[28454] 0 28454 17634 12723 31 3 0 1000 syz-executor5 [28480] 0 28480 17634 8458 26 4 0 1000 syz-executor2 [28555] 0 28555 17634 12723 31 3 0 1000 syz-executor5 [28556] 0 28556 17667 8460 25 4 0 0 syz-executor4 INFO: task syz-executor2:18537 blocked for more than 140 seconds. Not tainted 4.14.91+ #3 [28669] 0 28669 17634 12723 31 3 0 1000 syz-executor5 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [28734] 0 28734 17634 12723 31 3 0 1000 syz-executor5 syz-executor2 D29888 18537 1853 0x00000004 Call Trace: [28758] 0 28758 17598 8231 23 3 0 0 syz-executor0 [28763] 0 28763 17631 8233 23 3 0 0 syz-executor0 schedule+0x92/0x1c0 kernel/sched/core.c:3490 __lock_sock+0x12b/0x220 net/core/sock.c:2237 [28789] 0 28789 17634 8237 25 3 0 1000 syz-executor2 [28791] 0 28791 17667 8239 25 3 0 1000 syz-executor2 lock_sock_nested+0xe1/0x100 net/core/sock.c:2758 lock_sock include/net/sock.h:1452 [inline] packet_setsockopt+0xed5/0x2830 net/packet/af_packet.c:3859 [28797] 0 28797 17634 12723 31 3 0 1000 syz-executor5 [28799] 0 28799 17601 8235 25 3 0 1000 syz-executor2 [28818] 0 28818 17601 8458 26 4 0 0 syz-executor4 [28852] 0 28852 17634 12723 31 3 0 1000 syz-executor5 [28937] 0 28937 17634 12723 31 3 0 1000 syz-executor5 [28966] 0 28966 17601 8232 24 3 0 0 syz-executor0 Showing all locks held in the system: 1 lock held by khungtaskd/23: [28980] 0 28980 17667 8236 24 3 0 0 syz-executor0 #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4541 2 locks held by udevd/190: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x271/0xb80 arch/x86/mm/fault.c:1354 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6178 2 locks held by rsyslogd/1632: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x271/0xb80 arch/x86/mm/fault.c:1354 [28999] 0 28999 17634 12723 31 3 0 1000 syz-executor5 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6178 2 locks held by getty/1760: #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:275 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1f7/0x1700 drivers/tty/n_tty.c:2156 2 locks held by syz-fuzzer/1780: [29041] 0 29041 17601 8233 25 3 0 0 syz-executor0 #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x271/0xb80 arch/x86/mm/fault.c:1354 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6178 2 locks held by kworker/u4:14/15888: #0: ("events_unbound"){+.+.}, at: [] process_one_work+0x6e5/0x14e0 kernel/workqueue.c:2085 #1: ((&sub_info->work)){+.+.}, at: [] process_one_work+0x71b/0x14e0 kernel/workqueue.c:2089 2 locks held by kworker/u4:7/30878: #0: ("events_unbound"){+.+.}, at: [] process_one_work+0x6e5/0x14e0 kernel/workqueue.c:2085 #1: ((&sub_info->work)){+.+.}, at: [] process_one_work+0x71b/0x14e0 kernel/workqueue.c:2089 1 lock held by modprobe/18549: [29043] 0 29043 17634 8235 25 3 0 0 syz-executor0 #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x871/0xb80 arch/x86/mm/fault.c:1361 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 23 Comm: khungtaskd Not tainted 4.14.91+ #3 [29064] 0 29064 17634 12723 31 3 0 1000 syz-executor5 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xb9/0x10e lib/dump_stack.c:53 nmi_cpu_backtrace.cold+0x47/0x86 lib/nmi_backtrace.c:101 Sending NMI from CPU 0 to CPUs 1: [29088] 0 29088 17634 8456 25 4 0 0 syz-executor1 NMI backtrace for cpu 1 CPU: 1 PID: 1779 Comm: syz-fuzzer Not tainted 4.14.91+ #3 task: ffff8881d1082f00 task.stack: ffff8881cfc20000 RIP: 0010:memcpy_erms+0x6/0x10 arch/x86/lib/memcpy_64.S:54 RSP: 0000:ffff8881cfc27618 EFLAGS: 00010046 RAX: ffffffffb15f30cf RBX: 0000000000000000 RCX: 000000000000001a RDX: 000000000000005a RSI: ffffffffb160b540 RDI: ffffffffb15f310f RBP: ffffffffb160b500 R08: ffffffffafa5cc2a R09: fffffbfff62be626 R10: fffffbfff62be625 R11: ffffffffb15f3128 R12: 000000000000000f R13: 0000000000000069 R14: 000000000000005a R15: ffffffffb15f30c0 FS: 000000c420026068(0000) GS:ffff8881dbb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f834d6c1140 CR3: 00000001d3a92004 CR4: 00000000001606a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: memcpy include/linux/string.h:344 [inline] msg_print_text+0xc3/0x1a0 kernel/printk/printk.c:1275 console_unlock+0x222/0xc60 kernel/printk/printk.c:2368 vprintk_emit+0x128/0x330 kernel/printk/printk.c:1917 vprintk_func+0x58/0x152 kernel/printk/printk_safe.c:401 printk+0xba/0xed kernel/printk/printk.c:1990 dump_tasks mm/oom_kill.c:396 [inline] dump_header+0x6d8/0x775 mm/oom_kill.c:428 oom_kill_process.cold+0x10/0xc29 mm/oom_kill.c:861 Code: 90 90 90 90 90 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38