ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! INFO: task syz-executor.4:6545 blocked for more than 140 seconds. Not tainted 4.9.165+ #28 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D25592 6545 1 0x00000004 ffff8801a498c740 ffff8801d0821b80 ffff8801db721000 ffff8801d1d7af80 ffff8801db721018 ffff8801abbdf598 ffffffff827fbd7e ffff8801abbdf4d8 ffffffff81bafffc 00ff8801abbdf5d0 ffff8801db7218f0 1ffff1003577bea2 Call Trace: [] schedule+0x92/0x1c0 kernel/sched/core.c:3546 [] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3579 [] __mutex_lock_common kernel/locking/mutex.c:582 [inline] [] mutex_lock_nested+0x38d/0x920 kernel/locking/mutex.c:621 [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 [] fuse_lookup+0x89/0x3b0 fs/fuse/dir.c:406 [] lookup_slow+0x24b/0x480 fs/namei.c:1709 [] walk_component+0x71e/0xce0 fs/namei.c:1825 [] link_path_walk+0x897/0x1200 fs/namei.c:2161 [] path_mountpoint+0x67/0x6d0 fs/namei.c:2737 [] filename_mountpoint+0x17f/0x350 fs/namei.c:2758 [] user_path_mountpoint_at+0x3a/0x50 fs/namei.c:2788 [] SYSC_umount fs/namespace.c:1722 [inline] [] SyS_umount+0x136/0xd30 fs/namespace.c:1706 [] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x13c/0xae0 kernel/hung_task.c:239 #1: (tasklist_lock){.+.?..}, at: [] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/1898: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xa8/0xd0 fs/file.c:781 2 locks held by getty/2026: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 2 locks held by syz-executor.4/6545: #0: (&type->i_mutex_dir_key#7){++++++}, at: [] inode_lock_shared include/linux/fs.h:778 [inline] #0: (&type->i_mutex_dir_key#7){++++++}, at: [] lookup_slow+0x160/0x480 fs/namei.c:1686 #1: (&fi->mutex){+.+.+.}, at: [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 1 lock held by syz-executor.4/15244: #0: (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x55/0x120 fs/exec.c:1369 1 lock held by syz-executor.4/15269: #0: (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x55/0x120 fs/exec.c:1369 2 locks held by syz-executor.4/15948: #0: (&type->i_mutex_dir_key#7){++++++}, at: [] inode_lock_shared include/linux/fs.h:778 [inline] #0: (&type->i_mutex_dir_key#7){++++++}, at: [] lookup_slow+0x160/0x480 fs/namei.c:1686 #1: (&fi->mutex){+.+.+.}, at: [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.165+ #28 ffff8801d98d7cc8 ffffffff81b4baf1 0000000000000000 0000000000000000 0000000000000000 ffffffff81097401 dffffc0000000000 ffff8801d98d7d00 ffffffff81b56d7c 0000000000000000 0000000000000000 0000000000000000 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x661/0xae0 kernel/hung_task.c:239 [] kthread+0x278/0x310 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 1898 Comm: rsyslogd Not tainted 4.9.165+ #28 task: ffff8801d4308000 task.stack: ffff8801d39c0000 RIP: 0010:[] c [] preempt_count_sub+0x67/0x170 kernel/sched/core.c:3275 RSP: 0018:ffff8801d39c78e8 EFLAGS: 00000097 RAX: 0000000080000004 RBX: 00000000ffffffff RCX: 0000000000000000 RDX: 0000000000000004 RSI: ffffffff81bafe1c RDI: 0000000000000001 RBP: ffff8801d39c78f0 R08: 0000000000000000 R09: ffff8801db721108 R10: 0000000000003c00 R11: 0000008588771c0c R12: 0000000000000001 R13: ffff8801db7210a0 R14: ffff8801d4138080 R15: ffff8801d4138278 FS: 00007f424acfc700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8eb151e000 CR3: 00000001ca7a1000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: 0000000000000002c ffff8801d39c7918c ffffffff8124c9a2c ffffffff81247da5c ffffffff831fb0e0c ffff8801db7210a0c ffff8801d39c7930c ffffffff81244387c dffffc0000000000c ffff8801d39c7a60c ffffffff811aa8aac 0000000041b58ab3c Call Trace: [] rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1109 [inline] [] rcu_lockdep_current_cpu_online+0xf2/0x140 kernel/rcu/tree.c:1096 [] rcu_read_lock_sched_held+0x97/0x130 kernel/rcu/update.c:109 [] trace_sched_load_avg_task include/trace/events/sched.h:626 [inline] [] update_load_avg kernel/sched/fair.c:3345 [inline] [] enqueue_entity kernel/sched/fair.c:3647 [inline] [] enqueue_task_fair+0x4c4a/0xa0d0 kernel/sched/fair.c:4839 [] enqueue_task kernel/sched/core.c:763 [inline] [] activate_task+0x15a/0x290 kernel/sched/core.c:781 [] ttwu_activate kernel/sched/core.c:1693 [inline] [] ttwu_do_activate+0xd3/0x200 kernel/sched/core.c:1752 [] ttwu_queue kernel/sched/core.c:1908 [inline] [] try_to_wake_up+0x5a3/0x1030 kernel/sched/core.c:2122 [] wake_up_process kernel/sched/core.c:2197 [inline] [] wake_up_q+0x95/0xf0 kernel/sched/core.c:470 [] futex_wake_op kernel/futex.c:1596 [inline] [] do_futex+0x12d3/0x1a70 kernel/futex.c:3283 [] SYSC_futex kernel/futex.c:3333 [inline] [] SyS_futex+0x253/0x360 kernel/futex.c:3301 [] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: cc9 c75 c18 c65 c8b c05 c5a c14 ceb c7e c25 cff cff cff c7f c39 cc3 c7f c1b c81 cfb cfe c00 c00 c00 c76 c75 c65 c8b c05 c42 c14 ceb c7e cf7 cdb c65 c01 c1d c39 c14 ceb c7e c<5b> c5d cc3 ce8 c91 c90 ca1 c00 c85 cc0 c74 cf4 c48 cc7 cc0 c80 cac c24 c84 c48 cba c