INFO: task syz-executor.3:10138 blocked for more than 143 seconds. Not tainted 5.3.0+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D29176 10138 1739 0x00000004 Call Trace: schedule+0xca/0x250 kernel/sched/core.c:4132 schedule_preempt_disabled+0xc/0x20 kernel/sched/core.c:4191 __mutex_lock_common kernel/locking/mutex.c:1033 [inline] __mutex_lock+0x881/0x1360 kernel/locking/mutex.c:1103 misc_open+0x55/0x4a0 drivers/char/misc.c:107 chrdev_open+0x219/0x5c0 fs/char_dev.c:414 do_dentry_open+0x494/0x1120 fs/open.c:797 do_last fs/namei.c:3408 [inline] path_openat+0x1430/0x3f50 fs/namei.c:3525 do_filp_open+0x1a1/0x280 fs/namei.c:3555 do_sys_open+0x3c0/0x580 fs/open.c:1089 do_syscall_64+0xb7/0x580 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459a09 Code: 48 8b 74 24 08 48 8b 7c 24 20 48 8d 44 24 38 e9 8d f7 ff ff c6 44 24 38 00 c3 cc cc cc cc cc cc cc 48 8b 74 24 08 48 8b 5c 24 <10> 8a 44 24 18 4c 8d 44 24 20 e9 08 00 00 00 cc cc cc cc cc cc cc RSP: 002b:00007f37621f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a09 RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f37621f56d4 R13: 00000000004c6785 R14: 00000000004db900 R15: 00000000ffffffff INFO: task syz-executor.3:10147 blocked for more than 143 seconds. Not tainted 5.3.0+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D29648 10147 1739 0x00000004 Call Trace: schedule+0xca/0x250 kernel/sched/core.c:4132 schedule_preempt_disabled+0xc/0x20 kernel/sched/core.c:4191 __mutex_lock_common kernel/locking/mutex.c:1033 [inline] __mutex_lock+0x881/0x1360 kernel/locking/mutex.c:1103 misc_open+0x55/0x4a0 drivers/char/misc.c:107 chrdev_open+0x219/0x5c0 fs/char_dev.c:414 do_dentry_open+0x494/0x1120 fs/open.c:797 do_last fs/namei.c:3408 [inline] path_openat+0x1430/0x3f50 fs/namei.c:3525 do_filp_open+0x1a1/0x280 fs/namei.c:3555 do_sys_open+0x3c0/0x580 fs/open.c:1089 do_syscall_64+0xb7/0x580 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459a09 Code: 48 8b 74 24 08 48 8b 7c 24 20 48 8d 44 24 38 e9 8d f7 ff ff c6 44 24 38 00 c3 cc cc cc cc cc cc cc 48 8b 74 24 08 48 8b 5c 24 <10> 8a 44 24 18 4c 8d 44 24 20 e9 08 00 00 00 cc cc cc cc cc cc cc RSP: 002b:00007f37621d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a09 RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f37621d46d4 R13: 00000000004c6785 R14: 00000000004db900 R15: 00000000ffffffff INFO: task syz-executor.0:10146 blocked for more than 143 seconds. Not tainted 5.3.0+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.0 D29648 10146 1737 0x00000004 Call Trace: schedule+0xca/0x250 kernel/sched/core.c:4132 schedule_preempt_disabled+0xc/0x20 kernel/sched/core.c:4191 __mutex_lock_common kernel/locking/mutex.c:1033 [inline] __mutex_lock+0x881/0x1360 kernel/locking/mutex.c:1103 misc_open+0x55/0x4a0 drivers/char/misc.c:107 chrdev_open+0x219/0x5c0 fs/char_dev.c:414 do_dentry_open+0x494/0x1120 fs/open.c:797 do_last fs/namei.c:3408 [inline] path_openat+0x1430/0x3f50 fs/namei.c:3525 do_filp_open+0x1a1/0x280 fs/namei.c:3555 do_sys_open+0x3c0/0x580 fs/open.c:1089 do_syscall_64+0xb7/0x580 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459a09 Code: 48 8b 74 24 08 48 8b 7c 24 20 48 8d 44 24 38 e9 8d f7 ff ff c6 44 24 38 00 c3 cc cc cc cc cc cc cc 48 8b 74 24 08 48 8b 5c 24 <10> 8a 44 24 18 4c 8d 44 24 20 e9 08 00 00 00 cc cc cc cc cc cc cc RSP: 002b:00007ff50eebcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a09 RDX: 0000000000101401 RSI: 0000000020000140 RDI: ffffffffffffff9c RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff50eebd6d4 R13: 00000000004c6636 R14: 00000000004db708 R15: 00000000ffffffff Showing all locks held in the system: 1 lock held by khungtaskd/22: #0: ffffffff86eff3e0 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:5335 1 lock held by rsyslogd/1597: #0: ffff8881d6011c60 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 fs/file.c:801 2 locks held by getty/1688: #0: ffff8881d90e4490 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffffc9000047d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156 2 locks held by getty/1689: #0: ffff8881d9125590 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffffc900004812e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156 2 locks held by getty/1690: #0: ffff8881d90f2b10 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffffc900004752e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156 2 locks held by getty/1691: #0: ffff8881d90ad590 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffffc900004892e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156 2 locks held by getty/1692: #0: ffff8881d9125e10 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffffc9000048d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156 2 locks held by getty/1693: #0: ffff8881d9144490 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffffc900004552e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156 5 locks held by kworker/1:3/2752: 5 locks held by kworker/1:1/23924: 2 locks held by getty/20951: #0: ffff8881ae56a290 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffffc9000e0762e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156 1 lock held by syz-executor.3/10138: #0: ffffffff87130260 (misc_mtx){+.+.}, at: misc_open+0x55/0x4a0 drivers/char/misc.c:107 1 lock held by syz-executor.3/10147: #0: ffffffff87130260 (misc_mtx){+.+.}, at: misc_open+0x55/0x4a0 drivers/char/misc.c:107 2 locks held by syz-executor.0/10142: #0: ffffffff87130260 (misc_mtx){+.+.}, at: misc_open+0x55/0x4a0 drivers/char/misc.c:107 #1: ffffffff86ed9e20 (system_transition_mutex){+.+.}, at: snapshot_open+0x9c/0x4a0 kernel/power/user.c:52 1 lock held by syz-executor.0/10146: #0: ffffffff87130260 (misc_mtx){+.+.}, at: misc_open+0x55/0x4a0 drivers/char/misc.c:107 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 22 Comm: khungtaskd Not tainted 5.3.0+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xca/0x13e lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x55/0x96 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1b0/0x1c7 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:205 [inline] watchdog+0x9a4/0xe50 kernel/hung_task.c:289 kthread+0x318/0x420 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 238 Comm: udevd Not tainted 5.3.0+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:92 [inline] RIP: 0010:memory_is_nonzero mm/kasan/generic.c:109 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:135 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:166 [inline] RIP: 0010:check_memory_region_inline mm/kasan/generic.c:182 [inline] RIP: 0010:check_memory_region+0x11a/0x190 mm/kasan/generic.c:192 Code: 89 e9 49 29 c1 e9 6c ff ff ff 5b b8 01 00 00 00 5d 41 5c c3 4d 85 c9 74 f1 49 01 d9 eb 09 48 83 c0 01 4c 39 c8 74 e3 80 38 00 <74> f2 eb 92 4d 39 c2 74 4b e8 f8 e7 ff ff 31 c0 5b 5d 41 5c c3 b8 RSP: 0018:ffff8881d47cfa18 EFLAGS: 00000046 RAX: fffffbfff11f43a4 RBX: fffffbfff11f43a4 RCX: ffffffff81257b2e RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff88fa1d20 RBP: fffffbfff11f43a5 R08: 0000000000000001 R09: fffffbfff11f43a5 R10: fffffbfff11f43a4 R11: ffffffff88fa1d27 R12: 0000000044397ae9 R13: ffffffffffffffff R14: ffffffff87aa7ff0 R15: ffff8881d47c0850 FS: 00007f50444947a0(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 00000001d4701000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: test_bit include/asm-generic/bitops-instrumented.h:237 [inline] hlock_class kernel/locking/lockdep.c:163 [inline] lookup_chain_cache_add kernel/locking/lockdep.c:2880 [inline] validate_chain kernel/locking/lockdep.c:2936 [inline] __lock_acquire+0x145e/0x3eb0 kernel/locking/lockdep.c:3955 lock_acquire+0x127/0x320 kernel/locking/lockdep.c:4487 seqcount_lockdep_reader_access include/linux/seqlock.h:81 [inline] read_seqcount_begin include/linux/seqlock.h:164 [inline] ktime_get_ts64+0x86/0x2b0 kernel/time/timekeeping.c:890 select_estimate_accuracy+0xcc/0x320 fs/select.c:87 ep_poll+0x3b3/0xe60 fs/eventpoll.c:1839 do_epoll_wait+0x209/0x260 fs/eventpoll.c:2294 __do_sys_epoll_wait fs/eventpoll.c:2304 [inline] __se_sys_epoll_wait fs/eventpoll.c:2301 [inline] __x64_sys_epoll_wait+0x93/0xf0 fs/eventpoll.c:2301 do_syscall_64+0xb7/0x580 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f5043ba8943 Code: 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 83 3d b5 dc 2a 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 3b c4 00 00 48 89 04 24 RSP: 002b:00007fffb0ddaae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f5043ba8943 RDX: 0000000000000008 RSI: 00007fffb0ddabe0 RDI: 000000000000000a RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000bb8 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 0000000000ae91f0 R15: 0000000000ae9250