binder: 30933:30935 ioctl 40046207 0 returned -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 30933:30937 ioctl 40046207 0 returned -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 30913:30921 ioctl 40046207 0 returned -16 INFO: task init:8034 blocked for more than 140 seconds. Not tainted 4.9.128+ #45 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. init D28888 8034 1 0x00000000 ffff8801d29ddf00 ffff8801d7b75d80 ffff8801d8df9080 ffff8801d1f7df00 ffff8801db721018 ffff8801c5bf7580 ffffffff8277ee02 ffff8801d29de7b0 000000000000015c 0000000000000000 0000000000000000 ffff8801db7218f0 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3553 [] schedule_timeout+0x735/0xe20 kernel/time/timer.c:1771 [] __down_common kernel/locking/semaphore.c:221 [inline] [] __down+0x138/0x1d0 kernel/locking/semaphore.c:238 [] down+0x5e/0x80 kernel/locking/semaphore.c:61 [] console_lock+0x2c/0x80 kernel/printk/printk.c:2212 [] console_device+0x1c/0xc0 kernel/printk/printk.c:2549 [] tty_lookup_driver drivers/tty/tty_io.c:2003 [inline] [] tty_open_by_driver drivers/tty/tty_io.c:2048 [inline] [] tty_open+0x6f5/0xdf0 drivers/tty/tty_io.c:2125 [] chrdev_open+0x22d/0x4c0 fs/char_dev.c:392 [] do_dentry_open+0x3ef/0xc90 fs/open.c:766 [] vfs_open+0x11c/0x210 fs/open.c:879 [] do_last fs/namei.c:3410 [inline] [] path_openat+0x542/0x2790 fs/namei.c:3534 [] do_filp_open+0x197/0x270 fs/namei.c:3568 [] do_sys_open+0x30d/0x5c0 fs/open.c:1072 [] SYSC_open fs/open.c:1090 [inline] [] SyS_open+0x2d/0x40 fs/open.c:1085 [] do_syscall_64+0x19f/0x480 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/1893: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 2 locks held by getty/2022: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 1 lock held by init/8034: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2125 1 lock held by init/8036: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2125 1 lock held by init/8037: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2125 1 lock held by init/8038: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2125 1 lock held by init/8039: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2125 1 lock held by init/8040: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2125 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.128+ #45 ffff8801d9907d08 ffffffff81af2469 0000000000000000 0000000000000001 0000000000000001 0000000000000001 ffffffff810967d0 ffff8801d9907d40 ffffffff81afd1c9 0000000000000001 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.0+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12c/0x151 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6ad/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 30939 Comm: syz-executor159 Not tainted 4.9.128+ #45 task: ffff8801cb07c740 task.stack: ffff8801cd028000 RIP: 0010:[] c [] test_and_set_bit arch/x86/include/asm/bitops.h:206 [inline] RIP: 0010:[] c [] test_and_set_bit_lock arch/x86/include/asm/bitops.h:219 [inline] RIP: 0010:[] c [] trylock_page include/linux/pagemap.h:452 [inline] RIP: 0010:[] c [] do_wp_page+0x3b4/0x2010 mm/memory.c:2399 RSP: 0000:ffff8801cd02fb78 EFLAGS: 00000292 RAX: ffff8801cb07c740 RBX: ffff8801cd02fdd0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8147a10e RDI: ffffea0007454908 RBP: ffff8801cd02fce0 R08: ffff8801cb07d038 R09: 3d4c618ca2382aad R10: ffff8801cb07c740 R11: 0000000000000001 R12: ffffea0007454900 R13: ffff8801cd02fcb8 R14: ffff8801c69773c0 R15: ffffea0007454900 FS: 0000000000000000(0000) GS:ffff8801db600000(0063) knlGS:0000000009d48840 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 00000000080fd140 CR3: 00000001d2d33000 CR4: 00000000001606b0 Stack: ffff8801cb07cfe8c ffff8801cb07cff0c 0000000000000246c ffffffff00000000c ffff8801cd02fdd8c 80000001d1524065c 1ffff10039a05f77c ffffea0007454920c 0000000041b58ab3c ffffffff82c362e8c ffffffff81479d60c 0000000000000237c Call Trace: [] handle_pte_fault mm/memory.c:3531 [inline] [] __handle_mm_fault mm/memory.c:3603 [inline] [] handle_mm_fault+0xfcb/0x2350 mm/memory.c:3640 [] __do_page_fault+0x403/0xa60 arch/x86/mm/fault.c:1406 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1469 [] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:951 Code: cff cdf c48 cc1 cea c03 c80 c3c c02 c00 c0f c85 c75 c17 c00 c00 c49 c8b c44 c24 c20 c4d c89 ce7 ca8 c01 c0f c85 c6e c12 c00 c00 ce8 c32 cf9 ce8 cff cf0 c41 c0f cba c2f c00 c<0f> c83 ca5 c08 c00 c00 ce8 c21 cf9 ce8 cff c48 c8b c95 cd0 cfe cff cff c48 cb8 c00 c