INFO: task syz-executor.4:18990 can't die for more than 143 seconds.
syz-executor.4 D28160 18990 15742 0x00000004
Call Trace:
context_switch kernel/sched/core.c:3252 [inline]
__schedule+0x755/0x1580 kernel/sched/core.c:3878
schedule+0xa8/0x270 kernel/sched/core.c:3942
rwsem_down_read_slowpath+0x4cc/0xf90 kernel/locking/rwsem.c:1079
__down_read kernel/locking/rwsem.c:1304 [inline]
down_read+0x1f4/0x3f0 kernel/locking/rwsem.c:1447
do_user_addr_fault arch/x86/mm/fault.c:1395 [inline]
__do_page_fault+0xaa2/0xdd0 arch/x86/mm/fault.c:1510
do_page_fault+0x71/0x5e1 arch/x86/mm/fault.c:1541
page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1161
RIP: 0033:0x4019f7
Code: 01 00 00 c1 01 00 00 c4 01 00 00 c8 01 00 00 ca 01 00 00 cb 01 00 00 cc 01 00 00 ce 01 00 00 cf 01 00 00 d2 01 00 00 d5 01 00 <00> d8 01 00 00 db 01 00 00 e1 01 00 00 e6 01 00 00 00 00 00 00 00
RSP: 002b:00007ffe4b849c50 EFLAGS: 00010287
RAX: 0000001b33936000 RBX: 0000000091a930af RCX: 0000001b34920000
RDX: 0000001b33936004 RSI: 0000000000001630 RDI: ffffffff48d8d62f
RBP: 0000000000000112 R08: 0000000048d8d62f R09: 0000000048d8d633
R10: 00007ffe4b849dd0 R11: 0000000000000246 R12: 000000000075bfa8
R13: 0000000080000000 R14: 00007fac68416008 R15: 0000000000000839
INFO: task syz-executor.4:18990 blocked for more than 143 seconds.
Not tainted 5.2.0-rc7-next-20190703 #28
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.4 D28160 18990 15742 0x00000004
Call Trace:
context_switch kernel/sched/core.c:3252 [inline]
__schedule+0x755/0x1580 kernel/sched/core.c:3878
schedule+0xa8/0x270 kernel/sched/core.c:3942
rwsem_down_read_slowpath+0x4cc/0xf90 kernel/locking/rwsem.c:1079
__down_read kernel/locking/rwsem.c:1304 [inline]
down_read+0x1f4/0x3f0 kernel/locking/rwsem.c:1447
do_user_addr_fault arch/x86/mm/fault.c:1395 [inline]
__do_page_fault+0xaa2/0xdd0 arch/x86/mm/fault.c:1510
do_page_fault+0x71/0x5e1 arch/x86/mm/fault.c:1541
page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1161
RIP: 0033:0x4019f7
Code: 01 00 00 c1 01 00 00 c4 01 00 00 c8 01 00 00 ca 01 00 00 cb 01 00 00 cc 01 00 00 ce 01 00 00 cf 01 00 00 d2 01 00 00 d5 01 00 <00> d8 01 00 00 db 01 00 00 e1 01 00 00 e6 01 00 00 00 00 00 00 00
RSP: 002b:00007ffe4b849c50 EFLAGS: 00010287
RAX: 0000001b33936000 RBX: 0000000091a930af RCX: 0000001b34920000
RDX: 0000001b33936004 RSI: 0000000000001630 RDI: ffffffff48d8d62f
RBP: 0000000000000112 R08: 0000000048d8d62f R09: 0000000048d8d633
R10: 00007ffe4b849dd0 R11: 0000000000000246 R12: 000000000075bfa8
R13: 0000000080000000 R14: 00007fac68416008 R15: 0000000000000839
INFO: task syz-executor.4:18991 can't die for more than 144 seconds.
syz-executor.4 R running task 25128 18991 15742 0x00004006
Call Trace:
INFO: task syz-executor.4:19000 blocked for more than 144 seconds.
Not tainted 5.2.0-rc7-next-20190703 #28
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.4 D28160 19000 15742 0x80004004
Call Trace:
context_switch kernel/sched/core.c:3252 [inline]
__schedule+0x755/0x1580 kernel/sched/core.c:3878
schedule+0xa8/0x270 kernel/sched/core.c:3942
rwsem_down_read_slowpath+0x4cc/0xf90 kernel/locking/rwsem.c:1079
__down_read kernel/locking/rwsem.c:1304 [inline]
down_read+0x1f4/0x3f0 kernel/locking/rwsem.c:1447
exit_mm kernel/exit.c:513 [inline]
do_exit+0x47b/0x2ea0 kernel/exit.c:864
do_group_exit+0x135/0x360 kernel/exit.c:981
get_signal+0x47c/0x2500 kernel/signal.c:2728
do_signal+0x87/0x1700 arch/x86/kernel/signal.c:815
exit_to_usermode_loop+0x251/0x2d0 arch/x86/entry/common.c:159
prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline]
syscall_return_slowpath arch/x86/entry/common.c:274 [inline]
do_syscall_64+0x5a9/0x6a0 arch/x86/entry/common.c:299
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4597c9
Code: Bad RIP value.
RSP: 002b:00007fac663f3cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000075bfd0 RCX: 00000000004597c9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bfd0
RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfd4
R13: 00007ffe4b849c7f R14: 00007fac663f49c0 R15: 000000000075bfd4
Showing all locks held in the system:
1 lock held by khungtaskd/1046:
#0: 000000008fa56f76 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:5257
1 lock held by rsyslogd/8876:
#0: 000000001b0c3a64 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 fs/file.c:801
2 locks held by getty/8965:
#0: 0000000001f0900f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
#1: 0000000083e24838 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
2 locks held by getty/8966:
#0: 00000000486bca71 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
#1: 000000003743f2a5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
2 locks held by getty/8967:
#0: 00000000f787f11a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
#1: 000000007a00f558 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
2 locks held by getty/8968:
#0: 0000000094607f3c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
#1: 00000000d70167b2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
2 locks held by getty/8969:
#0: 000000004f2e9387 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
#1: 000000008c10b0fb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
2 locks held by getty/8970:
#0: 000000004371f687 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
#1: 000000008d094590 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
2 locks held by getty/8971:
#0: 000000001e4e9b07 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
#1: 000000003c23d083 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
3 locks held by kworker/u4:10/15192:
1 lock held by syz-executor.4/18990:
#0: 00000000826b48af (&mm->mmap_sem#2){++++}, at: do_user_addr_fault arch/x86/mm/fault.c:1395 [inline]
#0: 00000000826b48af (&mm->mmap_sem#2){++++}, at: __do_page_fault+0xaa2/0xdd0 arch/x86/mm/fault.c:1510
2 locks held by syz-executor.4/18991:
1 lock held by syz-executor.4/19000:
#0: 00000000826b48af (&mm->mmap_sem#2){++++}, at: exit_mm kernel/exit.c:513 [inline]
#0: 00000000826b48af (&mm->mmap_sem#2){++++}, at: do_exit+0x47b/0x2ea0 kernel/exit.c:864
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 1046 Comm: khungtaskd Not tainted 5.2.0-rc7-next-20190703 #28
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x172/0x1f0 lib/dump_stack.c:113
nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:249 [inline]
watchdog+0xc54/0x1320 kernel/hung_task.c:333
kthread+0x361/0x430 kernel/kthread.c:255
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:353
Sending NMI from CPU 1 to CPUs 0:
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.001 msecs
NMI backtrace for cpu 0
CPU: 0 PID: 18991 Comm: syz-executor.4 Not tainted 5.2.0-rc7-next-20190703 #28
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:ktime_add_safe kernel/time/hrtimer.c:315 [inline]
RIP: 0010:hrtimer_add_expires include/linux/hrtimer.h:246 [inline]
RIP: 0010:hrtimer_forward+0x104/0x260 kernel/time/hrtimer.c:926
Code: 8b 43 20 4c 89 ee 4c 89 e7 48 89 45 c8 48 89 45 b8 e8 d0 ca 0f 00 4d 39 ec 0f 8e ea 00 00 00 41 bf 01 00 00 00 e8 9c c9 0f 00 <4c> 8b 6d c0 31 ff 4d 01 e5 4c 89 ee e8 2b cb 0f 00 4d 85 ed 48 b8
RSP: 0018:ffff8880ae809b28 EFLAGS: 00000006
RAX: ffff88808e0525c0 RBX: ffff8880a7c9d018 RCX: ffffffff81628b35
RDX: 0000000000010000 RSI: ffffffff81628a14 RDI: 0000000000000006
RBP: ffff8880ae809b70 R08: ffff88808e0525c0 R09: ffff88808e052e50
R10: fffffbfff1346e8f R11: ffffffff89a3747f R12: 0000000000002710
R13: 0000010643493d9d R14: 0000010643493d9d R15: 0000000000000002
FS: 00007fac66415700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffff600400 CR3: 00000000a8aa4000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
hrtimer_forward_now include/linux/hrtimer.h:456 [inline]
perf_swevent_hrtimer+0x32d/0x3e0 kernel/events/core.c:9448
__run_hrtimer kernel/time/hrtimer.c:1389 [inline]
__hrtimer_run_queues+0x364/0xe40 kernel/time/hrtimer.c:1451
hrtimer_interrupt+0x314/0x770 kernel/time/hrtimer.c:1509
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1068 [inline]
smp_apic_timer_interrupt+0x160/0x610 arch/x86/kernel/apic/apic.c:1093
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
RIP: 0010:isolate_migratepages_block+0x21f/0x2de0 mm/compaction.c:791
Code: 00 00 4c 8b bd 50 ff ff ff 31 ff 41 0f b6 5f 77 89 de e8 24 f1 d7 ff 84 db 0f 85 b7 08 00 00 48 c7 85 40 ff ff ff 00 00 00 00 85 48 ff ff ff 00 e8 c5 ef d7 ff 4c 8b bd 28 ff ff ff 48 8b 9d
RSP: 0018:ffff88806ac87378 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffffffff819a6cc9
RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005
RBP: ffff88806ac874b8 R08: ffff88808e0525c0 R09: ffffed1025ffffa1
R10: ffffed1025ffffa0 R11: ffff88812ffffd07 R12: ffff88812fffc000
R13: 000000000000d755 R14: dffffc0000000000 R15: ffff88806ac876c0
isolate_migratepages mm/compaction.c:1817 [inline]
compact_zone+0x1428/0x38d0 mm/compaction.c:2158
compact_zone_order+0x1af/0x2a0 mm/compaction.c:2308
try_to_compact_pages+0x281/0xb70 mm/compaction.c:2360
__alloc_pages_direct_compact+0x154/0x460 mm/page_alloc.c:3898
__alloc_pages_slowpath+0x9b3/0x2520 mm/page_alloc.c:4533
__alloc_pages_nodemask+0x62e/0x8f0 mm/page_alloc.c:4741
__alloc_pages include/linux/gfp.h:473 [inline]
__alloc_pages_node include/linux/gfp.h:486 [inline]
alloc_pages_vma+0x3c5/0x560 mm/mempolicy.c:2144
new_page+0x325/0x440 mm/mempolicy.c:1193
unmap_and_move mm/migrate.c:1179 [inline]
migrate_pages+0x358/0x2e20 mm/migrate.c:1430
do_mbind mm/mempolicy.c:1309 [inline]
kernel_mbind+0xb20/0xe00 mm/mempolicy.c:1429
__do_sys_mbind mm/mempolicy.c:1436 [inline]
__se_sys_mbind mm/mempolicy.c:1432 [inline]
__x64_sys_mbind+0xe1/0x1a0 mm/mempolicy.c:1432
do_syscall_64+0xfd/0x6a0 arch/x86/entry/common.c:296
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4597c9
Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fac66414c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004597c9
RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000010000000002
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fac664156d4
R13: 00000000004c5a93 R14: 00000000004da130 R15: 00000000ffffffff