ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! INFO: task syz-executor.3:21783 blocked for more than 140 seconds. Not tainted 4.9.155+ #27 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D25768 21783 1 0x00000004 ffff8801cf3baf80 ffff8801d18f7900 ffff8801db621000 ffff8801ced18000 ffff8801db621018 ffff8801a344f598 ffffffff82806806 0f8340896a5da1d2 0000000000000001 ffff8801cf3bb830 0000000000000006 ffff8801db6218f0 Call Trace: [] schedule+0x92/0x1c0 kernel/sched/core.c:3553 [] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3586 [] __mutex_lock_common kernel/locking/mutex.c:582 [inline] [] mutex_lock_nested+0x38d/0x920 kernel/locking/mutex.c:621 [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 [] fuse_lookup+0x89/0x3b0 fs/fuse/dir.c:406 [] lookup_slow+0x24b/0x480 fs/namei.c:1709 [] walk_component+0x71e/0xce0 fs/namei.c:1825 [] link_path_walk+0x897/0x1200 fs/namei.c:2161 [] path_mountpoint+0x67/0x6d0 fs/namei.c:2737 [] filename_mountpoint+0x17f/0x350 fs/namei.c:2758 [] user_path_mountpoint_at+0x3a/0x50 fs/namei.c:2788 [] SYSC_umount fs/namespace.c:1722 [inline] [] SyS_umount+0x136/0xd30 fs/namespace.c:1706 [] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11b/0xa40 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/1910: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xa8/0xd0 fs/file.c:781 2 locks held by getty/2037: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 2 locks held by syz-executor.3/21783: #0: (&type->i_mutex_dir_key#7){++++++}, at: [] inode_lock_shared include/linux/fs.h:778 [inline] #0: (&type->i_mutex_dir_key#7){++++++}, at: [] lookup_slow+0x160/0x480 fs/namei.c:1686 #1: (&fi->mutex){+.+.+.}, at: [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 2 locks held by syz-executor.3/22249: #0: (&type->i_mutex_dir_key#7){++++++}, at: [] inode_lock_shared include/linux/fs.h:778 [inline] #0: (&type->i_mutex_dir_key#7){++++++}, at: [] lookup_slow+0x160/0x480 fs/namei.c:1686 #1: (&fi->mutex){+.+.+.}, at: [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.155+ #27 ffff8801d9907cd0 ffffffff81b47871 0000000000000000 0000000000000000 0000000000000000 ffffffff81097301 00000000003ffed1 ffff8801d9907d08 ffffffff81b52afc 0000000000000000 0000000000000000 0000000000000000 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x5f7/0xa40 kernel/hung_task.c:239 [] kthread+0x278/0x310 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 1907 Comm: rs:main Q:Reg Not tainted 4.9.155+ #27 task: ffff8801d47b97c0 task.stack: ffff8801d3088000 RIP: 0010:[] c [] get_futex_key_refs.isra.0+0x1/0xa0 kernel/futex.c:420 RSP: 0018:ffff8801d308f820 EFLAGS: 00000246 RAX: ffff8801d308fab8 RBX: 0000000001cb5264 RCX: 0000000000000000 RDX: 1ffff1003a611f57 RSI: ffff8801d308fac8 RDI: ffff8801d3f13c80 RBP: ffff8801d308f900 R08: ffff8801d308fa60 R09: 0000000000000000 R10: 1ffff1003a611ff9 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8801d308f8d8 R14: ffff8801d47b97c0 R15: dffffc0000000000 FS: 00007fcad97d3700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c429c47000 CR3: 00000001d4c6a000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Stack: ffff8801d308f900c ffffffff8129b91cc ffff8801d6c79210c ffff8801cc69eac0c ffff8801d308fac8c ffff8801d3f13c80c 1ffff1003a611f0fc 0000000000000000c ffff8801d308fab8c 0000000001cb5000c ffff8801d308f888c 0000000041b58ab3c Call Trace: [] futex_wait_setup+0xd8/0x350 kernel/futex.c:2419 [] futex_wait+0x1e6/0x5d0 kernel/futex.c:2482 [] do_futex+0x159/0x1a70 kernel/futex.c:3270 [] SYSC_futex kernel/futex.c:3330 [inline] [] SyS_futex+0x253/0x360 kernel/futex.c:3298 [] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c48 cc7 cc7 c00 c8d ca6 c82 cc6 c05 ce1 c5e c14 c02 c01 ce8 c47 c00 ce4 cff ceb c96 c48 c89 cdf ce8 c2d c9e c25 c00 ce9 c7a cff cff cff c0f c1f c84 c00 c00 c00 c00 c00 c55 c<48> c89 ce5 c41 c54 c49 c89 cfc c53 c48 c89 cf3 ce8 cee c06 c08 c00 c4d c85 ce4 c74 c