INFO: task khugepaged:1192 blocked for more than 143 seconds. Not tainted 5.9.0-rc7-next-20200928-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:khugepaged state:D stack:24192 pid: 1192 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:3778 [inline] __schedule+0xec5/0x2200 kernel/sched/core.c:4527 schedule+0xcf/0x270 kernel/sched/core.c:4605 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:4664 __mutex_lock_common kernel/locking/mutex.c:1033 [inline] __mutex_lock+0x3e2/0x10e0 kernel/locking/mutex.c:1103 lru_add_drain_all+0x5f/0x6f0 mm/swap.c:801 khugepaged_do_scan mm/khugepaged.c:2178 [inline] khugepaged+0x10b/0x5690 mm/khugepaged.c:2239 kthread+0x3af/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296 INFO: task syz-executor.4:6910 blocked for more than 143 seconds. Not tainted 5.9.0-rc7-next-20200928-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:24016 pid: 6910 ppid: 1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:3778 [inline] __schedule+0xec5/0x2200 kernel/sched/core.c:4527 schedule+0xcf/0x270 kernel/sched/core.c:4605 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:4664 __mutex_lock_common kernel/locking/mutex.c:1033 [inline] __mutex_lock+0x3e2/0x10e0 kernel/locking/mutex.c:1103 __blkdev_get+0x457/0x1870 fs/block_dev.c:1476 blkdev_get+0xd1/0x240 fs/block_dev.c:1631 blkdev_open+0x21d/0x2b0 fs/block_dev.c:1748 do_dentry_open+0x4b9/0x11b0 fs/open.c:817 do_open fs/namei.c:3252 [inline] path_openat+0x1b9a/0x2730 fs/namei.c:3369 do_filp_open+0x17e/0x3c0 fs/namei.c:3396 do_sys_openat2+0x16d/0x420 fs/open.c:1168 do_sys_open fs/open.c:1184 [inline] __do_sys_open fs/open.c:1192 [inline] __se_sys_open fs/open.c:1188 [inline] __x64_sys_open+0x119/0x1c0 fs/open.c:1188 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x417aa1 Code: Bad RIP value. RSP: 002b:00007fff5d0bbbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 000000000002fcbd RCX: 0000000000417aa1 RDX: 00007fff5d0bbc4a RSI: 0000000000000002 RDI: 00007fff5d0bbc40 RBP: 00000000000000ac R08: 0000000000000440 R09: 000000000000000a R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000000 R13: 00007fff5d0bbbf0 R14: 000000000002f927 R15: 00007fff5d0bbc00 INFO: task syz-executor.5:6935 blocked for more than 143 seconds. Not tainted 5.9.0-rc7-next-20200928-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:24016 pid: 6935 ppid: 1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:3778 [inline] __schedule+0xec5/0x2200 kernel/sched/core.c:4527 schedule+0xcf/0x270 kernel/sched/core.c:4605 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:4664 __mutex_lock_common kernel/locking/mutex.c:1033 [inline] __mutex_lock+0x3e2/0x10e0 kernel/locking/mutex.c:1103 __blkdev_get+0x457/0x1870 fs/block_dev.c:1476 blkdev_get+0xd1/0x240 fs/block_dev.c:1631 blkdev_open+0x21d/0x2b0 fs/block_dev.c:1748 do_dentry_open+0x4b9/0x11b0 fs/open.c:817 do_open fs/namei.c:3252 [inline] path_openat+0x1b9a/0x2730 fs/namei.c:3369 do_filp_open+0x17e/0x3c0 fs/namei.c:3396 do_sys_openat2+0x16d/0x420 fs/open.c:1168 do_sys_open fs/open.c:1184 [inline] __do_sys_open fs/open.c:1192 [inline] __se_sys_open fs/open.c:1188 [inline] __x64_sys_open+0x119/0x1c0 fs/open.c:1188 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x417aa1 Code: Bad RIP value. RSP: 002b:00007ffcfa471f70 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 000000000002fcb7 RCX: 0000000000417aa1 RDX: 00007ffcfa47200a RSI: 0000000000000002 RDI: 00007ffcfa472000 RBP: 00000000000000a4 R08: 0000000000000440 R09: 000000000000000a R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ffcfa471fb0 R14: 000000000002f941 R15: 00007ffcfa471fc0 INFO: task kworker/u4:9:8483 blocked for more than 144 seconds. Not tainted 5.9.0-rc7-next-20200928-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:9 state:D stack:25624 pid: 8483 ppid: 2 flags:0x00004000 Workqueue: events_unbound fsnotify_mark_destroy_workfn Call Trace: context_switch kernel/sched/core.c:3778 [inline] __schedule+0xec5/0x2200 kernel/sched/core.c:4527 schedule+0xcf/0x270 kernel/sched/core.c:4605 schedule_timeout+0x1d8/0x250 kernel/time/timer.c:1855 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x163/0x260 kernel/sched/completion.c:138 __synchronize_srcu+0x132/0x220 kernel/rcu/srcutree.c:924 fsnotify_mark_destroy_workfn+0xfd/0x340 fs/notify/mark.c:836 process_one_work+0x933/0x15a0 kernel/workqueue.c:2269 worker_thread+0x64c/0x1120 kernel/workqueue.c:2415 kthread+0x3af/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296 INFO: task kworker/u4:12:8496 blocked for more than 144 seconds. Not tainted 5.9.0-rc7-next-20200928-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:12 state:D stack:24136 pid: 8496 ppid: 2 flags:0x00004000 Workqueue: events_unbound fsnotify_connector_destroy_workfn Call Trace: context_switch kernel/sched/core.c:3778 [inline] __schedule+0xec5/0x2200 kernel/sched/core.c:4527 schedule+0xcf/0x270 kernel/sched/core.c:4605 schedule_timeout+0x1d8/0x250 kernel/time/timer.c:1855 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x163/0x260 kernel/sched/completion.c:138 __synchronize_srcu+0x132/0x220 kernel/rcu/srcutree.c:924 fsnotify_connector_destroy_workfn+0x49/0xa0 fs/notify/mark.c:164 process_one_work+0x933/0x15a0 kernel/workqueue.c:2269 worker_thread+0x64c/0x1120 kernel/workqueue.c:2415 kthread+0x3af/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296 INFO: task systemd-udevd:10162 blocked for more than 144 seconds. Not tainted 5.9.0-rc7-next-20200928-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:systemd-udevd state:D stack:27728 pid:10162 ppid: 3935 flags:0x00000100 Call Trace: context_switch kernel/sched/core.c:3778 [inline] __schedule+0xec5/0x2200 kernel/sched/core.c:4527 schedule+0xcf/0x270 kernel/sched/core.c:4605 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:4664 __mutex_lock_common kernel/locking/mutex.c:1033 [inline] __mutex_lock+0x3e2/0x10e0 kernel/locking/mutex.c:1103 lo_release+0x1a/0x1f0 drivers/block/loop.c:1912 __blkdev_put+0x642/0x890 fs/block_dev.c:1779 blkdev_close+0x8c/0xb0 fs/block_dev.c:1848 __fput+0x285/0x920 fs/file_table.c:281 task_work_run+0xdd/0x190 kernel/task_work.c:141 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop kernel/entry/common.c:165 [inline] exit_to_user_mode_prepare+0x1e2/0x1f0 kernel/entry/common.c:192 syscall_exit_to_user_mode+0x7a/0x2c0 kernel/entry/common.c:267 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f40b1095270 Code: Bad RIP value. RSP: 002b:00007ffd91dd52d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007f40b1095270 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 RBP: 00007f40b1f4e710 R08: 000055bed6fb3070 R09: 000055bed6fb2e00 R10: 00007f40b1f4e8c0 R11: 0000000000000246 R12: 0000000000000000 R13: 000055bed6fb4560 R14: 0000000000000003 R15: 000000000000000e INFO: task syz-executor.0:10354 can't die for more than 145 seconds. task:syz-executor.0 state:D stack:28136 pid:10354 ppid: 6902 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:3778 [inline] __schedule+0xec5/0x2200 kernel/sched/core.c:4527 schedule+0xcf/0x270 kernel/sched/core.c:4605 schedule_timeout+0x1d8/0x250 kernel/time/timer.c:1855 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x163/0x260 kernel/sched/completion.c:138 __synchronize_srcu+0x132/0x220 kernel/rcu/srcutree.c:924 tracepoint_synchronize_unregister include/linux/tracepoint.h:83 [inline] perf_trace_event_unreg.isra.0+0xbc/0x250 kernel/trace/trace_event_perf.c:168 perf_trace_destroy+0xb5/0xf0 kernel/trace/trace_event_perf.c:243 _free_event+0x2ee/0x12a0 kernel/events/core.c:4839 put_event kernel/events/core.c:4933 [inline] perf_event_release_kernel+0xa24/0xe00 kernel/events/core.c:5048 perf_release+0x33/0x40 kernel/events/core.c:5058 __fput+0x285/0x920 fs/file_table.c:281 task_work_run+0xdd/0x190 kernel/task_work.c:141 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop kernel/entry/common.c:165 [inline] exit_to_user_mode_prepare+0x1e2/0x1f0 kernel/entry/common.c:192 syscall_exit_to_user_mode+0x7a/0x2c0 kernel/entry/common.c:267 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x417901 Code: Bad RIP value. RSP: 002b:00007ffd8d155db0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000417901 RDX: 0000000000000000 RSI: ffffffff88453779 RDI: 0000000000000003 RBP: 0000000000000001 R08: ffffffff813502b4 R09: 0000000071971471 R10: 00007ffd8d155ea0 R11: 0000000000000293 R12: 0000000001190fb0 R13: 000000000002f623 R14: ffffffffffffffff R15: 000000000118cf4c INFO: task syz-executor.0:10354 blocked for more than 145 seconds. Not tainted 5.9.0-rc7-next-20200928-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:28136 pid:10354 ppid: 6902 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:3778 [inline] __schedule+0xec5/0x2200 kernel/sched/core.c:4527 schedule+0xcf/0x270 kernel/sched/core.c:4605 schedule_timeout+0x1d8/0x250 kernel/time/timer.c:1855 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x163/0x260 kernel/sched/completion.c:138 __synchronize_srcu+0x132/0x220 kernel/rcu/srcutree.c:924 tracepoint_synchronize_unregister include/linux/tracepoint.h:83 [inline] perf_trace_event_unreg.isra.0+0xbc/0x250 kernel/trace/trace_event_perf.c:168 perf_trace_destroy+0xb5/0xf0 kernel/trace/trace_event_perf.c:243 _free_event+0x2ee/0x12a0 kernel/events/core.c:4839 put_event kernel/events/core.c:4933 [inline] perf_event_release_kernel+0xa24/0xe00 kernel/events/core.c:5048 perf_release+0x33/0x40 kernel/events/core.c:5058 __fput+0x285/0x920 fs/file_table.c:281 task_work_run+0xdd/0x190 kernel/task_work.c:141 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop kernel/entry/common.c:165 [inline] exit_to_user_mode_prepare+0x1e2/0x1f0 kernel/entry/common.c:192 syscall_exit_to_user_mode+0x7a/0x2c0 kernel/entry/common.c:267 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x417901 Code: Bad RIP value. RSP: 002b:00007ffd8d155db0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000417901 RDX: 0000000000000000 RSI: ffffffff88453779 RDI: 0000000000000003 RBP: 0000000000000001 R08: ffffffff813502b4 R09: 0000000071971471 R10: 00007ffd8d155ea0 R11: 0000000000000293 R12: 0000000001190fb0 R13: 000000000002f623 R14: ffffffffffffffff R15: 000000000118cf4c INFO: task syz-executor.2:10361 can't die for more than 145 seconds. task:syz-executor.2 state:D stack:27312 pid:10361 ppid: 6906 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:3778 [inline] __schedule+0xec5/0x2200 kernel/sched/core.c:4527 schedule+0xcf/0x270 kernel/sched/core.c:4605 __lock_sock+0x13d/0x260 net/core/sock.c:2504 lock_sock_nested+0xf1/0x110 net/core/sock.c:3043 lock_sock include/net/sock.h:1579 [inline] sk_stream_wait_memory+0x775/0xe60 net/core/stream.c:145 mptcp_sendmsg+0x53b/0x1910 net/mptcp/protocol.c:1196 inet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:817 sock_sendmsg_nosec net/socket.c:651 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:671 __sys_sendto+0x21c/0x320 net/socket.c:1992 __do_sys_sendto net/socket.c:2004 [inline] __se_sys_sendto net/socket.c:2000 [inline] __x64_sys_sendto+0xdd/0x1b0 net/socket.c:2000 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45e179 Code: Bad RIP value. RSP: 002b:00007fcc0834ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 000000000002d680 RCX: 000000000045e179 RDX: 00000000ffffffe7 RSI: 0000000020000100 RDI: 0000000000000003 RBP: 000000000118cf98 R08: 0000000000000000 R09: 1400000000000000 R10: 000000000000c000 R11: 0000000000000246 R12: 000000000118cf4c R13: 00007ffe484e4e5f R14: 00007fcc0834b9c0 R15: 000000000118cf4c INFO: task syz-executor.2:10361 blocked for more than 146 seconds. Not tainted 5.9.0-rc7-next-20200928-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:27312 pid:10361 ppid: 6906 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:3778 [inline] __schedule+0xec5/0x2200 kernel/sched/core.c:4527 schedule+0xcf/0x270 kernel/sched/core.c:4605 __lock_sock+0x13d/0x260 net/core/sock.c:2504 lock_sock_nested+0xf1/0x110 net/core/sock.c:3043 lock_sock include/net/sock.h:1579 [inline] sk_stream_wait_memory+0x775/0xe60 net/core/stream.c:145 mptcp_sendmsg+0x53b/0x1910 net/mptcp/protocol.c:1196 inet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:817 sock_sendmsg_nosec net/socket.c:651 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:671 __sys_sendto+0x21c/0x320 net/socket.c:1992 __do_sys_sendto net/socket.c:2004 [inline] __se_sys_sendto net/socket.c:2000 [inline] __x64_sys_sendto+0xdd/0x1b0 net/socket.c:2000 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45e179 Code: Bad RIP value. RSP: 002b:00007fcc0834ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 000000000002d680 RCX: 000000000045e179 RDX: 00000000ffffffe7 RSI: 0000000020000100 RDI: 0000000000000003 RBP: 000000000118cf98 R08: 0000000000000000 R09: 1400000000000000 R10: 000000000000c000 R11: 0000000000000246 R12: 000000000118cf4c R13: 00007ffe484e4e5f R14: 00007fcc0834b9c0 R15: 000000000118cf4c INFO: task syz-executor.3:10383 can't die for more than 146 seconds. task:syz-executor.3 state:D stack:28136 pid:10383 ppid: 6908 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:3778 [inline] __schedule+0xec5/0x2200 kernel/sched/core.c:4527 schedule+0xcf/0x270 kernel/sched/core.c:4605 schedule_timeout+0x1d8/0x250 kernel/time/timer.c:1855 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x163/0x260 kernel/sched/completion.c:138 __flush_work+0x51f/0xac0 kernel/workqueue.c:3046 lru_add_drain_all+0x41c/0x6f0 mm/swap.c:850 invalidate_bdev+0x96/0xd0 fs/block_dev.c:96 __loop_clr_fd+0x479/0xe60 drivers/block/loop.c:1248 loop_clr_fd drivers/block/loop.c:1345 [inline] lo_ioctl+0x3b7/0x1690 drivers/block/loop.c:1703 __blkdev_driver_ioctl block/ioctl.c:228 [inline] blkdev_ioctl+0x2a7/0x7f0 block/ioctl.c:623 block_ioctl+0xf9/0x140 fs/block_dev.c:1866 vfs_ioctl fs/ioctl.c:48 [inline] __do_sys_ioctl fs/ioctl.c:753 [inline] __se_sys_ioctl fs/ioctl.c:739 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:739 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45dfe7 Code: Bad RIP value. RSP: 002b:00007f8a5145aa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000045dfe7 RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000004 RBP: 00007f8a5145b6d4 R08: 00007f8a5145ab20 R09: 0000000020000140 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 R13: 0000000020000200 R14: 0000000020001a00 R15: 0000000020001c40 INFO: task syz-executor.3:10383 blocked for more than 146 seconds. Not tainted 5.9.0-rc7-next-20200928-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:28136 pid:10383 ppid: 6908 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:3778 [inline] __schedule+0xec5/0x2200 kernel/sched/core.c:4527 schedule+0xcf/0x270 kernel/sched/core.c:4605 schedule_timeout+0x1d8/0x250 kernel/time/timer.c:1855 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x163/0x260 kernel/sched/completion.c:138 __flush_work+0x51f/0xac0 kernel/workqueue.c:3046 lru_add_drain_all+0x41c/0x6f0 mm/swap.c:850 invalidate_bdev+0x96/0xd0 fs/block_dev.c:96 __loop_clr_fd+0x479/0xe60 drivers/block/loop.c:1248 loop_clr_fd drivers/block/loop.c:1345 [inline] lo_ioctl+0x3b7/0x1690 drivers/block/loop.c:1703 __blkdev_driver_ioctl block/ioctl.c:228 [inline] blkdev_ioctl+0x2a7/0x7f0 block/ioctl.c:623 block_ioctl+0xf9/0x140 fs/block_dev.c:1866 vfs_ioctl fs/ioctl.c:48 [inline] __do_sys_ioctl fs/ioctl.c:753 [inline] __se_sys_ioctl fs/ioctl.c:739 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:739 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45dfe7 Code: Bad RIP value. RSP: 002b:00007f8a5145aa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000045dfe7 RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000004 RBP: 00007f8a5145b6d4 R08: 00007f8a5145ab20 R09: 0000000020000140 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 R13: 0000000020000200 R14: 0000000020001a00 R15: 0000000020001c40 Showing all locks held in the system: 1 lock held by khungtaskd/1168: #0: ffffffff8a553d00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6221 1 lock held by khugepaged/1192: #0: ffffffff8a624228 (lock#5){+.+.}-{3:3}, at: lru_add_drain_all+0x5f/0x6f0 mm/swap.c:801 1 lock held by in:imklog/6573: #0: ffff88809220cd70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:930 1 lock held by syz-executor.1/6904: #0: ffffffff8a55d828 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:290 [inline] #0: ffffffff8a55d828 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f2/0x610 kernel/rcu/tree_exp.h:836 1 lock held by syz-executor.4/6910: #0: ffff888091d96980 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x457/0x1870 fs/block_dev.c:1476 1 lock held by syz-executor.5/6935: #0: ffff88809da782c0 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x457/0x1870 fs/block_dev.c:1476 4 locks held by kworker/1:4/8208: 2 locks held by kworker/u4:9/8483: #0: ffff8880aa071138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8880aa071138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] #0: ffff8880aa071138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] #0: ffff8880aa071138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:616 [inline] #0: ffff8880aa071138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline] #0: ffff8880aa071138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x821/0x15a0 kernel/workqueue.c:2240 #1: ffffc90015f5fda8 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x854/0x15a0 kernel/workqueue.c:2244 2 locks held by kworker/u4:12/8496: #0: ffff8880aa071138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8880aa071138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] #0: ffff8880aa071138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] #0: ffff8880aa071138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:616 [inline] #0: ffff8880aa071138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline] #0: ffff8880aa071138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x821/0x15a0 kernel/workqueue.c:2240 #1: ffffc9001603fda8 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x854/0x15a0 kernel/workqueue.c:2244 2 locks held by systemd-udevd/10145: #0: ffff88809da782c0 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x457/0x1870 fs/block_dev.c:1476 #1: ffffffff8afb2d08 (loop_ctl_mutex){+.+.}-{3:3}, at: lo_open+0x19/0xd0 drivers/block/loop.c:1893 2 locks held by systemd-udevd/10162: #0: ffff888091d96980 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_put+0xfc/0x890 fs/block_dev.c:1766 #1: ffffffff8afb2d08 (loop_ctl_mutex){+.+.}-{3:3}, at: lo_release+0x1a/0x1f0 drivers/block/loop.c:1912 1 lock held by syz-executor.0/10354: #0: ffffffff8a5c1788 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x23/0xf0 kernel/trace/trace_event_perf.c:241 2 locks held by syz-executor.3/10383: #0: ffffffff8afb2d08 (loop_ctl_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0x88/0xe60 drivers/block/loop.c:1213 #1: ffffffff8a624228 (lock#5){+.+.}-{3:3}, at: lru_add_drain_all+0x5f/0x6f0 mm/swap.c:801 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1168 Comm: khungtaskd Not tainted 5.9.0-rc7-next-20200928-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x198/0x1fb lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x44/0xd7 lib/nmi_backtrace.c:105 nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:147 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:253 [inline] watchdog+0xd89/0xf30 kernel/hung_task.c:339 kthread+0x3af/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 8208 Comm: kworker/1:4 Not tainted 5.9.0-rc7-next-20200928-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events mptcp_worker RIP: 0010:list_empty include/linux/list.h:282 [inline] RIP: 0010:waitqueue_active include/linux/wait.h:128 [inline] RIP: 0010:release_sock+0x111/0x1b0 net/core/sock.c:3067 Code: 31 ff 89 ee e8 40 72 1d fb 85 ed 75 5d e8 d7 75 1d fb 48 8d ab 10 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 <80> 3c 02 00 75 70 48 8b 83 10 01 00 00 48 39 c5 74 1d e8 a8 75 1d RSP: 0018:ffffc9000aa6fae0 EFLAGS: 00000a06 RAX: dffffc0000000000 RBX: ffff888060264100 RCX: 1ffffffff1b55594 RDX: 1ffff1100c04c842 RSI: ffffffff8657b939 RDI: 0000000000000286 RBP: ffff888060264210 R08: 0000000000000004 R09: ffff8880a85b4e88 R10: fffffbfff1ae5b4c R11: 0000000000000000 R12: ffff888060264188 R13: ffff888060264100 R14: ffff8880a8f90a80 R15: ffff8880a8f90ba0 FS: 0000000000000000(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6b8a64e000 CR3: 00000000921f5000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __mptcp_move_skbs+0x216/0x510 net/mptcp/protocol.c:1466 mptcp_worker+0x19f/0x15b0 net/mptcp/protocol.c:1721 process_one_work+0x933/0x15a0 kernel/workqueue.c:2269 worker_thread+0x64c/0x1120 kernel/workqueue.c:2415 kthread+0x3af/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296