ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
ip6_tunnel: 6tnl0 xmit: Local address not yet configured!
ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 243s!
INFO: task syz-executor1:4827 blocked for more than 140 seconds.
Showing busy workqueues and worker pools:
      Not tainted 4.14.90+ #29
workqueue events: flags=0x0
  pwq 0:
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
 cpus=0 node=0 flags=0x0 nice=0 active=29/256
    in-flight: 6089:rtc_timer_do_work
    pending: vmstat_shepherd, wait_rcu_exp_gp, destroy_super_work, proc_cleanup_work, proc_cleanup_work, key_garbage_collector
syz-executor1   D
, free_obj_work, proc_cleanup_work, binder_deferred_func, proc_cleanup_work, proc_cleanup_work, destroy_super_work, free_user_ns, destroy_super_work, destroy_super_work
28072  4827   1850 0x80000002
, proc_cleanup_work, proc_cleanup_work, bpf_map_free_deferred, proc_cleanup_work, proc_cleanup_work, proc_cleanup_work, destroy_super_work, bpf_map_free_deferred, bpf_map_free_deferred, bpf_map_free_deferred, bpf_map_free_deferred, free_user_ns, free_user_ns
workqueue events_unbound: flags=0x2
  pwq 4:
Call Trace:
 cpus=0-1 flags=0x4 nice=0 active=4/512
    in-flight: 6662:fsnotify_mark_destroy_workfn fsnotify_mark_destroy_workfn BAR(20071) BAR(21702) BAR(17452) BAR(22207) BAR(7226), 5618:fsnotify_connector_destroy_workfn fsnotify_connector_destroy_workfn

======================================================
WARNING: possible circular locking dependency detected
4.14.90+ #29 Not tainted
------------------------------------------------------
kworker/0:3/6089 is trying to acquire lock:
 (console_owner){-.-.}, at: [<ffffffffb9620d32>] console_trylock_spinning kernel/printk/printk.c:1652 [inline]
 (console_owner){-.-.}, at: [<ffffffffb9620d32>] vprintk_emit+0x1b2/0x320 kernel/printk/printk.c:1916

but task is already holding lock:
 (&pool->lock/1){..-.}, at: [<ffffffffb9534014>] show_workqueue_state.cold.22+0x278/0x1053 kernel/workqueue.c:4495

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #3 (&pool->lock/1){..-.}:
       __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
       _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:152
       spin_lock include/linux/spinlock.h:317 [inline]
       __queue_work+0x184/0xe40 kernel/workqueue.c:1419
       queue_work_on+0x8f/0xa0 kernel/workqueue.c:1488
       pty_write+0x172/0x1c0 drivers/tty/pty.c:124
       n_tty_write+0x969/0xda0 drivers/tty/n_tty.c:2356
       do_tty_write drivers/tty/tty_io.c:957 [inline]
       tty_write+0x397/0x810 drivers/tty/tty_io.c:1041
       __vfs_write+0xf4/0x5c0 fs/read_write.c:482
       vfs_write+0x17f/0x4d0 fs/read_write.c:546
       SYSC_write fs/read_write.c:593 [inline]
       SyS_write+0xc2/0x1a0 fs/read_write.c:585
       do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289
       entry_SYSCALL_64_after_hwframe+0x42/0xb7

-> #2 (&(&port->lock)->rlock){-.-.}:
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x41/0x50 kernel/locking/spinlock.c:160
       tty_port_tty_get+0x1b/0x80 drivers/tty/tty_port.c:287
       tty_port_default_wakeup+0x11/0x40 drivers/tty/tty_port.c:46
       serial8250_tx_chars+0x417/0xa70 drivers/tty/serial/8250/8250_port.c:1810
       serial8250_handle_irq.part.15+0x1b1/0x1f0 drivers/tty/serial/8250/8250_port.c:1883
       serial8250_handle_irq drivers/tty/serial/8250/8250_port.c:1869 [inline]
       serial8250_default_handle_irq+0x9b/0x110 drivers/tty/serial/8250/8250_port.c:1899
       serial8250_interrupt+0xea/0x1a0 drivers/tty/serial/8250/8250_core.c:129
       __handle_irq_event_percpu+0xf8/0x770 kernel/irq/handle.c:147
       handle_irq_event_percpu+0x76/0x150 kernel/irq/handle.c:187
       handle_irq_event+0xa1/0x12d kernel/irq/handle.c:204
       handle_edge_irq+0x1f0/0x7f0 kernel/irq/chip.c:770
       generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]
       handle_irq+0x242/0x328 arch/x86/kernel/irq_64.c:78
       do_IRQ+0x7d/0x1b0 arch/x86/kernel/irq.c:230
       ret_from_intr+0x0/0x22
       arch_local_irq_restore arch/x86/include/asm/paravirt.h:778 [inline]
       __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
       _raw_spin_unlock_irqrestore+0x59/0x70 kernel/locking/spinlock.c:192
       spin_unlock_irqrestore include/linux/spinlock.h:372 [inline]
       uart_write+0x2a7/0x480 drivers/tty/serial/serial_core.c:611
       process_output_block drivers/tty/n_tty.c:595 [inline]
       n_tty_write+0x4f5/0xda0 drivers/tty/n_tty.c:2333
       do_tty_write drivers/tty/tty_io.c:957 [inline]
       tty_write+0x397/0x810 drivers/tty/tty_io.c:1041
       redirected_tty_write+0x9a/0xa0 drivers/tty/tty_io.c:1062
       __vfs_write+0xf4/0x5c0 fs/read_write.c:482
       vfs_write+0x17f/0x4d0 fs/read_write.c:546
       SYSC_write fs/read_write.c:593 [inline]
       SyS_write+0xc2/0x1a0 fs/read_write.c:585
       do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289
       entry_SYSCALL_64_after_hwframe+0x42/0xb7

-> #1 (&port_lock_key){-.-.}:
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x41/0x50 kernel/locking/spinlock.c:160
       serial8250_console_write+0x6af/0x800 drivers/tty/serial/8250/8250_port.c:3232
       call_console_drivers kernel/printk/printk.c:1719 [inline]
       console_unlock+0x6d3/0xc80 kernel/printk/printk.c:2391
       vprintk_emit+0x125/0x320 kernel/printk/printk.c:1917
       vprintk_func+0x58/0x159 kernel/printk/printk_safe.c:401
       printk+0xa7/0xcf kernel/printk/printk.c:1990
       register_console+0x62c/0xa00 kernel/printk/printk.c:2710
       univ8250_console_init+0x2c/0x35 drivers/tty/serial/8250/8250_core.c:692
       console_init+0x50/0x59 kernel/printk/printk.c:2791
       start_kernel+0x490/0x73f init/main.c:635
       secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:240

-> #0 (console_owner){-.-.}:
       lock_acquire+0x10f/0x380 kernel/locking/lockdep.c:3991
       console_trylock_spinning kernel/printk/printk.c:1673 [inline]
       vprintk_emit+0x1f6/0x320 kernel/printk/printk.c:1916
       vprintk_func+0x58/0x159 kernel/printk/printk_safe.c:401
       printk+0xa7/0xcf kernel/printk/printk.c:1990
       show_pwq kernel/workqueue.c:4399 [inline]
       show_workqueue_state.cold.22+0x31a/0x1053 kernel/workqueue.c:4497
       wq_watchdog_timer_fn+0x436/0x4d0 kernel/workqueue.c:5481
       call_timer_fn+0x163/0x6d0 kernel/time/timer.c:1279
       expire_timers+0x1f3/0x4a0 kernel/time/timer.c:1318
       __run_timers kernel/time/timer.c:1634 [inline]
       run_timer_softirq+0x3a5/0x560 kernel/time/timer.c:1649
       __do_softirq+0x20d/0x9bd kernel/softirq.c:288
       invoke_softirq kernel/softirq.c:368 [inline]
       irq_exit+0x117/0x150 kernel/softirq.c:409
       exiting_irq arch/x86/include/asm/apic.h:648 [inline]
       smp_apic_timer_interrupt+0x18c/0x600 arch/x86/kernel/apic/apic.c:1064
       apic_timer_interrupt+0x84/0x90 arch/x86/entry/entry_64.S:787
       arch_local_irq_restore arch/x86/include/asm/paravirt.h:778 [inline]
       __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
       _raw_spin_unlock_irqrestore+0x59/0x70 kernel/locking/spinlock.c:192
       spin_unlock_irqrestore include/linux/spinlock.h:372 [inline]
       rtc_handle_legacy_irq+0x10b/0x180 drivers/rtc/interface.c:521
       rtc_timer_do_work+0x224/0x610 drivers/rtc/interface.c:881
       process_one_work+0x86e/0x1670 kernel/workqueue.c:2114
       worker_thread+0xdc/0x1000 kernel/workqueue.c:2248
       kthread+0x348/0x420 kernel/kthread.c:232
       ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402

other info that might help us debug this:

Chain exists of:
  console_owner --> &(&port->lock)->rlock --> &pool->lock/1

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&pool->lock/1);
                               lock(&(&port->lock)->rlock);
                               lock(&pool->lock/1);
  lock(console_owner);

 *** DEADLOCK ***

6 locks held by kworker/0:3/6089:
 #0:  ("events"){+.+.}, at: [<ffffffffb9529534>] process_one_work+0x784/0x1670 kernel/workqueue.c:2085
 #1:  ((&rtc->irqwork)){+.+.}, at: [<ffffffffb952956c>] process_one_work+0x7bc/0x1670 kernel/workqueue.c:2089
 #2:  (&rtc->ops_lock){+.+.}, at: [<ffffffffba487d81>] rtc_timer_do_work+0xc1/0x610 drivers/rtc/interface.c:868
 #3:  (kernel/workqueue.c:5419){+.-.}, at: [<ffffffffb96670f7>] lockdep_copy_map include/linux/lockdep.h:174 [inline]
 #3:  (kernel/workqueue.c:5419){+.-.}, at: [<ffffffffb96670f7>] call_timer_fn+0xd7/0x6d0 kernel/time/timer.c:1269
 #4:  (rcu_read_lock_sched){....}, at: [<ffffffffb9530340>] show_workqueue_state+0x0/0x100 kernel/workqueue.c:4367
 #5:  (&pool->lock/1){..-.}, at: [<ffffffffb9534014>] show_workqueue_state.cold.22+0x278/0x1053 kernel/workqueue.c:4495

stack backtrace:
CPU: 0 PID: 6089 Comm: kworker/0:3 Not tainted 4.14.90+ #29
Workqueue: events rtc_timer_do_work
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0xb9/0x11b lib/dump_stack.c:53
 print_circular_bug.isra.18.cold.43+0x2d3/0x40c kernel/locking/lockdep.c:1258
 check_prev_add kernel/locking/lockdep.c:1901 [inline]
 check_prevs_add kernel/locking/lockdep.c:2018 [inline]
 validate_chain kernel/locking/lockdep.c:2460 [inline]
 __lock_acquire+0x2ff9/0x4320 kernel/locking/lockdep.c:3487
 lock_acquire+0x10f/0x380 kernel/locking/lockdep.c:3991
 console_trylock_spinning kernel/printk/printk.c:1673 [inline]
 vprintk_emit+0x1f6/0x320 kernel/printk/printk.c:1916
 vprintk_func+0x58/0x159 kernel/printk/printk_safe.c:401
 printk+0xa7/0xcf kernel/printk/printk.c:1990
 show_pwq kernel/workqueue.c:4399 [inline]
 show_workqueue_state.cold.22+0x31a/0x1053 kernel/workqueue.c:4497
 wq_watchdog_timer_fn+0x436/0x4d0 kernel/workqueue.c:5481
 call_timer_fn+0x163/0x6d0 kernel/time/timer.c:1279
 expire_timers+0x1f3/0x4a0 kernel/time/timer.c:1318
 __run_timers kernel/time/timer.c:1634 [inline]
 run_timer_softirq+0x3a5/0x560 kernel/time/timer.c:1649
 __do_softirq+0x20d/0x9bd kernel/softirq.c:288
 invoke_softirq kernel/softirq.c:368 [inline]
 irq_exit+0x117/0x150 kernel/softirq.c:409
 exiting_irq arch/x86/include/asm/apic.h:648 [inline]
 smp_apic_timer_interrupt+0x18c/0x600 arch/x86/kernel/apic/apic.c:1064
 apic_timer_interrupt+0x84/0x90 arch/x86/entry/entry_64.S:787
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:778 [inline]
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x59/0x70 kernel/locking/spinlock.c:192
RSP: 0018:ffff88819b2afb60 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10
RAX: 0000000000000007 RBX: 0000000000000286 RCX: 1ffff110336cd6f4
RDX: 0000000000000000 RSI: ffff88819b66b780 RDI: 0000000000000286
RBP: ffff8881d5cfa7c8 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881d5cfa7c8
R13: 0000000000000286 R14: ffff8881d5cfa890 R15: ffffffffba487bc0
 spin_unlock_irqrestore include/linux/spinlock.h:372 [inline]
 rtc_handle_legacy_irq+0x10b/0x180 drivers/rtc/interface.c:521
 rtc_timer_do_work+0x224/0x610 drivers/rtc/interface.c:881
 process_one_work+0x86e/0x1670 kernel/workqueue.c:2114
 worker_thread+0xdc/0x1000 kernel/workqueue.c:2248
 kthread+0x348/0x420 kernel/kthread.c:232
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402
workqueue events_power_efficient: flags=0x80
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256
    pending: process_srcu, neigh_periodic_work
workqueue mm_percpu_wq: flags=0x8
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256
    pending: vmstat_update
workqueue netns: flags=0xe000a
  pwq 4: cpus=0-1 flags=0x4 nice=0
 active=1/1
    in-flight: 12112:cleanup_net
workqueue ipv6_addrconf: flags=0x40008
 schedule+0x7f/0x1b0 kernel/sched/core.c:3490
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1
    pending: addrconf_verify_work
 exp_funnel_lock kernel/rcu/tree_exp.h:295 [inline]
 _synchronize_rcu_expedited+0x696/0x850 kernel/rcu/tree_exp.h:596
pool 0:
 cpus=0 node=0 flags=0x0 nice=0 hung=244s workers=3 idle: 3 3410
pool 4: cpus=0-1 flags=0x4 nice=0 hung=2s workers=15 idle: 64 18003 5 6658 6669 18011 12110 1882 13135 18008 1888 5611
 synchronize_net+0x2b/0x40 net/core/dev.c:8214
 packet_release+0x796/0xb60 net/packet/af_packet.c:3046
 __sock_release+0xce/0x250 net/socket.c:602
 sock_close+0x15/0x20 net/socket.c:1138
 __fput+0x25e/0x6f0 fs/file_table.c:210
 task_work_run+0x116/0x190 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x8fb/0x28c0 kernel/exit.c:865
 do_group_exit+0x100/0x2e0 kernel/exit.c:968
 get_signal+0x4e5/0x1470 kernel/signal.c:2348
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:809
 exit_to_usermode_loop+0x116/0x150 arch/x86/entry/common.c:159
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:267 [inline]
 do_syscall_64+0x35d/0x4b0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x457759
RSP: 002b:00007f7041442cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000073bf08 RCX: 0000000000457759
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000073bf08
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000073bf0c
R13: 00007ffe1c39a3df R14: 00007f70414439c0 R15: 000000000073bf0c
INFO: task kworker/u4:7:5618 blocked for more than 140 seconds.
      Not tainted 4.14.90+ #29
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/u4:7    D26032  5618      2 0x80000000
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 schedule+0x7f/0x1b0 kernel/sched/core.c:3490
 schedule_timeout+0x710/0xe60 kernel/time/timer.c:1721
 do_wait_for_common kernel/sched/completion.c:91 [inline]
 __wait_for_common kernel/sched/completion.c:112 [inline]
 wait_for_common+0x3bc/0x4e0 kernel/sched/completion.c:123
 __synchronize_srcu+0x121/0x200 kernel/rcu/srcutree.c:898
 fsnotify_connector_destroy_workfn+0x3f/0xa0 fs/notify/mark.c:156
 process_one_work+0x86e/0x1670 kernel/workqueue.c:2114
 worker_thread+0xdc/0x1000 kernel/workqueue.c:2248
 kthread+0x348/0x420 kernel/kthread.c:232
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402
INFO: task kworker/u4:10:6662 blocked for more than 140 seconds.
      Not tainted 4.14.90+ #29
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/u4:10   D26184  6662      2 0x80000000
Workqueue: events_unbound fsnotify_mark_destroy_workfn
Call Trace:
 schedule+0x7f/0x1b0 kernel/sched/core.c:3490
 schedule_timeout+0x710/0xe60 kernel/time/timer.c:1721
 do_wait_for_common kernel/sched/completion.c:91 [inline]
 __wait_for_common kernel/sched/completion.c:112 [inline]
 wait_for_common+0x3bc/0x4e0 kernel/sched/completion.c:123
 __synchronize_srcu+0x121/0x200 kernel/rcu/srcutree.c:898
 fsnotify_mark_destroy_workfn+0xfc/0x310 fs/notify/mark.c:757
 process_one_work+0x86e/0x1670 kernel/workqueue.c:2114
 worker_thread+0xdc/0x1000 kernel/workqueue.c:2248
 kthread+0x348/0x420 kernel/kthread.c:232
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402
INFO: task syz-executor1:7226 blocked for more than 140 seconds.
      Not tainted 4.14.90+ #29
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor1   D28072  7226   1850 0x80000002
Call Trace:
 schedule+0x7f/0x1b0 kernel/sched/core.c:3490
 schedule_timeout+0x710/0xe60 kernel/time/timer.c:1721
 do_wait_for_common kernel/sched/completion.c:91 [inline]
 __wait_for_common kernel/sched/completion.c:112 [inline]
 wait_for_common+0x3bc/0x4e0 kernel/sched/completion.c:123
 flush_work+0x3b8/0x6e0 kernel/workqueue.c:2885
 fsnotify_destroy_group+0x115/0x2c0 fs/notify/group.c:85
 inotify_release+0x33/0x40 fs/notify/inotify/inotify_user.c:280
 __fput+0x25e/0x6f0 fs/file_table.c:210
 task_work_run+0x116/0x190 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x8fb/0x28c0 kernel/exit.c:865
 do_group_exit+0x100/0x2e0 kernel/exit.c:968
 get_signal+0x4e5/0x1470 kernel/signal.c:2348
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:809
 exit_to_usermode_loop+0x116/0x150 arch/x86/entry/common.c:159
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:267 [inline]
 do_syscall_64+0x35d/0x4b0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x457759
RSP: 002b:00007f7041442cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000073bf08 RCX: 0000000000457759
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000073bf08
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000073bf0c
R13: 00007ffe1c39a3df R14: 00007f70414439c0 R15: 000000000073bf0c
INFO: task syz-executor2:7785 blocked for more than 140 seconds.
      Not tainted 4.14.90+ #29
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor2   D29000  7785   1861 0x80000002
Call Trace:
 schedule+0x7f/0x1b0 kernel/sched/core.c:3490
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3548
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x521/0x1480 kernel/locking/mutex.c:893
 ipv6_sock_ac_close+0xe5/0x260 net/ipv6/anycast.c:184
 inet6_release+0x43/0x70 net/ipv6/af_inet6.c:449
 __sock_release+0xce/0x250 net/socket.c:602
 sock_close+0x15/0x20 net/socket.c:1138
 __fput+0x25e/0x6f0 fs/file_table.c:210
 task_work_run+0x116/0x190 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x8fb/0x28c0 kernel/exit.c:865
 do_group_exit+0x100/0x2e0 kernel/exit.c:968
 get_signal+0x4e5/0x1470 kernel/signal.c:2348
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:809
 exit_to_usermode_loop+0x116/0x150 arch/x86/entry/common.c:159
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:267 [inline]
 do_syscall_64+0x35d/0x4b0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x457759
RSP: 002b:00007f1a3311fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000073bfa8 RCX: 0000000000457759
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000073bfa8
RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000073bfac
R13: 00007ffc5e7ccb1f R14: 00007f1a331209c0 R15: 000000000073bfac
INFO: task syz-executor0:9761 blocked for more than 140 seconds.
      Not tainted 4.14.90+ #29
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor0   D27832  9761   1840 0x80000002
Call Trace:
 schedule+0x7f/0x1b0 kernel/sched/core.c:3490
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3548
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x521/0x1480 kernel/locking/mutex.c:893
 raw_close+0xe/0x30 net/ipv4/raw.c:699
 inet_release+0xf7/0x1c0 net/ipv4/af_inet.c:444
 __sock_release+0xce/0x250 net/socket.c:602
 sock_close+0x15/0x20 net/socket.c:1138
 __fput+0x25e/0x6f0 fs/file_table.c:210
 task_work_run+0x116/0x190 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x8fb/0x28c0 kernel/exit.c:865
 do_group_exit+0x100/0x2e0 kernel/exit.c:968
 get_signal+0x4e5/0x1470 kernel/signal.c:2348
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:809
 exit_to_usermode_loop+0x116/0x150 arch/x86/entry/common.c:159
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:267 [inline]
 do_syscall_64+0x35d/0x4b0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x457759
RSP: 002b:00007f8cb2a83cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000073c048 RCX: 0000000000457759
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000073c048
RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000073c04c
R13: 00007fffe7349ddf R14: 00007f8cb2a849c0 R15: 000000000073c04c
INFO: task syz-executor1:10506 blocked for more than 140 seconds.
      Not tainted 4.14.90+ #29
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor1   D28072 10506   1850 0x80000002
Call Trace:
 schedule+0x7f/0x1b0 kernel/sched/core.c:3490
 exp_funnel_lock kernel/rcu/tree_exp.h:295 [inline]
 _synchronize_rcu_expedited+0x696/0x850 kernel/rcu/tree_exp.h:596
 synchronize_net+0x2b/0x40 net/core/dev.c:8214
 packet_release+0x796/0xb60 net/packet/af_packet.c:3046
 __sock_release+0xce/0x250 net/socket.c:602
 sock_close+0x15/0x20 net/socket.c:1138
 __fput+0x25e/0x6f0 fs/file_table.c:210
 task_work_run+0x116/0x190 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x8fb/0x28c0 kernel/exit.c:865
 do_group_exit+0x100/0x2e0 kernel/exit.c:968
 get_signal+0x4e5/0x1470 kernel/signal.c:2348
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:809
 exit_to_usermode_loop+0x116/0x150 arch/x86/entry/common.c:159
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:267 [inline]
 do_syscall_64+0x35d/0x4b0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x457759
RSP: 002b:00007f7041442cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000073bf08 RCX: 0000000000457759
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000073bf08
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000073bf0c
R13: 00007ffe1c39a3df R14: 00007f70414439c0 R15: 000000000073bf0c
INFO: task syz-executor1:10508 blocked for more than 140 seconds.
      Not tainted 4.14.90+ #29
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor1   D28720 10508   1850 0x80000002
Call Trace:
 schedule+0x7f/0x1b0 kernel/sched/core.c:3490
 exp_funnel_lock kernel/rcu/tree_exp.h:295 [inline]
 _synchronize_rcu_expedited+0x696/0x850 kernel/rcu/tree_exp.h:596
 synchronize_net+0x2b/0x40 net/core/dev.c:8214
 packet_release+0x796/0xb60 net/packet/af_packet.c:3046
 __sock_release+0xce/0x250 net/socket.c:602
 sock_close+0x15/0x20 net/socket.c:1138
 __fput+0x25e/0x6f0 fs/file_table.c:210
 task_work_run+0x116/0x190 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x8fb/0x28c0 kernel/exit.c:865
 do_group_exit+0x100/0x2e0 kernel/exit.c:968
 get_signal+0x4e5/0x1470 kernel/signal.c:2348
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:809
 exit_to_usermode_loop+0x116/0x150 arch/x86/entry/common.c:159
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:267 [inline]
 do_syscall_64+0x35d/0x4b0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x457759
RSP: 002b:00007f7041421cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000073bfa8 RCX: 0000000000457759
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000073bfa8
RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000073bfac
R13: 00007ffe1c39a3df R14: 00007f70414229c0 R15: 000000000073bfac
INFO: task syz-executor5:10608 blocked for more than 140 seconds.
      Not tainted 4.14.90+ #29
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor5   D28072 10608   1854 0x80000002
Call Trace:
 schedule+0x7f/0x1b0 kernel/sched/core.c:3490
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3548
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x521/0x1480 kernel/locking/mutex.c:893
 raw_close+0xe/0x30 net/ipv4/raw.c:699
 inet_release+0xf7/0x1c0 net/ipv4/af_inet.c:444
 __sock_release+0xce/0x250 net/socket.c:602
 sock_close+0x15/0x20 net/socket.c:1138
 __fput+0x25e/0x6f0 fs/file_table.c:210
 task_work_run+0x116/0x190 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x8fb/0x28c0 kernel/exit.c:865
 do_group_exit+0x100/0x2e0 kernel/exit.c:968
 get_signal+0x4e5/0x1470 kernel/signal.c:2348
 do_signal+0x8f/0x1660 arch/x86/kernel/signal.c:809
 exit_to_usermode_loop+0x116/0x150 arch/x86/entry/common.c:159
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:267 [inline]
 do_syscall_64+0x35d/0x4b0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x457759
RSP: 002b:00007fbe76ea4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000073bf08 RCX: 0000000000457759
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000073bf08
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000073bf0c
R13: 00007fffaad6b4df R14: 00007fbe76ea59c0 R15: 000000000073bf0c
INFO: task kworker/u4:15:12112 blocked for more than 140 seconds.
      Not tainted 4.14.90+ #29
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/u4:15   D26360 12112      2 0x80000000
Workqueue: netns cleanup_net
Call Trace:
 schedule+0x7f/0x1b0 kernel/sched/core.c:3490
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3548
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x521/0x1480 kernel/locking/mutex.c:893
 cleanup_net+0x151/0x880 net/core/net_namespace.c:452
 process_one_work+0x86e/0x1670 kernel/workqueue.c:2114
 worker_thread+0xdc/0x1000 kernel/workqueue.c:2248
 kthread+0x348/0x420 kernel/kthread.c:232
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402
INFO: lockdep is turned off.
NMI backtrace for cpu 1
CPU: 1 PID: 23 Comm: khungtaskd Not tainted 4.14.90+ #29
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0xb9/0x11b lib/dump_stack.c:53
 nmi_cpu_backtrace.cold.0+0x47/0x85 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x121/0x146 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:196 [inline]
 watchdog+0x574/0xa70 kernel/hung_task.c:252
 kthread+0x348/0x420 kernel/kthread.c:232
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 6089 Comm: kworker/0:3 Not tainted 4.14.90+ #29
Workqueue: events rtc_timer_do_work
task: ffff88819b66af00 task.stack: ffff88819b2a8000
RIP: 0010:rtc_timer_do_work+0x215/0x610 drivers/rtc/interface.c:881
RSP: 0018:ffff88819b2afbb0 EFLAGS: 00000246
RAX: ffff8881d5cfa860 RBX: ffff8881d5cfa868 RCX: 1ffff1103ab9f50c
RDX: 0000000000000000 RSI: ffff8881d5cfa808 RDI: ffff8881d5cfa878
RBP: ffff88819b2afd40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: ffff8881d5cfa880 R14: ffff8881d5cfa890 R15: ffffffffba487bc0
FS:  0000000000000000(0000) GS:ffff8881dba00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2be6236fe0 CR3: 0000000183226006 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 process_one_work+0x86e/0x1670 kernel/workqueue.c:2114
 worker_thread+0xdc/0x1000 kernel/workqueue.c:2248
 kthread+0x348/0x420 kernel/kthread.c:232
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402
Code: 8b 7b f0 48 89 85 b8 fe ff ff 4d 85 ff 74 2b e8 42 6a 28 ff 48 8b 85 b8 fe ff ff 48 83 c0 08 48 89 c1 48 c1 e9 03 42 80 3c 21 00 <0f> 85 72 03 00 00 48 8b 7b f8 e8 dc b2 b7 00 e8 17 6a 28 ff 48