ip6_tunnel: { xmit: Local address not yet configured! INFO: task syz-executor.0:21932 blocked for more than 140 seconds. Not tainted 4.9.194+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.0 D28672 21932 1 0x00000004 0000000000000087 ffff8801b3b94740 ffff8801d9456300 ffff8801db621000 ffff8801cafdaf80 ffff8801db621018 ffff8801a90bfc08 ffffffff8281af8e ffffffff82e55c1b ffffffff81a13c70 000000000000001e ffff8801db6218f0 Call Trace: [<000000006447406d>] schedule+0x92/0x1c0 kernel/sched/core.c:3546 [<00000000c933381d>] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3579 [<000000000cc3ed66>] __mutex_lock_common kernel/locking/mutex.c:582 [inline] [<000000000cc3ed66>] mutex_lock_nested+0x38d/0x920 kernel/locking/mutex.c:621 [<00000000e5e585c6>] copy_net_ns+0x15b/0x340 net/core/net_namespace.c:407 [<000000006152e5db>] create_new_namespaces+0x37c/0x7a0 kernel/nsproxy.c:106 [<0000000009a48b56>] unshare_nsproxy_namespaces+0xab/0x1e0 kernel/nsproxy.c:205 [<00000000926ebb03>] SYSC_unshare kernel/fork.c:2402 [inline] [<00000000926ebb03>] SyS_unshare+0x305/0x6f0 kernel/fork.c:2352 [<0000000095a4a6ec>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288 [<0000000083bfaa28>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [<00000000140c84c4>] check_hung_uninterruptible_tasks kernel/hung_task.c:169 [inline] #0: (rcu_read_lock){......}, at: [<00000000140c84c4>] watchdog+0x14b/0xaf0 kernel/hung_task.c:263 #1: (tasklist_lock){.+.+..}, at: [<00000000d4f430b2>] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4336 2 locks held by getty/2024: #0: (&tty->ldisc_sem){++++++}, at: [<0000000053b20a35>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:376 #1: (&ldata->atomic_read_lock){+.+...}, at: [<000000000053d2ee>] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 3 locks held by kworker/1:1/15228: #0: ("%s"("ipv6_addrconf")){.+.+..}, at: [<00000000d17296b7>] process_one_work+0x790/0x1600 kernel/workqueue.c:2107 #1: ((addr_chk_work).work){+.+...}, at: [<0000000078675f86>] process_one_work+0x7ce/0x1600 kernel/workqueue.c:2111 #2: (rtnl_mutex){+.+.+.}, at: [<00000000359e8255>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70 1 lock held by syz-executor.0/21932: #0: (net_mutex){+.+.+.}, at: [<00000000e5e585c6>] copy_net_ns+0x15b/0x340 net/core/net_namespace.c:407 1 lock held by syz-executor.1/21994: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.1/21995: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.1/21996: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.1/21997: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.1/21998: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.2/22003: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.2/22005: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.2/22006: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.2/22007: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.2/22008: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.2/22009: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.2/22010: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.4/22015: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.4/22019: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.4/22020: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.4/22022: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.4/22023: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 1 lock held by syz-executor.4/22026: #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnl_lock net/core/rtnetlink.c:70 [inline] #0: (rtnl_mutex){+.+.+.}, at: [<00000000444a8ef8>] rtnetlink_rcv+0x1c/0x40 net/core/rtnetlink.c:4086 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.194+ #0 ffff8801d98efcc8 ffffffff81b67001 0000000000000000 0000000000000000 0000000000000000 ffffffff81099d01 dffffc0000000000 ffff8801d98efd00 ffffffff81b7229c 0000000000000000 0000000000000000 0000000000000000 Call Trace: [<0000000078fe78aa>] __dump_stack lib/dump_stack.c:15 [inline] [<0000000078fe78aa>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000bc6c7fda>] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [<00000000ac5b18e1>] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [<000000005d7a25b3>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [<0000000059102377>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [<0000000059102377>] check_hung_task kernel/hung_task.c:126 [inline] [<0000000059102377>] check_hung_uninterruptible_tasks kernel/hung_task.c:183 [inline] [<0000000059102377>] watchdog+0x670/0xaf0 kernel/hung_task.c:263 [<000000001b76ae93>] kthread+0x278/0x310 kernel/kthread.c:211 [<000000006764764d>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 2096 Comm: kworker/u4:2 Not tainted 4.9.194+ #0 Workqueue: netns cleanup_netc task: 00000000f480788f task.stack: 00000000264ba9bc RIP: 0010:[] c [<00000000f59e3fb7>] addrconf_ifdown+0x2b8/0x14d0 net/ipv6/addrconf.c:3611 RSP: 0018:ffff8801ab61f5f8 EFLAGS: 00000246 RAX: 1ffff1002a230396 RBX: ffff880151181b80 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff826d7dc5 RDI: ffff880151181cb0 RBP: ffff8801ab61f6e0 R08: 0000000000000001 R09: 000000000000254a R10: ffff8801ce475090 R11: 0000000000000001 R12: dffffc0000000000 R13: ffffffff84b8b358 R14: 0000000000000000 R15: ffff880193e34480 FS: 0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f69a4e04000 CR3: 00000001d42d0000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffff8801ce474ff0c 0000000000000006c 1ffff100356c3ecbc 0000000100000000c ffff8801a8070000c ffffffff8120cb01c ffffffff00000000c 00000007ce474fe8c ffff8801ce474740c ffffffff8282ac5ac 0000000000000292c fffffbfff097166bc Call Trace: [<00000000e468cd6e>] addrconf_notify+0x7ac/0x1f50 net/ipv6/addrconf.c:3496 [<00000000cfb5a2d3>] notifier_call_chain+0xb4/0x1d0 kernel/notifier.c:93 [<000000004f66a5ec>] __raw_notifier_call_chain kernel/notifier.c:394 [inline] [<000000004f66a5ec>] raw_notifier_call_chain+0x2e/0x40 kernel/notifier.c:401 [<0000000023c60bf8>] call_netdevice_notifiers_info+0x56/0x70 net/core/dev.c:1647 [<00000000f7fe8533>] call_netdevice_notifiers net/core/dev.c:1663 [inline] [<00000000f7fe8533>] rollback_registered_many+0x6ef/0xb50 net/core/dev.c:6863 [<000000008f2cc143>] unregister_netdevice_many.part.0+0x1b/0x1e0 net/core/dev.c:7912 [<00000000ce7ab0a6>] unregister_netdevice_many+0x3b/0x50 net/core/dev.c:7911 [<00000000411a3f5a>] sit_exit_net+0x432/0x610 net/ipv6/sit.c:1870 [<00000000ee5cf0ef>] ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:136 [<000000007c96d99c>] cleanup_net+0x3d6/0x8a0 net/core/net_namespace.c:474 [<0000000012398859>] process_one_work+0x88b/0x1600 kernel/workqueue.c:2114 [<00000000b0a5c6ce>] worker_thread+0x5df/0x11d0 kernel/workqueue.c:2251 [<000000001b76ae93>] kthread+0x278/0x310 kernel/kthread.c:211 [<000000006764764d>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375 Code: c00 ce8 c4d ca9 cc4 cfe c48 c81 ceb c40 c01 c00 c00 c0f c84 c5a c02 c00 c00 ce8 c3b ca9 cc4 cfe c48 c8d cbb c30 c01 c00 c00 c48 c89 cf8 c48 cc1 ce8 c03 c42 c80 c3c c20 c00 c<0f> c85 cdb c0d c00 c00 c4c c39 cbb c30 c01 c00 c00 c75 c99 ce8 c14 ca9 cc4 cfe c48 c