INFO: task syz-executor.2:12987 blocked for more than 143 seconds. Not tainted 5.1.0-rc4+ #66 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D29680 12987 12983 0x00000000 Call Trace: context_switch kernel/sched/core.c:2877 [inline] __schedule+0x817/0x1cc0 kernel/sched/core.c:3518 schedule+0x92/0x180 kernel/sched/core.c:3562 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3620 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1310 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 mon_bin_read+0x60/0x640 drivers/usb/mon/mon_bin.c:813 do_loop_readv_writev fs/read_write.c:701 [inline] do_loop_readv_writev fs/read_write.c:688 [inline] do_iter_read+0x4a9/0x660 fs/read_write.c:922 vfs_readv+0xf0/0x160 fs/read_write.c:984 do_preadv+0x1c4/0x280 fs/read_write.c:1068 __do_sys_preadv fs/read_write.c:1118 [inline] __se_sys_preadv fs/read_write.c:1113 [inline] __x64_sys_preadv+0x9a/0xf0 fs/read_write.c:1113 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x458c29 Code: Bad RIP value. RSP: 002b:00007fce941fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458c29 RDX: 0000000000000001 RSI: 0000000020000480 RDI: 0000000000000003 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce941ff6d4 R13: 00000000004c5969 R14: 00000000004d9cc8 R15: 00000000ffffffff INFO: task syz-executor.2:12988 blocked for more than 144 seconds. Not tainted 5.1.0-rc4+ #66 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D29784 12988 12987 0x00000004 Call Trace: context_switch kernel/sched/core.c:2877 [inline] __schedule+0x817/0x1cc0 kernel/sched/core.c:3518 schedule+0x92/0x180 kernel/sched/core.c:3562 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3620 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1310 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 mon_bin_read+0x60/0x640 drivers/usb/mon/mon_bin.c:813 do_loop_readv_writev fs/read_write.c:701 [inline] do_loop_readv_writev fs/read_write.c:688 [inline] do_iter_read+0x4a9/0x660 fs/read_write.c:922 vfs_readv+0xf0/0x160 fs/read_write.c:984 do_readv+0x15e/0x370 fs/read_write.c:1017 __do_sys_readv fs/read_write.c:1104 [inline] __se_sys_readv fs/read_write.c:1101 [inline] __x64_sys_readv+0x75/0xb0 fs/read_write.c:1101 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x458c29 Code: Bad RIP value. RSP: 002b:00007fce941fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce941ff6d4 R13: 00000000004c5985 R14: 00000000004d9fe0 R15: 00000000ffffffff Showing all locks held in the system: 1 lock held by khungtaskd/1042: #0: 000000004394d1e3 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:5061 1 lock held by rsyslogd/7349: 2 locks held by getty/7462: #0: 000000007041aba1 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 000000007e68feb4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156 2 locks held by getty/7463: #0: 0000000033f405b3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 00000000e3608716 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156 2 locks held by getty/7464: #0: 00000000b7d59708 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 0000000056cda1ef (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156 2 locks held by getty/7465: #0: 00000000cee05f76 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 00000000e792a773 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156 2 locks held by getty/7466: #0: 0000000095f80848 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 000000006b655212 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156 2 locks held by getty/7467: #0: 00000000a971a274 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 000000004bfed520 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156 2 locks held by getty/7468: #0: 00000000fb6f5280 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 000000009bdbdfa5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156 2 locks held by kworker/0:3/7518: #0: 00000000a6816edb ((wq_completion)rcu_gp){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000a6816edb ((wq_completion)rcu_gp){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000a6816edb ((wq_completion)rcu_gp){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000a6816edb ((wq_completion)rcu_gp){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000a6816edb ((wq_completion)rcu_gp){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000a6816edb ((wq_completion)rcu_gp){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000a6816edb ((wq_completion)rcu_gp){+.+.}, at: process_one_work+0x87e/0x1790 kernel/workqueue.c:2240 #1: 00000000c47a9a84 ((work_completion)(&rew.rew_work)){+.+.}, at: process_one_work+0x8b4/0x1790 kernel/workqueue.c:2244 1 lock held by syz-executor.2/12983: #0: 00000000531b1404 (&rp->fetch_lock){+.+.}, at: mon_bin_read+0x60/0x640 drivers/usb/mon/mon_bin.c:813 1 lock held by syz-executor.2/12987: #0: 00000000531b1404 (&rp->fetch_lock){+.+.}, at: mon_bin_read+0x60/0x640 drivers/usb/mon/mon_bin.c:813 1 lock held by syz-executor.2/12988: #0: 00000000531b1404 (&rp->fetch_lock){+.+.}, at: mon_bin_read+0x60/0x640 drivers/usb/mon/mon_bin.c:813 1 lock held by syz-executor.5/24882: #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:76 1 lock held by syz-executor.3/24885: #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:76 1 lock held by syz-executor.3/24898: #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:76 [inline] #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 net/core/rtnetlink.c:5189 2 locks held by syz-executor.0/24892: #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:76 #1: 000000004e0965b1 (rcu_state.exp_mutex){+.+.}, at: exp_funnel_lock kernel/rcu/tree_exp.h:285 [inline] #1: 000000004e0965b1 (rcu_state.exp_mutex){+.+.}, at: synchronize_rcu_expedited+0x4ab/0x5b0 kernel/rcu/tree_exp.h:758 1 lock held by syz-executor.0/24899: #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:76 1 lock held by syz-executor.0/24933: #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:76 1 lock held by syz-executor.0/24934: #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:76 1 lock held by syz-executor.4/24930: #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:76 1 lock held by syz-executor.4/24937: #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:76 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc4+ #66 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x172/0x1f0 lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1be/0x236 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline] watchdog+0x9b7/0xec0 kernel/hung_task.c:288 kthread+0x357/0x430 kernel/kthread.c:253 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 0 to CPUs 1: