ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! INFO: task syz-executor.4:26975 blocked for more than 140 seconds. Not tainted 4.9.165+ #26 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D25592 26975 1 0x00000004 ffff880149f10000 ffff880183d47900 ffff8801db621000 ffff880184240000 ffff8801db621018 ffff880149e97598 ffffffff827fbcce ffff880149e974d8 ffffffff81baff0c 00ff880149e975d0 ffff8801db6218f0 1ffff100293d2ea2 Call Trace: [] schedule+0x92/0x1c0 kernel/sched/core.c:3546 [] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3579 [] __mutex_lock_common kernel/locking/mutex.c:582 [inline] [] mutex_lock_nested+0x38d/0x920 kernel/locking/mutex.c:621 [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 [] fuse_lookup+0x89/0x3b0 fs/fuse/dir.c:406 [] lookup_slow+0x24b/0x480 fs/namei.c:1709 [] walk_component+0x71e/0xce0 fs/namei.c:1825 [] link_path_walk+0x897/0x1200 fs/namei.c:2161 [] path_mountpoint+0x67/0x6d0 fs/namei.c:2737 [] filename_mountpoint+0x17f/0x350 fs/namei.c:2758 [] user_path_mountpoint_at+0x3a/0x50 fs/namei.c:2788 [] SYSC_umount fs/namespace.c:1722 [inline] [] SyS_umount+0x136/0xd30 fs/namespace.c:1706 [] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x13c/0xae0 kernel/hung_task.c:239 #1: (tasklist_lock){.+.?..}, at: [] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4336 2 locks held by getty/2032: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 2 locks held by syz-executor.4/26975: #0: (&type->i_mutex_dir_key#7){++++++}, at: [] inode_lock_shared include/linux/fs.h:778 [inline] #0: (&type->i_mutex_dir_key#7){++++++}, at: [] lookup_slow+0x160/0x480 fs/namei.c:1686 #1: (&fi->mutex){+.+.+.}, at: [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 2 locks held by syz-executor.4/32508: #0: (&type->i_mutex_dir_key#7){++++++}, at: [] inode_lock_shared include/linux/fs.h:778 [inline] #0: (&type->i_mutex_dir_key#7){++++++}, at: [] lookup_slow+0x160/0x480 fs/namei.c:1686 #1: (&fi->mutex){+.+.+.}, at: [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.165+ #26 ffff8801d98d7cc8 ffffffff81b4ba01 0000000000000000 0000000000000000 0000000000000000 ffffffff81097401 dffffc0000000000 ffff8801d98d7d00 ffffffff81b56c8c 0000000000000000 0000000000000000 0000000000000000 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x661/0xae0 kernel/hung_task.c:239 [] kthread+0x278/0x310 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 1904 Comm: rsyslogd Not tainted 4.9.165+ #26 task: ffff8801d3af5f00 task.stack: ffff8801d3ac0000 RIP: 0010:[] c [] avtab_search_node+0x28e/0x490 security/selinux/ss/avtab.c:231 RSP: 0018:ffff8801d3ac76a0 EFLAGS: 00000246 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000008 RDX: 0000000000000000 RSI: ffffffff81a271a2 RDI: ffff8801d4e83998 RBP: ffff8801d3ac76f8 R08: 1ffff1003a758f3a R09: ffff8801d3ac79d4 R10: ffffed003a758f3e R11: ffff8801d3ac79f3 R12: ffff8801d4ec0780 R13: 00000000000001b0 R14: ffff8801d3ac77f0 R15: 00000000000001e3 FS: 00007fd290861700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c4234d8008 CR3: 00000001d7794000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffff8801d3ac77f2c 07078801d4fc1540c ffff8801d3ac77f4c 0000000000000002c ffffed003a758efec ffff8801d4fc1548c ffff8801d4fc1540c 0000000000000093c ffff8801d4fc15a8c dffffc0000000000c ffff8801d4fc1548c ffff8801d3ac7858c Call Trace: [] context_struct_compute_av+0x565/0x1080 security/selinux/ss/services.c:667 [] security_compute_av+0x290/0x770 security/selinux/ss/services.c:1120 [] avc_compute_av+0xc9/0x610 security/selinux/avc.c:974 [] avc_has_perm_noaudit security/selinux/avc.c:1112 [inline] [] avc_has_perm+0x355/0x3a0 security/selinux/avc.c:1146 [] task_has_system+0x159/0x230 security/selinux/hooks.c:1681 [] selinux_syslog security/selinux/hooks.c:2237 [inline] [] selinux_syslog+0x35/0xa0 security/selinux/hooks.c:2216 [] security_syslog+0x73/0xb0 security/security.c:210 [] check_syslog_permissions+0x5b/0xb0 kernel/printk/printk.c:635 [] do_syslog+0x9b/0xaf0 kernel/printk/printk.c:1440 [] kmsg_read+0x74/0xa0 fs/proc/kmsg.c:39 [] proc_reg_read+0xfd/0x180 fs/proc/inode.c:203 [] __vfs_read+0x116/0x550 fs/read_write.c:451 [] vfs_read+0x137/0x380 fs/read_write.c:474 [] SYSC_read fs/read_write.c:590 [inline] [] SyS_read+0xdc/0x1c0 fs/read_write.c:583 [] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c10 c4d c85 ce4 c0f c84 c1a c01 c00 c00 ce8 cae c5b c8f cff c4c c89 ce0 c48 cc1 ce8 c03 c0f cb6 c04 c18 c84 cc0 c74 c08 c3c c01 c0f c8e c4c c01 c00 c00 c45 c0f cb7 c3c c24 c<66> c45 c39 cfd c75 ca1 ce8 c87 c5b c8f cff c48 c8b c45 cc8 c0f cb6 c75 cc0 c0f cb6 c