ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! INFO: task kworker/u4:36:27854 blocked for more than 140 seconds. Not tainted 4.9.169+ #43 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/u4:36 D25832 27854 2 0x80000000 Workqueue: netns cleanup_net ffff8801a4fe8000 0000000000000000 ffff8801db721000 ffff8801a30e4740 ffff8801db721018 ffff8801c82d79a8 ffffffff8280152e 000000000002bd10 1ffff1003905af2c 0000000000000000 ffff8801db7218f0 1ffff1003905af24 Call Trace: [<0000000011a0d033>] schedule+0x92/0x1c0 kernel/sched/core.c:3546 [<0000000062f080b0>] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3579 [<000000004c9db9b5>] __mutex_lock_common kernel/locking/mutex.c:582 [inline] [<000000004c9db9b5>] mutex_lock_nested+0x38d/0x920 kernel/locking/mutex.c:621 [<00000000cf6c492d>] cleanup_net+0x131/0x8a0 net/core/net_namespace.c:440 [<000000003176b912>] process_one_work+0x88b/0x1600 kernel/workqueue.c:2114 [<00000000995d7d3f>] worker_thread+0x5df/0x11d0 kernel/workqueue.c:2251 [<000000004ce87862>] kthread+0x278/0x310 kernel/kthread.c:211 [<000000002e7d1304>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [<0000000034ea4f73>] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [<0000000034ea4f73>] watchdog+0x13c/0xae0 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [<0000000081afe1f6>] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4339 2 locks held by getty/2024: #0: (&tty->ldisc_sem){++++++}, at: [<000000008001215a>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+...}, at: [<000000008a649493>] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 3 locks held by kworker/u4:36/27854: #0: ("%s""netns"){.+.+.+}, at: [<00000000b528ed64>] process_one_work+0x790/0x1600 kernel/workqueue.c:2107 #1: (net_cleanup_work){+.+.+.}, at: [<00000000841c052a>] process_one_work+0x7ce/0x1600 kernel/workqueue.c:2111 #2: (net_mutex){+.+.+.}, at: [<00000000cf6c492d>] cleanup_net+0x131/0x8a0 net/core/net_namespace.c:440 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.169+ #43 ffff8801d98d7cc8 ffffffff81b4f7f1 0000000000000001 0000000000000000 0000000000000001 ffffffff81097401 dffffc0000000000 ffff8801d98d7d00 ffffffff81b5aa8c 0000000000000001 0000000000000000 0000000000000001 Call Trace: [<000000007dcfc25d>] __dump_stack lib/dump_stack.c:15 [inline] [<000000007dcfc25d>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<0000000041ca0cf1>] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [<00000000dcaf2542>] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [<00000000e8be4f57>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [<000000000b40c58c>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [<000000000b40c58c>] check_hung_task kernel/hung_task.c:125 [inline] [<000000000b40c58c>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [<000000000b40c58c>] watchdog+0x661/0xae0 kernel/hung_task.c:239 [<000000004ce87862>] kthread+0x278/0x310 kernel/kthread.c:211 [<000000002e7d1304>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 31086 Comm: syz-executor.2 Not tainted 4.9.169+ #43 task: 0000000092b6aa8b task.stack: 00000000612af5e8 RIP: 0010:[] c [<0000000093ae255f>] do_raw_spin_lock+0xa/0x1e0 kernel/locking/spinlock_debug.c:111 RSP: 0000:ffff8801c61bfa98 EFLAGS: 00000082 RAX: dffffc0000000000 RBX: ffffffff842c9840 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff8801c0a208d8 RDI: ffffffff842c9848 RBP: ffff8801c61bfab8 R08: 0000000000000001 R09: 000000000000749f R10: ffff8801c0a208d8 R11: 0000000000000001 R12: ffffffff842c9848 R13: 0000000000000086 R14: ffffffff842c9848 R15: 0000000000000046 FS: 00007f6dad971700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000027dbfc01c65 CR3: 00000001c8a31000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffffffff82810ef8c ffffffff81bb8929c dffffc0000000000c ffffffff81102a65c ffff8801c61bfba8c ffffffff81bb8929c ffffffff811ffe30c ffff8801c61bfae0c ffff88015fd9b000c ffff88015fd9a420c ffff8801c61bfb28c ffffffff81bb5e7cc Call Trace: [<000000009b8d376d>] __debug_check_no_obj_freed lib/debugobjects.c:711 [inline] [<000000009b8d376d>] debug_check_no_obj_freed+0x159/0x6d0 lib/debugobjects.c:749 [<000000001f477e51>] slab_free_hook mm/slub.c:1348 [inline] [<000000001f477e51>] slab_free_freelist_hook mm/slub.c:1377 [inline] [<000000001f477e51>] slab_free mm/slub.c:2958 [inline] [<000000001f477e51>] kmem_cache_free+0x1a4/0x310 mm/slub.c:2980 [<00000000f7ee5bbc>] __sigqueue_free.part.0+0x55/0x60 kernel/signal.c:403 [<0000000020d7d71d>] __sigqueue_free kernel/signal.c:399 [inline] [<0000000020d7d71d>] dequeue_synchronous_signal kernel/signal.c:737 [inline] [<0000000020d7d71d>] get_signal+0x956/0x1aa0 kernel/signal.c:2270 [<00000000daf5faa5>] do_signal+0x9c/0x1920 arch/x86/kernel/signal.c:807 [<00000000fce74b45>] exit_to_usermode_loop+0x11c/0x160 arch/x86/entry/common.c:158 [<000000009df33989>] prepare_exit_to_usermode+0x143/0x1b0 arch/x86/entry/common.c:194 [<000000008b1debdb>] retint_user+0x8/0x3c Code: c48 c89 c75 ce8 c4c c89 c4d cf0 ce8 cc4 c33 c2e c00 c48 c8b c75 ce8 c4c c8b c4d cf0 ceb cb3 c66 c2e c0f c1f c84 c00 c00 c00 c00 c00 c48 cb8 c00 c00 c00 c00 c00 cfc cff cdf c<55> c48 c89 ce5 c41 c56 c41 c55 c41 c54 c49 c89 cfc c48 c83 cc7 c04 c48 c89 cfa c53 c