binder: send failed reply for transaction 37, target dead binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock EXT4-fs (loop3): group descriptors corrupted! INFO: task kworker/1:1:68 blocked for more than 140 seconds. Not tainted 4.14.68+ #4 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/1:1 D27696 68 2 0x80000000 Workqueue: events bpf_map_free_deferred Call Trace: schedule+0x7f/0x1b0 kernel/sched/core.c:3490 schedule_timeout+0x710/0xe60 kernel/time/timer.c:1718 do_wait_for_common kernel/sched/completion.c:91 [inline] __wait_for_common kernel/sched/completion.c:112 [inline] wait_for_common+0x3bc/0x4e0 kernel/sched/completion.c:123 _rcu_barrier+0x27b/0x3f0 kernel/rcu/tree.c:3594 htab_map_free+0x20/0x3f0 kernel/bpf/hashtab.c:1138 process_one_work+0x86e/0x15c0 kernel/workqueue.c:2114 worker_thread+0xdc/0x1000 kernel/workqueue.c:2248 kthread+0x348/0x420 kernel/kthread.c:232 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402 INFO: task kworker/1:2:72 blocked for more than 140 seconds. Not tainted 4.14.68+ #4 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/1:2 D27136 72 2 0x80000000 Workqueue: events bpf_map_free_deferred Call Trace: schedule+0x7f/0x1b0 kernel/sched/core.c:3490 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3548 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x521/0x1480 kernel/locking/mutex.c:893 _rcu_barrier+0x5b/0x3f0 kernel/rcu/tree.c:3529 htab_map_free+0x20/0x3f0 kernel/bpf/hashtab.c:1138 process_one_work+0x86e/0x15c0 kernel/workqueue.c:2114 worker_thread+0xdc/0x1000 kernel/workqueue.c:2248 kthread+0x348/0x420 kernel/kthread.c:232 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402 INFO: task syz-executor4:16008 blocked for more than 140 seconds. Not tainted 4.14.68+ #4 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor4 D29160 16008 1849 0x00000004 Call Trace: schedule+0x7f/0x1b0 kernel/sched/core.c:3490 schedule_timeout+0x710/0xe60 kernel/time/timer.c:1718 do_wait_for_common kernel/sched/completion.c:91 [inline] __wait_for_common kernel/sched/completion.c:112 [inline] wait_for_common+0x3bc/0x4e0 kernel/sched/completion.c:123 __wait_rcu_gp+0x250/0x3a0 kernel/rcu/update.c:413 synchronize_rcu.part.43+0xd2/0xe0 kernel/rcu/tree_plugin.h:764 synchronize_net+0x3a/0x40 net/core/dev.c:8188 packet_release+0x796/0xb60 net/packet/af_packet.c:3043 __sock_release+0xce/0x250 net/socket.c:602 sock_close+0x15/0x20 net/socket.c:1138 __fput+0x25e/0x6f0 fs/file_table.c:210 task_work_run+0x116/0x190 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x12e/0x150 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:267 [inline] do_syscall_64+0x35d/0x4b0 arch/x86/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x410c51 RSP: 002b:00007ffd395e6640 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000410c51 RDX: 0000000000000000 RSI: 0000000000730558 RDI: 0000000000000004 RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff R10: 00007ffd395e6570 R11: 0000000000000293 R12: 000000000000002b R13: 0000000000037a84 R14: 0000000000000109 R15: badc0ffeebadface Showing all locks held in the system: 1 lock held by khungtaskd/23: #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x74/0x20f kernel/locking/lockdep.c:4541 3 locks held by kworker/1:1/68: #0: ("events"){+.+.}, at: [] process_one_work+0x787/0x15c0 kernel/workqueue.c:2085 #1: ((&map->work)){+.+.}, at: [] process_one_work+0x7bf/0x15c0 kernel/workqueue.c:2089 #2: (rcu_preempt_state.barrier_mutex){+.+.}, at: [] _rcu_barrier+0x5b/0x3f0 kernel/rcu/tree.c:3529 3 locks held by kworker/1:2/72: #0: ("events"){+.+.}, at: [] process_one_work+0x787/0x15c0 kernel/workqueue.c:2085 #1: ((&map->work)){+.+.}, at: [] process_one_work+0x7bf/0x15c0 kernel/workqueue.c:2089 #2: (rcu_preempt_state.barrier_mutex){+.+.}, at: [] _rcu_barrier+0x5b/0x3f0 kernel/rcu/tree.c:3529 2 locks held by getty/1760: #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142 1 lock held by syz-executor4/16008: #0: (&sb->s_type->i_mutex_key#9){+.+.}, at: [] inode_lock include/linux/fs.h:713 [inline] #0: (&sb->s_type->i_mutex_key#9){+.+.}, at: [] __sock_release+0x84/0x250 net/socket.c:601 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 23 Comm: khungtaskd Not tainted 4.14.68+ #4 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xb9/0x11b lib/dump_stack.c:53 nmi_cpu_backtrace.cold.0+0x47/0x85 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x121/0x146 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:138 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:196 [inline] watchdog+0x574/0xa70 kernel/hung_task.c:252 kthread+0x348/0x420 kernel/kthread.c:232 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 15946 Comm: syz-executor0 Not tainted 4.14.68+ #4 task: ffff8801c8022f00 task.stack: ffff88019e030000 RIP: 0010:___bpf_prog_run+0x57/0x5c70 kernel/bpf/core.c:767 RSP: 0018:ffff88019e0379b0 EFLAGS: 00000a02 RAX: ffffed0033c06f3d RBX: dffffc0000000000 RCX: 0000000000000000 RDX: ffff88019e037aa0 RSI: ffffc9000001e030 RDI: ffff88019e037ae0 RBP: ffff88019e037ae0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff956959a0 R13: 1ffff10033c06f3d R14: ffffed0033c06f96 R15: ffffc9000001e030 FS: 00007f6bc9408700(0000) GS:ffff8801dba00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000fa5978 CR3: 00000001c3a3e003 CR4: 00000000001606b0 DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000020000000 DR3: 0000000020000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: Code: 38 b3 8a b5 41 4c 8d 6c 24 38 48 c7 44 24 40 dd d2 a5 95 49 c1 ed 03 48 c7 44 24 48 00 ed b9 93 49 8d 44 1d 00 c7 00 f1 f1 f1 f1 40 04 00 f2 f2 f2 65 48 8b 04 25 28 00 00 00 48 89 84 24 90