ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! INFO: task syz-executor.3:14228 blocked for more than 140 seconds. Not tainted 4.9.155+ #27 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D25768 14228 1 0x10000004 ffff8801cff44740 ffff8801a67dc200 ffff8801db621000 ffff8801a6a30000 ffff8801db621018 ffff8801b022f598 ffffffff82806806 f73046bb42f7b4d6 0000000000000001 ffff8801cff44ff0 0000000000000006 ffff8801db6218f0 Call Trace: [] schedule+0x92/0x1c0 kernel/sched/core.c:3553 [] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3586 [] __mutex_lock_common kernel/locking/mutex.c:582 [inline] [] mutex_lock_nested+0x38d/0x920 kernel/locking/mutex.c:621 [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 [] fuse_lookup+0x89/0x3b0 fs/fuse/dir.c:406 [] lookup_slow+0x24b/0x480 fs/namei.c:1709 [] walk_component+0x71e/0xce0 fs/namei.c:1825 [] link_path_walk+0x897/0x1200 fs/namei.c:2161 [] path_mountpoint+0x67/0x6d0 fs/namei.c:2737 [] filename_mountpoint+0x2f2/0x350 fs/namei.c:2760 [] user_path_mountpoint_at+0x3a/0x50 fs/namei.c:2788 [] SYSC_umount fs/namespace.c:1722 [inline] [] SyS_umount+0x136/0xd30 fs/namespace.c:1706 [] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11b/0xa40 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/1912: #0: (&f->f_pos_lock){+.+.+.}, at: [] __schedule+0x138/0x1b50 kernel/sched/core.c:3448 2 locks held by getty/2040: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 2 locks held by syz-executor.3/14228: #0: (&type->i_mutex_dir_key#7){++++++}, at: [] inode_lock_shared include/linux/fs.h:778 [inline] #0: (&type->i_mutex_dir_key#7){++++++}, at: [] lookup_slow+0x160/0x480 fs/namei.c:1686 #1: (&fi->mutex){+.+.+.}, at: [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 2 locks held by syz-executor.3/20264: #0: (&type->i_mutex_dir_key#7){++++++}, at: [] inode_lock_shared include/linux/fs.h:778 [inline] #0: (&type->i_mutex_dir_key#7){++++++}, at: [] lookup_slow+0x160/0x480 fs/namei.c:1686 #1: (&fi->mutex){+.+.+.}, at: [] fuse_lock_inode+0xad/0xe0 fs/fuse/inode.c:364 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.155+ #27 ffff8801d9907cd0 ffffffff81b47871 0000000000000001 0000000000000000 0000000000000001 ffffffff81097301 00000000003fff03 ffff8801d9907d08 ffffffff81b52afc 0000000000000001 0000000000000000 0000000000000001 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x5f7/0xa40 kernel/hung_task.c:239 [] kthread+0x278/0x310 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 1912 Comm: rsyslogd Not tainted 4.9.155+ #27 task: ffff8801d6165f00 task.stack: ffff8801d31a8000 RIP: 0010:[] c [] strlen+0x53/0xa0 lib/string.c:481 RSP: 0018:ffff8801d31af688 EFLAGS: 00000806 RAX: ffffffff82b1bd7a RBX: dffffc0000000000 RCX: ffffffff82b1bd7a RDX: 1ffffffff05637af RSI: ffffffff84242330 RDI: ffffffff82b1bd60 RBP: ffff8801d31af6a0 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff82b1bd60 R13: 0000000000000000 R14: ffffffff830bdbc0 R15: ffff8801d31af770 FS: 00007f0f8d416700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff232c5f88 CR3: 00000001d3185000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Stack: 000060fe246146d8c ffff8801c8561568c 1ffff1003a635edec ffff8801d31af798c ffffffff811ffa81c ffff8801d31af6c0c ffffffff81babd5cc ffff8801d31af7b8c ffffffff811ffabec ffffffff830d04a0c ffffffff84242348c ffff8801d61667a0c Call Trace: [] trace_event_get_offsets_lock include/trace/events/lock.h:38 [inline] [] perf_trace_lock+0xe1/0x540 include/trace/events/lock.h:38 [] trace_lock_release include/trace/events/lock.h:57 [inline] [] lock_release+0x92a/0xc30 kernel/locking/lockdep.c:3774 [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] [] _raw_spin_unlock_irqrestore+0x1f/0x70 kernel/locking/spinlock.c:191 [] spin_unlock_irqrestore include/linux/spinlock.h:362 [inline] [] avc_reclaim_node security/selinux/avc.c:541 [inline] [] avc_alloc_node security/selinux/avc.c:559 [inline] [] avc_alloc_node+0x29a/0x3c0 security/selinux/avc.c:547 [] avc_insert security/selinux/avc.c:670 [inline] [] avc_compute_av+0x182/0x610 security/selinux/avc.c:976 [] avc_has_perm_noaudit security/selinux/avc.c:1112 [inline] [] avc_has_perm+0x355/0x3a0 security/selinux/avc.c:1146 [] task_has_system+0x159/0x230 security/selinux/hooks.c:1681 [] selinux_syslog security/selinux/hooks.c:2237 [inline] [] selinux_syslog+0x35/0xa0 security/selinux/hooks.c:2216 [] security_syslog+0x73/0xb0 security/security.c:210 [] check_syslog_permissions+0x5b/0xb0 kernel/printk/printk.c:635 [] do_syslog+0x9b/0xaf0 kernel/printk/printk.c:1440 [] kmsg_read+0x74/0xa0 fs/proc/kmsg.c:39 [] proc_reg_read+0xfd/0x180 fs/proc/inode.c:203 [] __vfs_read+0x116/0x550 fs/read_write.c:451 [] vfs_read+0x137/0x380 fs/read_write.c:474 [] SYSC_read fs/read_write.c:590 [inline] [] SyS_read+0xdc/0x1c0 fs/read_write.c:583 [] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c07 c38 cd0 c7f c04 c84 cc0 c75 c4d c41 c80 c3c c24 c00 c74 c3b c48 cbb c00 c00 c00 c00 c00 cfc cff cdf c4c c89 ce0 c48 c83 cc0 c01 c48 c89 cc2 c48 c89 cc1 c48 cc1 cea c03 c<83> ce1 c07 c0f cb6 c14 c1a c38 cca c7f c04 c84 cd2 c75 c23 c80 c38 c00 c75 cde c48 c