002fde9341>] SYSC_exit_group kernel/exit.c:956 [inline] [<000000002fde9341>] SyS_exit_group+0x1d/0x20 kernel/exit.c:954 [<00000000892118ed>] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [<00000000ca5c6b19>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [<000000004012bc4d>] check_hung_uninterruptible_tasks kernel/hung_task.c:169 [inline] #0: (rcu_read_lock){......}, at: [<000000004012bc4d>] watchdog+0x14b/0xaf0 kernel/hung_task.c:263 #1: (tasklist_lock){.+.+..}, at: [<0000000086499ffb>] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4339 1 lock held by kworker/dying/64: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by rsyslogd/1896: #0: (&f->f_pos_lock){+.+.+.}, at: [<00000000c2dc4ee0>] __fdget_pos+0xa8/0xd0 fs/file.c:782 2 locks held by getty/2024: #0: (&tty->ldisc_sem){++++++}, at: [<000000008f5a2889>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+...}, at: [<00000000ac0e5689>] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 1 lock held by kworker/dying/2113: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/2118: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/2140: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/2163: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/2523: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/3125: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/3144: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/3153: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/3161: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/3167: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/3791: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/6795: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/6798: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by syz-executor.4/13791: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/15995: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/16031: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/16042: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by kworker/dying/22408: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by syz-executor.4/6425: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by syz-executor.4/6433: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 1 lock held by syz-executor.4/6452: #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){.+.+..}, at: [<00000000c2280813>] blocking_notifier_call_chain+0x6a/0xa0 kernel/notifier.c:325 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.170+ #48 ffff8801d98d7cc8 ffffffff81b4fb21 0000000000000000 0000000000000000 0000000000000000 ffffffff81097401 dffffc0000000000 ffff8801d98d7d00 ffffffff81b5adbc 0000000000000000 0000000000000000 0000000000000000 Call Trace: [<0000000069b34b76>] __dump_stack lib/dump_stack.c:15 [inline] [<0000000069b34b76>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<0000000025393387>] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [<000000000cf0557b>] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [<00000000ac7b82cb>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [<00000000b8b6228c>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [<00000000b8b6228c>] check_hung_task kernel/hung_task.c:126 [inline] [<00000000b8b6228c>] check_hung_uninterruptible_tasks kernel/hung_task.c:183 [inline] [<00000000b8b6228c>] watchdog+0x670/0xaf0 kernel/hung_task.c:263 [<00000000b7a7577b>] kthread+0x278/0x310 kernel/kthread.c:211 [<000000007e832960>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.9.170+ #48 task: 0000000066c870b5 task.stack: 0000000019eaba2c RIP: 0010:[] c [<0000000006227914>] __sanitizer_cov_trace_pc+0x26/0x50 kernel/kcov.c:100 RSP: 0018:ffff8801db707f88 EFLAGS: 00000046 RAX: ffff8801da6b2f80 RBX: 000000000001a310 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff81bb6379 RDI: ffff8801da6d7ce8 RBP: ffff8801db707f88 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 R13: ffff8801da6b2f80 R14: dffffc0000000000 R15: ffff8801da6b2f80 FS: 0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000001d08ef000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffff8801db707f98c ffffffff81bb6379c ffff8801db707fb8c ffffffff81252f95c 0000000000000000c ffffffff833e3788c ffff8801db707fd0c ffffffff810ee8cac ffffffff833e3788c ffff8801db707fe8c ffffffff82814d2ac ffffffff833e3788c Call Trace: d [<00000000787ab67f>] debug_smp_processor_id+0x9/0x20 lib/smp_processor_id.c:56 [<00000000a5d81842>] rcu_irq_enter+0x15/0x120 kernel/rcu/tree.c:938 [<0000000000ccb6e6>] irq_enter+0xa/0xd0 kernel/softirq.c:342 [<00000000507f29af>] smp_reschedule_interrupt+0xa/0x90 arch/x86/kernel/smp.c:267 [<000000004fc177ae>] reschedule_interrupt+0x9d/0xb0 arch/x86/entry/entry_64.S:671 d [<000000005cddc9fb>] ? native_safe_halt+0x2/0x10 arch/x86/include/asm/irqflags.h:56 [<000000005728bb97>] arch_cpu_idle+0x10/0x20 arch/x86/kernel/process.c:428 [<0000000034bdab9d>] default_idle_call+0x36/0x60 kernel/sched/idle.c:97 [<000000001e842f42>] cpuidle_idle_call kernel/sched/idle.c:155 [inline] [<000000001e842f42>] cpu_idle_loop kernel/sched/idle.c:248 [inline] [<000000001e842f42>] cpu_startup_entry+0x283/0x3a0 kernel/sched/idle.c:303 [<00000000e5b57e0d>] start_secondary+0x31c/0x410 arch/x86/kernel/smpboot.c:251 Code: c00 c0f c1f c40 c00 c55 c48 c89 ce5 c48 c8b c75 c08 c65 c48 c8b c04 c25 c00 c7e c01 c00 c65 c8b c15 cc8 cab ccf c7e c81 ce2 c00 c01 c1f c00 c75 c2b c8b c90 c38 c12 c00 c00 c<83> cfa c02 c75 c20 c48 c8b c88 c40 c12 c00 c00 c8b c80 c3c c12 c00 c00 c48 c8b c11 c