ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! INFO: task syz-executor.3:17797 blocked for more than 140 seconds. Not tainted 4.9.155+ #27 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D25768 17797 1 0x00000004 ffff880188c05f00 ffff8801c95a1080 ffff8801db621000 ffff8801a82c0000 ffff8801db621018 ffff8801aad67598 ffffffff82806806 38ae9712eef777e1 0000000000000001 ffff880188c067b0 0000000000000006 ffff8801db6218f0 Call Trace: [] schedule+0x92/0x1c0 kernel/sched/core.c:3553 [] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3586 [] __mutex_lock_common kernel/locking/mutex.c:582 [inline] [] mutex_lock_nested+0x38d/0x920 kernel/locking/mutex.c:621 [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 [] fuse_lookup+0x89/0x3b0 fs/fuse/dir.c:406 [] lookup_slow+0x24b/0x480 fs/namei.c:1709 [] walk_component+0x71e/0xce0 fs/namei.c:1825 [] link_path_walk+0x897/0x1200 fs/namei.c:2161 [] path_mountpoint+0x67/0x6d0 fs/namei.c:2737 [] filename_mountpoint+0x17f/0x350 fs/namei.c:2758 [] user_path_mountpoint_at+0x3a/0x50 fs/namei.c:2788 [] SYSC_umount fs/namespace.c:1722 [inline] [] SyS_umount+0x136/0xd30 fs/namespace.c:1706 [] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11b/0xa40 kernel/hung_task.c:239 #1: (tasklist_lock){.+.?..}, at: [] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4336 2 locks held by getty/2019: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 1 lock held by syz-executor.2/10733: #0: (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x55/0x120 fs/exec.c:1369 1 lock held by syz-executor.2/10745: #0: (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x55/0x120 fs/exec.c:1369 1 lock held by syz-executor.0/10027: #0: (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x55/0x120 fs/exec.c:1369 2 locks held by syz-executor.3/17797: #0: (&type->i_mutex_dir_key#7){++++++}, at: [] inode_lock_shared include/linux/fs.h:778 [inline] #0: (&type->i_mutex_dir_key#7){++++++}, at: [] lookup_slow+0x160/0x480 fs/namei.c:1686 #1: (&fi->mutex){+.+.+.}, at: [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 2 locks held by syz-executor.3/23737: #0: (&type->i_mutex_dir_key#7){++++++}, at: [] inode_lock_shared include/linux/fs.h:778 [inline] #0: (&type->i_mutex_dir_key#7){++++++}, at: [] lookup_slow+0x160/0x480 fs/namei.c:1686 #1: (&fi->mutex){+.+.+.}, at: [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.155+ #27 ffff8801d9907cd0 ffffffff81b47871 0000000000000001 0000000000000000 0000000000000001 ffffffff81097301 00000000003ffd7b ffff8801d9907d08 ffffffff81b52afc 0000000000000001 0000000000000000 0000000000000001 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x5f7/0xa40 kernel/hung_task.c:239 [] kthread+0x278/0x310 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 1889 Comm: rs:main Q:Reg Not tainted 4.9.155+ #27 task: ffff8801d3cb2f80 task.stack: ffff8801d3aa0000 RIP: 0010:[] c [] iterate_chain_key kernel/locking/lockdep.c:317 [inline] RIP: 0010:[] c [] __lock_acquire+0x761/0x4350 kernel/locking/lockdep.c:3340 RSP: 0018:ffff8801d3aa7660 EFLAGS: 00000096 RAX: 0000000000000000 RBX: 0000000000000700 RCX: 00000000ffffffe4 RDX: 000000000000001c RSI: ffff8801d3cb3830 RDI: 0000000000000000 RBP: ffff8801d3aa77e8 R08: 0000000000000001 R09: ffff8801d3cb3850 R10: ffff8801d3cb3830 R11: 0000000000000001 R12: 0000000000000000 R13: 000000000000001c R14: 0000000000000000 R15: ffff8801d3cb2f80 FS: 00007fb070bb8700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fce4c669000 CR3: 00000001d5cec000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffffffff81243811c ffff8801d3aa7720c 0000000000000046c c59a1e8a19bd54d8c 0000000000000046c ffff8801d3cb2f80c 0000000000000000c ffff8801d3aa76d8c ffffffff81babb7cc ffffffff81babb7cc 000060fe2460e908c ffffffff830bdc80c Call Trace: [] lock_acquire+0x133/0x3d0 kernel/locking/lockdep.c:3756 [] finish_lock_switch kernel/sched/sched.h:1212 [inline] [] finish_task_switch+0x1dd/0x660 kernel/sched/core.c:2821 [] context_switch kernel/sched/core.c:2954 [inline] [] __schedule+0x65e/0x1b50 kernel/sched/core.c:3498 [] schedule+0x92/0x1c0 kernel/sched/core.c:3553 [] freezable_schedule include/linux/freezer.h:171 [inline] [] futex_wait_queue_me+0x2ec/0x5a0 kernel/futex.c:2372 [] futex_wait+0x208/0x5d0 kernel/futex.c:2487 [] do_futex+0x159/0x1a70 kernel/futex.c:3270 [] SYSC_futex kernel/futex.c:3330 [inline] [] SyS_futex+0x253/0x360 kernel/futex.c:3298 [] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c00 c00 c4c c89 ce0 c44 c89 ce1 c48 cc1 ce8 c20 c89 cc3 c41 c29 cc5 c41 c01 cc4 cc1 cc3 c04 c44 c31 ceb c41 c8d c14 c1c c29 cd9 cc1 cc3 c06 c48 c8b cbc c24 c98 c00 c00 c00 c<31> ccb c89 cd8 c41 c29 cdc c01 cd3 cc1 cc0 c08 c44 c31 ce0 c29 cc2 c41 c89 cc4 c41 c