ip6_tunnel: » xmit: Local address not yet configured! ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! ip6_tunnel: » xmit: Local address not yet configured! INFO: task syz-executor.5:26441 blocked for more than 140 seconds. Not tainted 4.9.194+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.5 D25544 26441 1 0x00000004 0000000000000087 ffff8801d83e4740 ffff8801a0d86880 ffff8801db621000 ffff8801d6e00000 ffff8801db621018 ffff88019fb576a8 ffffffff8281af8e 0000000000000246 ffffffff831f3ca8 00ff8801d83e4fe8 ffff8801db6218f0 Call Trace: [<00000000c987a878>] schedule+0x92/0x1c0 kernel/sched/core.c:3546 [<000000006f7d6e6b>] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3579 [<000000005378763e>] __mutex_lock_common kernel/locking/mutex.c:582 [inline] [<000000005378763e>] mutex_lock_nested+0x38d/0x920 kernel/locking/mutex.c:621 [<000000004db3d8c7>] __blkdev_get+0x10e/0xeb0 fs/block_dev.c:1273 [<000000003c9a03c2>] blkdev_get+0x2e8/0x920 fs/block_dev.c:1424 [<000000004a684d7d>] blkdev_open+0x1aa/0x250 fs/block_dev.c:1579 [<0000000094999d2f>] do_dentry_open+0x422/0xd20 fs/open.c:791 [<000000007e635f6e>] vfs_open+0x105/0x230 fs/open.c:904 [<000000008adc14ca>] do_last fs/namei.c:3541 [inline] [<000000008adc14ca>] path_openat+0xbf5/0x2f60 fs/namei.c:3665 [<00000000ec60c884>] do_filp_open+0x1a1/0x280 fs/namei.c:3699 [<00000000309c017f>] do_sys_open+0x2f0/0x610 fs/open.c:1097 [<00000000fb8b98cc>] SYSC_open fs/open.c:1115 [inline] [<00000000fb8b98cc>] SyS_open+0x2d/0x40 fs/open.c:1110 [<000000004a79e862>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288 [<00000000794c985a>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [<000000000ea42630>] check_hung_uninterruptible_tasks kernel/hung_task.c:169 [inline] #0: (rcu_read_lock){......}, at: [<000000000ea42630>] watchdog+0x14b/0xaf0 kernel/hung_task.c:263 #1: (tasklist_lock){.+.+..}, at: [<0000000077914800>] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/1894: #0: (&f->f_pos_lock){+.+.+.}, at: [<00000000f9525802>] __fdget_pos+0xa8/0xd0 fs/file.c:782 2 locks held by getty/2022: #0: (&tty->ldisc_sem){++++++}, at: [<00000000add996ba>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:376 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [<00000000ffddc27b>] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 1 lock held by syz-executor.5/26441: #0: (&bdev->bd_mutex){+.+.+.}, at: [<000000004db3d8c7>] __blkdev_get+0x10e/0xeb0 fs/block_dev.c:1273 2 locks held by syz-executor.4/27022: #0: (&bdev->bd_mutex){+.+.+.}, at: [<000000004db3d8c7>] __blkdev_get+0x10e/0xeb0 fs/block_dev.c:1273 #1: (loop_index_mutex){+.+.+.}, at: [<0000000044327199>] lo_open+0x1d/0xb0 drivers/block/loop.c:1621 2 locks held by syz-executor.2/27034: #0: (&bdev->bd_mutex){+.+.+.}, at: [<000000004db3d8c7>] __blkdev_get+0x10e/0xeb0 fs/block_dev.c:1273 #1: (loop_index_mutex){+.+.+.}, at: [<0000000044327199>] lo_open+0x1d/0xb0 drivers/block/loop.c:1621 2 locks held by syz-executor.3/27972: #0: (&bdev->bd_mutex){+.+.+.}, at: [<000000004db3d8c7>] __blkdev_get+0x10e/0xeb0 fs/block_dev.c:1273 #1: (loop_index_mutex){+.+.+.}, at: [<0000000044327199>] lo_open+0x1d/0xb0 drivers/block/loop.c:1621 2 locks held by syz-executor.1/29540: #0: (loop_index_mutex){+.+.+.}, at: [<0000000060ec14d0>] loop_control_ioctl+0x7a/0x320 drivers/block/loop.c:1973 #1: (&lo->lo_ctl_mutex#2){+.+.+.}, at: [<00000000346c797d>] loop_control_ioctl+0x17f/0x320 drivers/block/loop.c:1987 1 lock held by syz-executor.1/29549: #0: (loop_index_mutex){+.+.+.}, at: [<0000000060ec14d0>] loop_control_ioctl+0x7a/0x320 drivers/block/loop.c:1973 1 lock held by syz-executor.1/29550: #0: (loop_index_mutex){+.+.+.}, at: [<0000000060ec14d0>] loop_control_ioctl+0x7a/0x320 drivers/block/loop.c:1973 2 locks held by syz-executor.0/29541: #0: (&lo->lo_ctl_mutex/1){+.+.+.}, at: [<00000000f7524903>] lo_ioctl+0x8e/0x1b10 drivers/block/loop.c:1404 #1: (&bdev->bd_mutex){+.+.+.}, at: [<00000000c607db67>] blkdev_reread_part+0x1f/0x40 block/ioctl.c:189 1 lock held by syz-executor.0/29553: #0: (&bdev->bd_mutex){+.+.+.}, at: [<000000004db3d8c7>] __blkdev_get+0x10e/0xeb0 fs/block_dev.c:1273 2 locks held by blkid/29544: #0: (&bdev->bd_mutex){+.+.+.}, at: [<000000004db3d8c7>] __blkdev_get+0x10e/0xeb0 fs/block_dev.c:1273 #1: (loop_index_mutex){+.+.+.}, at: [<0000000044327199>] lo_open+0x1d/0xb0 drivers/block/loop.c:1621 2 locks held by blkid/29545: #0: (&bdev->bd_mutex){+.+.+.}, at: [<000000004db3d8c7>] __blkdev_get+0x10e/0xeb0 fs/block_dev.c:1273 #1: (loop_index_mutex){+.+.+.}, at: [<0000000044327199>] lo_open+0x1d/0xb0 drivers/block/loop.c:1621 2 locks held by blkid/29548: #0: (&bdev->bd_mutex){+.+.+.}, at: [<000000004db3d8c7>] __blkdev_get+0x10e/0xeb0 fs/block_dev.c:1273 #1: (loop_index_mutex){+.+.+.}, at: [<0000000044327199>] lo_open+0x1d/0xb0 drivers/block/loop.c:1621 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.194+ #0 ffff8801d98d7cc8 ffffffff81b67001 0000000000000001 0000000000000000 0000000000000001 ffffffff81099d01 dffffc0000000000 ffff8801d98d7d00 ffffffff81b7229c 0000000000000001 0000000000000000 0000000000000001 Call Trace: [<00000000272958c3>] __dump_stack lib/dump_stack.c:15 [inline] [<00000000272958c3>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000fb05f955>] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [<00000000ffd9854b>] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [<00000000c3586a90>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [<000000001dabf210>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [<000000001dabf210>] check_hung_task kernel/hung_task.c:126 [inline] [<000000001dabf210>] check_hung_uninterruptible_tasks kernel/hung_task.c:183 [inline] [<000000001dabf210>] watchdog+0x670/0xaf0 kernel/hung_task.c:263 [<00000000b15c5c58>] kthread+0x278/0x310 kernel/kthread.c:211 [<0000000029c0a456>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.9.194+ #0 task: 00000000bd721a0d task.stack: 0000000051f1f0ca RIP: 0010:[] c [<00000000b09b85c3>] select_task_rq_fair+0x1/0x3de0 kernel/sched/fair.c:7253 RSP: 0018:ffff8801db607bd8 EFLAGS: 00000046 RAX: ffffffff811c6580 RBX: ffff8801db607c88 RCX: 0000000000000000 RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff8801da6817c0 RBP: ffff8801db607cb0 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: ffff8801da6817c0 R13: ffff8801da6817fc R14: 0000000000000000 R15: ffff8801da681fb8 FS: 0000000000000000(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000002045000 CR3: 00000001d53ea000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffff8801db607cb0c ffffffff81178816c 0000000000000046c ffffffff83031180c ffff8801da681c94c 0000000000000000c ffff8801db621000c 1ffff1003b6c0f85c 0000000000000286c 0000000000000000c 0000000041b58ab3c ffffffff82e34c03c Call Trace: [<000000008698eca7>] wake_up_process+0x10/0x20 kernel/sched/core.c:2197 [<000000004ff5c4c2>] process_timeout+0x16/0x20 kernel/time/timer.c:1727 [<0000000000421ed8>] call_timer_fn+0x167/0x6d0 kernel/time/timer.c:1319 [<000000006fb26945>] expire_timers+0x25b/0x5c0 kernel/time/timer.c:1359 [<00000000ea302b90>] __run_timers kernel/time/timer.c:1674 [inline] [<00000000ea302b90>] run_timer_softirq+0x1ff/0x620 kernel/time/timer.c:1687 [<000000005d70fca0>] __do_softirq+0x22d/0x964 kernel/softirq.c:288 [<00000000c66d4bbb>] invoke_softirq kernel/softirq.c:368 [inline] [<00000000c66d4bbb>] irq_exit+0x119/0x160 kernel/softirq.c:409 [<0000000066c1b4bd>] exiting_irq arch/x86/include/asm/apic.h:669 [inline] [<0000000066c1b4bd>] smp_apic_timer_interrupt+0x7e/0xb0 arch/x86/kernel/apic/apic.c:1000 [<0000000092b82ac7>] apic_timer_interrupt+0xa5/0xb0 arch/x86/entry/entry_64.S:653 d [<000000006c9d2be4>] ? native_safe_halt+0x41/0x60 arch/x86/include/asm/irqflags.h:59 [<0000000079075887>] arch_safe_halt arch/x86/include/asm/paravirt.h:104 [inline] [<0000000079075887>] default_idle+0x56/0x370 arch/x86/kernel/process.c:500 [<0000000092449c7c>] arch_cpu_idle+0x10/0x20 arch/x86/kernel/process.c:491 [<00000000129f9e5a>] default_idle_call+0x36/0x60 kernel/sched/idle.c:97 [<000000008fcb4399>] cpuidle_idle_call kernel/sched/idle.c:155 [inline] [<000000008fcb4399>] cpu_idle_loop kernel/sched/idle.c:248 [inline] [<000000008fcb4399>] cpu_startup_entry+0x283/0x3a0 kernel/sched/idle.c:303 [<000000002c758b2d>] rest_init+0x18b/0x194 init/main.c:409 [<00000000b648efb0>] start_kernel+0x61e/0x652 init/main.c:671 [<000000001181176d>] x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:196 [<00000000147b72b5>] x86_64_start_kernel+0x137/0x15a arch/x86/kernel/head64.c:177 Code: c4c c89 ce7 ce8 c32 c83 c33 c00 ce9 cbf cdf cff cff c48 c8b cbd c58 cfe cff cff ce8 c21 c83 c33 c00 ce9 c3d ce0 cff cff ce8 c17 c83 c33 c00 ce9 c21 cfd cff cff c66 c90 c55 c<48> c89 ce5 c41 c57 c41 c56 c41 c55 c41 c89 ccd c41 c54 c41 c83 ce5 c01 c53 c89 cd3 c