binder: BINDER_SET_CONTEXT_MGR already set binder: 17558:17569 ioctl 40046207 0 returned -16 binder: 17558:17583 ERROR: BC_REGISTER_LOOPER called without request binder: 17583 RLIMIT_NICE not set binder: 17558:17569 BC_DEAD_BINDER_DONE 0000000000000000 not found INFO: rcu_sched self-detected stall on CPU 0-....: (125000 ticks this GP) idle=9d6/140000000000001/0 softirq=58628/58628 fqs=31232 (t=125001 jiffies g=31843 c=31842 q=1090) NMI backtrace for cpu 0 CPU: 0 PID: 17591 Comm: syz-executor1 Not tainted 4.15.0-rc1+ #201 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 nmi_cpu_backtrace+0x1d2/0x210 lib/nmi_backtrace.c:103 nmi_trigger_cpumask_backtrace+0x122/0x180 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_single_cpu_backtrace include/linux/nmi.h:156 [inline] rcu_dump_cpu_stacks+0x186/0x1d5 kernel/rcu/tree.c:1459 print_cpu_stall kernel/rcu/tree.c:1608 [inline] check_cpu_stall.isra.64+0xbb8/0x15b0 kernel/rcu/tree.c:1676 __rcu_pending kernel/rcu/tree.c:3440 [inline] rcu_pending kernel/rcu/tree.c:3502 [inline] rcu_check_callbacks+0x256/0xd00 kernel/rcu/tree.c:2842 update_process_times+0x30/0x60 kernel/time/timer.c:1630 tick_sched_handle+0x85/0x160 kernel/time/tick-sched.c:162 tick_sched_timer+0x42/0x120 kernel/time/tick-sched.c:1166 __run_hrtimer kernel/time/hrtimer.c:1211 [inline] __hrtimer_run_queues+0x349/0xe10 kernel/time/hrtimer.c:1275 hrtimer_interrupt+0x1d4/0x5f0 kernel/time/hrtimer.c:1309 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1025 [inline] smp_apic_timer_interrupt+0x14a/0x700 arch/x86/kernel/apic/apic.c:1050 apic_timer_interrupt+0x9d/0xb0 arch/x86/entry/entry_64.S:795 RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0xa/0x50 kernel/kcov.c:100 RSP: 0018:ffff8801c4f27a90 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff11 RAX: ffff8801c1fbe1c0 RBX: dffffc0000000000 RCX: ffffffff838b09d2 RDX: 1ffff10039f5dce7 RSI: ffffc90002549000 RDI: ffff8801cfaee738 RBP: ffff8801c4f27b18 R08: ffffffff85f445c0 R09: 1ffff100389e4efd R10: ffff8801c1fbe1c0 R11: 0000000000000001 R12: ffff8801cfaee1c0 R13: ffff8801c6fc56c0 R14: ffff8801dac05040 R15: ffff8801c6fc5818 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0x1759/0x1e00 block/ioctl.c:601 block_ioctl+0xea/0x130 fs/block_dev.c:1860 vfs_ioctl fs/ioctl.c:46 [inline] do_vfs_ioctl+0x1b1/0x1530 fs/ioctl.c:686 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692 entry_SYSCALL_64_fastpath+0x1f/0x96 RIP: 0033:0x4529d9 RSP: 002b:00007f8de54d9c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 00000000004529d9 RDX: 0000000000000018 RSI: 0000000000004c00 RDI: 0000000000000017 RBP: 000000000000005b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed928 R13: 00000000ffffffff R14: 00007f8de54da6d4 R15: 0000000000000000 INFO: rcu_sched detected stalls on CPUs/tasks: 0-....: (125000 ticks this GP) idle=9d6/140000000000001/0 softirq=58628/58628 fqs=31232 (detected by 1, t=125002 jiffies, g=31843, c=31842, q=1090) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 17591 Comm: syz-executor1 Not tainted 4.15.0-rc1+ #201 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: 000000007ddc9d4a task.stack: 0000000039ccb867 RIP: 0010:__read_once_size include/linux/compiler.h:183 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x50 kernel/kcov.c:106 RSP: 0018:ffff8801c4f27a90 EFLAGS: 00000246 RAX: 0000000000010000 RBX: dffffc0000000000 RCX: ffffffff838b0a01 RDX: 000000000000ffff RSI: ffffc90002549000 RDI: ffff8801cfaee738 RBP: ffff8801c4f27a90 R08: ffffffff85f445c0 R09: 1ffff100389e4efd R10: ffff8801c1fbe1c0 R11: 0000000000000001 R12: ffff8801cfaee1c0 R13: ffff8801c6fc56c0 R14: ffff8801dac05040 R15: ffff8801c6fc5818 FS: 00007f8de54da700(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b9bc22000 CR3: 00000001c4940000 CR4: 00000000001426f0 Call Trace: loop_set_fd drivers/block/loop.c:885 [inline] lo_ioctl+0x5d1/0x1b90 drivers/block/loop.c:1358 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0x1759/0x1e00 block/ioctl.c:601 block_ioctl+0xea/0x130 fs/block_dev.c:1860 vfs_ioctl fs/ioctl.c:46 [inline] do_vfs_ioctl+0x1b1/0x1530 fs/ioctl.c:686 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692 entry_SYSCALL_64_fastpath+0x1f/0x96 RIP: 0033:0x4529d9 RSP: 002b:00007f8de54d9c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 00000000004529d9 RDX: 0000000000000018 RSI: 0000000000004c00 RDI: 0000000000000017 RBP: 000000000000005b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed928 R13: 00000000ffffffff R14: 00007f8de54da6d4 R15: 0000000000000000 Code: 8c 7c 91 7e 81 e2 00 01 1f 00 48 8b 4d 08 75 2b 8b 90 80 14 00 00 83 fa 02 75 20 48 8b b0 88 14 00 00 8b 80 84 14 00 00 48 8b 16 <48> 83 c2 01 48 39 d0 76 07 48 89 0c d6 48 89 16 5d c3 0f 1f 00 INFO: task kworker/1:3:4661 blocked for more than 120 seconds. Not tainted 4.15.0-rc1+ #201 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/1:3 D21424 4661 2 0x80000000 Workqueue: events proc_cleanup_work Call Trace: context_switch kernel/sched/core.c:2799 [inline] __schedule+0x8eb/0x2060 kernel/sched/core.c:3375 schedule+0xf5/0x430 kernel/sched/core.c:3434 schedule_timeout+0x194/0x220 kernel/time/timer.c:1771 do_wait_for_common kernel/sched/completion.c:91 [inline] __wait_for_common kernel/sched/completion.c:112 [inline] wait_for_common kernel/sched/completion.c:123 [inline] wait_for_completion+0x44b/0x7b0 kernel/sched/completion.c:144 __wait_rcu_gp+0x25d/0x420 kernel/rcu/update.c:414 synchronize_sched.part.67+0xbd/0x110 kernel/rcu/tree.c:3291 synchronize_sched+0x76/0xf0 kernel/rcu/tree.c:3292 synchronize_rcu include/linux/rcupdate.h:94 [inline] kern_unmount+0x57/0xd0 fs/namespace.c:3308 pid_ns_release_proc+0x31/0x40 fs/proc/root.c:232 proc_cleanup_work+0x19/0x20 kernel/pid_namespace.c:80 process_one_work+0xbfd/0x1be0 kernel/workqueue.c:2112 worker_thread+0x223/0x1990 kernel/workqueue.c:2246 kthread+0x37a/0x440 kernel/kthread.c:238 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:441 Showing all locks held in the system: 2 locks held by khungtaskd/673: #0: (rcu_read_lock){....}, at: [<000000008fb0025d>] check_hung_uninterruptible_tasks kernel/hung_task.c:175 [inline] #0: (rcu_read_lock){....}, at: [<000000008fb0025d>] watchdog+0x1c5/0xd60 kernel/hung_task.c:249 #1: (tasklist_lock){.+.+}, at: [<000000000152f620>] debug_show_all_locks+0xd3/0x400 kernel/locking/lockdep.c:4554 1 lock held by rsyslogd/2974: #0: (&f->f_pos_lock){+.+.}, at: [<0000000084119e6e>] __fdget_pos+0x131/0x1a0 fs/file.c:770 4 locks held by login/3056: #0: (&tty->ldisc_sem){++++}, at: [<00000000097f4cda>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&tty->atomic_write_lock){+.+.}, at: [<00000000ee75436e>] tty_write_lock+0x21/0x60 drivers/tty/tty_io.c:875 #2: (&tty->termios_rwsem){++++}, at: [<00000000c74259eb>] n_tty_write+0x249/0xed0 drivers/tty/n_tty.c:2285 #3: (&ldata->output_lock){+.+.}, at: [<000000007534a65e>] process_output_block drivers/tty/n_tty.c:534 [inline] #3: (&ldata->output_lock){+.+.}, at: [<000000007534a65e>] n_tty_write+0x3f6/0xed0 drivers/tty/n_tty.c:2302 2 locks held by getty/3057: #0: (&tty->ldisc_sem){++++}, at: [<00000000097f4cda>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000008b3e904b>] n_tty_read+0x2f2/0x1a10 drivers/tty/n_tty.c:2131 2 locks held by getty/3058: #0: (&tty->ldisc_sem){++++}, at: [<00000000097f4cda>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000008b3e904b>] n_tty_read+0x2f2/0x1a10 drivers/tty/n_tty.c:2131 2 locks held by getty/3059: #0: (&tty->ldisc_sem){++++}, at: [<00000000097f4cda>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000008b3e904b>] n_tty_read+0x2f2/0x1a10 drivers/tty/n_tty.c:2131 2 locks held by getty/3060: #0: (&tty->ldisc_sem){++++}, at: [<00000000097f4cda>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000008b3e904b>] n_tty_read+0x2f2/0x1a10 drivers/tty/n_tty.c:2131 2 locks held by getty/3061: #0: (&tty->ldisc_sem){++++}, at: [<00000000097f4cda>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000008b3e904b>] n_tty_read+0x2f2/0x1a10 drivers/tty/n_tty.c:2131 2 locks held by getty/3062: #0: (&tty->ldisc_sem){++++}, at: [<00000000097f4cda>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000008b3e904b>] n_tty_read+0x2f2/0x1a10 drivers/tty/n_tty.c:2131 2 locks held by kworker/1:3/4661: #0: ((wq_completion)"events"){+.+.}, at: [<00000000b660ad71>] __write_once_size include/linux/compiler.h:212 [inline] #0: ((wq_completion)"events"){+.+.}, at: [<00000000b660ad71>] atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ((wq_completion)"events"){+.+.}, at: [<00000000b660ad71>] atomic_long_set include/asm-generic/atomic-long.h:57 [inline] #0: ((wq_completion)"events"){+.+.}, at: [<00000000b660ad71>] set_work_data kernel/workqueue.c:618 [inline] #0: ((wq_completion)"events"){+.+.}, at: [<00000000b660ad71>] set_work_pool_and_clear_pending kernel/workqueue.c:645 [inline] #0: ((wq_completion)"events"){+.+.}, at: [<00000000b660ad71>] process_one_work+0xad4/0x1be0 kernel/workqueue.c:2083 #1: ((work_completion)(&ns->proc_work)){+.+.}, at: [<0000000090a4c7e7>] process_one_work+0xb2f/0x1be0 kernel/workqueue.c:2087 1 lock held by syz-executor7/17565: #0: (event_mutex){+.+.}, at: [<00000000a9ab6e66>] perf_trace_destroy+0x28/0x100 kernel/trace/trace_event_perf.c:234 1 lock held by syz-executor1/17618: #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<0000000047019ce4>] lo_ioctl+0x8b/0x1b90 drivers/block/loop.c:1355 3 locks held by syz-executor6/17609: #0: (&sig->cred_guard_mutex){+.+.}, at: [<00000000261a4e3d>] SYSC_perf_event_open+0x1345/0x2f10 kernel/events/core.c:9916 #1: (&pmus_srcu){....}, at: [<00000000f2275111>] perf_event_alloc+0xf55/0x2b00 kernel/events/core.c:9477 #2: (event_mutex){+.+.}, at: [<0000000045278bfe>] perf_trace_init+0x58/0xab0 kernel/trace/trace_event_perf.c:216 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 673 Comm: khungtaskd Not tainted 4.15.0-rc1+ #201 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 nmi_cpu_backtrace+0x1d2/0x210 lib/nmi_backtrace.c:103 nmi_trigger_cpumask_backtrace+0x122/0x180 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:138 [inline] check_hung_task kernel/hung_task.c:132 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:190 [inline] watchdog+0x90c/0xd60 kernel/hung_task.c:249 kthread+0x37a/0x440 kernel/kthread.c:238 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:441 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 17591 Comm: syz-executor1 Not tainted 4.15.0-rc1+ #201 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: 000000007ddc9d4a task.stack: 0000000039ccb867 RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x50 kernel/kcov.c:106 RSP: 0018:ffff8801c4f27a90 EFLAGS: 00000216 RAX: 0000000000010000 RBX: dffffc0000000000 RCX: ffffffff838b0997 RDX: 0000000000010000 RSI: ffffc90002549000 RDI: ffff8801d12c5ed8 RBP: ffff8801c4f27a90 R08: ffffffff85f445c0 R09: 1ffff100389e4efd R10: ffff8801c1fbe1c0 R11: 0000000000000001 R12: ffff8801cfaee378 R13: ffff8801c6fc56c0 R14: ffff8801dac05040 R15: ffff8801c6fc5818 FS: 00007f8de54da700(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b9bc22000 CR3: 00000001c4940000 CR4: 00000000001426f0 Call Trace: is_loop_device drivers/block/loop.c:691 [inline] loop_set_fd drivers/block/loop.c:879 [inline] lo_ioctl+0x567/0x1b90 drivers/block/loop.c:1358 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0x1759/0x1e00 block/ioctl.c:601 block_ioctl+0xea/0x130 fs/block_dev.c:1860 vfs_ioctl fs/ioctl.c:46 [inline] do_vfs_ioctl+0x1b1/0x1530 fs/ioctl.c:686 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692 entry_SYSCALL_64_fastpath+0x1f/0x96 RIP: 0033:0x4529d9 RSP: 002b:00007f8de54d9c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 00000000004529d9 RDX: 0000000000000018 RSI: 0000000000004c00 RDI: 0000000000000017 RBP: 000000000000005b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed928 R13: 00000000ffffffff R14: 00007f8de54da6d4 R15: 0000000000000000 Code: 81 e2 00 01 1f 00 48 8b 4d 08 75 2b 8b 90 80 14 00 00 83 fa 02 75 20 48 8b b0 88 14 00 00 8b 80 84 14 00 00 48 8b 16 48 83 c2 01 <48> 39 d0 76 07 48 89 0c d6 48 89 16 5d c3 0f 1f 00 55 65 48 8b