INFO: task syz-executor.4:15688 can't die for more than 143 seconds. syz-executor.4 R running task 23512 15688 8639 0x00004006 Call Trace: Showing all locks held in the system: 1 lock held by khungtaskd/1065: #0: ffffffff88fa7f00 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:5337 1 lock held by rsyslogd/8496: #0: ffff8880a1ff3120 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 fs/file.c:801 2 locks held by getty/8586: #0: ffff88809fa75090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f252e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8587: #0: ffff88808ede6090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f352e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8588: #0: ffff8880a15d5090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f2d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8589: #0: ffff8880994f7090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f292e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8590: #0: ffff888093dae090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f392e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8591: #0: ffff888099067090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8592: #0: ffff88809aba3090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f092e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by syz-executor.4/15688: ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1065 Comm: khungtaskd Not tainted 5.3.0-rc6-next-20190830 #75 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x172/0x1f0 lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:269 [inline] watchdog+0xc99/0x1360 kernel/hung_task.c:353 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 15688 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:26 [inline] RIP: 0010:check_kcov_mode kernel/kcov.c:68 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0xd/0x50 kernel/kcov.c:102 Code: 1d 8f e9 ff 48 c7 05 1e 8c 3b 09 00 00 00 00 e9 77 e9 ff ff 90 90 90 90 90 90 90 90 90 55 48 89 e5 65 48 8b 04 25 40 fe 01 00 <65> 8b 15 e4 a7 8f 7e 81 e2 00 01 1f 00 48 8b 75 08 75 2b 8b 90 00 RSP: 0018:ffff8880ae809b18 EFLAGS: 00000096 RAX: ffff888025972400 RBX: 0000000000000006 RCX: 0000000000000000 RDX: 1ffff11004b2e58d RSI: 0000000000000000 RDI: ffff888025972c68 RBP: ffff8880ae809b18 R08: ffff888025972400 R09: ffff888025972c98 R10: fffffbfff138aef8 R11: ffffffff89c577c7 R12: fffffbfff11e5db3 R13: dffffc0000000000 R14: 1ffffffff11e5db5 R15: 0000000000000000 FS: 00007f6cbe6d7700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 000000006c143000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __read_once_size include/linux/compiler.h:176 [inline] __read_seqcount_begin include/linux/seqlock.h:113 [inline] raw_read_seqcount_begin include/linux/seqlock.h:148 [inline] read_seqcount_begin include/linux/seqlock.h:165 [inline] ktime_get kernel/time/timekeeping.c:757 [inline] ktime_get+0x13d/0x300 kernel/time/timekeeping.c:747 hrtimer_forward_now include/linux/hrtimer.h:499 [inline] perf_swevent_hrtimer+0x31f/0x3e0 kernel/events/core.c:9554 __run_hrtimer kernel/time/hrtimer.c:1504 [inline] __hrtimer_run_queues+0x364/0xe40 kernel/time/hrtimer.c:1566 hrtimer_interrupt+0x314/0x770 kernel/time/hrtimer.c:1628 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1106 [inline] smp_apic_timer_interrupt+0x160/0x610 arch/x86/kernel/apic/apic.c:1131 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830 RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:94 [inline] RIP: 0010:memory_is_nonzero mm/kasan/generic.c:109 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:135 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:166 [inline] RIP: 0010:check_memory_region_inline mm/kasan/generic.c:182 [inline] RIP: 0010:check_memory_region+0x11a/0x1a0 mm/kasan/generic.c:192 Code: 8d 44 25 00 4d 85 c0 75 31 49 89 d9 49 29 c1 e9 68 ff ff ff 5b b8 01 00 00 00 41 5c 41 5d 5d c3 4d 85 c9 74 ef 4d 01 e1 eb 09 <48> 83 c0 01 4c 39 c8 74 e1 80 38 00 74 f2 eb 8c 4d 39 c2 74 4d e8 RSP: 0018:ffff888066e070c8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: ffffed1015369c27 RBX: ffffed1015369c28 RCX: ffffffff81b17f6f RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8880a9b4e138 RBP: ffff888066e070e0 R08: 1ffff11015369c27 R09: ffffed1015369c28 R10: ffffed1015369c27 R11: ffff8880a9b4e13f R12: ffffed1015369c27 R13: ffff8880a9b4e138 R14: dffffc0000000000 R15: 0000000000000001 __kasan_check_write+0x14/0x20 mm/kasan/common.c:98 atomic64_sub include/asm-generic/atomic-instrumented.h:960 [inline] atomic_long_sub include/asm-generic/atomic-long.h:106 [inline] page_counter_try_charge+0x10f/0x220 mm/page_counter.c:123 try_charge+0x203/0x1440 mm/memcontrol.c:2522 mem_cgroup_try_charge+0x136/0x590 mm/memcontrol.c:6485 __add_to_page_cache_locked+0x43f/0xec0 mm/filemap.c:865 add_to_page_cache_lru+0x1d8/0x790 mm/filemap.c:942 mpage_readpages+0x344/0x630 fs/mpage.c:399 blkdev_readpages+0x2d/0x40 fs/block_dev.c:620 read_pages+0x108/0x540 mm/readahead.c:126 __do_page_cache_readahead+0x4e0/0x5d0 mm/readahead.c:212 ra_submit mm/internal.h:62 [inline] do_sync_mmap_readahead mm/filemap.c:2442 [inline] filemap_fault+0x1625/0x2b70 mm/filemap.c:2528 __do_fault+0x111/0x540 mm/memory.c:3098 do_shared_fault mm/memory.c:3550 [inline] do_fault mm/memory.c:3628 [inline] handle_pte_fault mm/memory.c:3855 [inline] __handle_mm_fault+0x2adf/0x3f20 mm/memory.c:3979 handle_mm_fault+0x1b5/0x6c0 mm/memory.c:4016 do_user_addr_fault arch/x86/mm/fault.c:1441 [inline] __do_page_fault+0x536/0xdd0 arch/x86/mm/fault.c:1506 do_page_fault+0x38/0x590 arch/x86/mm/fault.c:1530 page_fault+0x39/0x40 arch/x86/entry/entry_64.S:1202 RIP: 0010:__put_user_4+0x1c/0x30 arch/x86/lib/putuser.S:70 Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 40 fe 01 00 48 8b 9b 58 14 00 00 48 83 eb 03 48 39 d9 73 3f 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 RSP: 0018:ffff888066e07e18 EFLAGS: 00010293 RAX: 0000000000000005 RBX: 00007fffffffeffd RCX: 0000000020000140 RDX: 0000000000000084 RSI: ffffffff819d1883 RDI: 0000000000000282 RBP: ffff888066e07ee0 R08: 0000000000000001 R09: ffff888025972c98 R10: fffffbfff138aef8 R11: ffffffff89c577c7 R12: 0000000000000005 R13: 0000000000000005 R14: 0000000000000006 R15: 0000000000000000 __do_sys_socketpair net/socket.c:1622 [inline] __se_sys_socketpair net/socket.c:1619 [inline] __x64_sys_socketpair+0x97/0xf0 net/socket.c:1619 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4598e9 Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f6cbe6d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004598e9 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000140 R11: 0000000000000246 R12: 00007f6cbe6d76d4 R13: 00000000004c87b6 R14: 00000000004df558 R15: 00000000ffffffff