binder: 14155:14158 ioctl c0306201 200001c0 returned -14 binder: 14155:14158 ioctl c018620b 20000040 returned -14 binder: 14155:14194 ioctl c0306201 200001c0 returned -14 binder: BINDER_SET_CONTEXT_MGR already set binder: 14155:14194 ioctl 40046207 0 returned -16 INFO: task syz-executor4:14162 blocked for more than 120 seconds. Not tainted 4.4.125-g38f41ec #21 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor4 D ffff8801d6d47790 28280 14162 3846 0x20020004 ffff8801d6d47790 ffff8800bb893000 ffff880000000000 1ffff1003ada8eec ffff8800bb893800 ffff8801db31fdb8 ffff8801db31fde0 ffff8801db31f4d8 ffff8801db31f4c0 ffff8801d9b49800 ffff8800bb893000 0000000000000000 Call Trace: [] schedule+0x7a/0x1b0 kernel/sched/core.c:3359 [] schedule_timeout+0x3a0/0x970 kernel/time/timer.c:1515 [] do_wait_for_common kernel/sched/completion.c:75 [inline] [] __wait_for_common kernel/sched/completion.c:93 [inline] [] wait_for_common kernel/sched/completion.c:101 [inline] [] wait_for_completion+0x209/0x2e0 kernel/sched/completion.c:122 [] kthread_stop+0x12e/0x790 kernel/kthread.c:497 [] stop_sync_thread+0x3d9/0x740 net/netfilter/ipvs/ip_vs_sync.c:1995 [] do_ip_vs_set_ctl+0x228/0xba0 net/netfilter/ipvs/ip_vs_ctl.c:2362 [] compat_nf_sockopt net/netfilter/nf_sockopt.c:145 [inline] [] compat_nf_setsockopt+0xfa/0x130 net/netfilter/nf_sockopt.c:155 [] compat_ip_setsockopt+0x8b/0xd0 net/ipv4/ip_sockglue.c:1251 [] inet_csk_compat_setsockopt+0x95/0x120 net/ipv4/inet_connection_sock.c:914 [] compat_tcp_setsockopt+0x3d/0x70 net/ipv4/tcp.c:2652 [] compat_sock_common_setsockopt+0xb2/0x140 net/core/sock.c:2670 [] C_SYSC_setsockopt net/compat.c:384 [inline] [] compat_SyS_setsockopt+0x149/0x290 net/compat.c:367 [] do_syscall_32_irqs_on arch/x86/entry/common.c:392 [inline] [] do_fast_syscall_32+0x321/0x8a0 arch/x86/entry/common.c:459 [] sysenter_flags_fixed+0xd/0x17 1 lock held by syz-executor4/14162: #0: (ipvs->sync_mutex){+.+.+.}, at: [] do_ip_vs_set_ctl+0x219/0xba0 net/netfilter/ipvs/ip_vs_ctl.c:2361 Sending NMI to all CPUs: NMI backtrace for cpu 0 CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.4.125-g38f41ec #21 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffffffff84217840 task.stack: ffffffff84200000 RIP: 0010:[] [] __lock_release kernel/locking/lockdep.c:3389 [inline] RIP: 0010:[] [] lock_release+0x18e/0xc10 kernel/locking/lockdep.c:3611 RSP: 0018:ffffffff84207d18 EFLAGS: 00000046 RAX: ffffffff84217840 RBX: 1ffffffff07088c0 RCX: ffffffff81195a33 RDX: ffffffff85702600 RSI: 0000000000000001 RDI: ffffffff84418980 RBP: ffffffff84207dc8 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 1ffffffff0840f86 R12: ffffffff842bdbe0 R13: 0000000000000000 R14: ffffffff847ecfb8 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000a0a000 CR3: 00000000ad24a000 CR4: 0000000000160670 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffffffff84217840 0000000000000000 0000000000000000 0000000000000002 0000000000000000 ffffffff84207dc8 0000000000000246 0000000000000000 ffffffff84207d98 ffffffff84218118 ffffffff84207dc8 0000000000000246 Call Trace: [] rcu_lock_release include/linux/rcupdate.h:482 [inline] [] rcu_read_unlock include/linux/rcupdate.h:917 [inline] [] __atomic_notifier_call_chain kernel/notifier.c:184 [inline] [] atomic_notifier_call_chain+0xbb/0x140 kernel/notifier.c:193 [] idle_notifier_call_chain+0x1e/0x30 kernel/cpu.c:865 [] __exit_idle arch/x86/kernel/process.c:247 [inline] [] arch_cpu_idle_exit+0x1f/0x30 arch/x86/kernel/process.c:268 [] cpu_idle_loop kernel/sched/idle.c:255 [inline] [] cpu_startup_entry+0x265/0x8f0 kernel/sched/idle.c:301 [] rest_init+0x189/0x190 init/main.c:410 [] start_kernel+0x6b9/0x6ee init/main.c:682 [] x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:196 [] x86_64_start_kernel+0x140/0x163 arch/x86/kernel/head64.c:185 Code: 45 98 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e da 07 00 00 48 8b 45 c8 48 c7 c2 00 26 70 85 <48> c1 ea 03 8b 80 d8 08 00 00 89 45 d0 48 b8 00 00 00 00 00 fc NMI backtrace for cpu 1 CPU: 1 PID: 486 Comm: khungtaskd Not tainted 4.4.125-g38f41ec #21 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8800bacdc800 task.stack: ffff8800baca0000 RIP: 0010:[] [] native_apic_mem_write arch/x86/include/asm/apic.h:94 [inline] RIP: 0010:[] [] __default_send_IPI_dest_field arch/x86/include/asm/ipi.h:119 [inline] RIP: 0010:[] [] _flat_send_IPI_mask arch/x86/kernel/apic/apic_flat_64.c:61 [inline] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1a0 arch/x86/kernel/apic/apic_flat_64.c:69 RSP: 0018:ffff8800baca7cb8 EFLAGS: 00000046 RAX: 0000000003000000 RBX: 0000000000000c00 RCX: 0000000000000000 RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fb300 RBP: ffff8800baca7ce0 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246 R13: 0000000000000003 R14: ffffffff8426f5a0 R15: 0000000000000002 FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6df8377140 CR3: 00000000ad24a000 CR4: 0000000000160670 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffffffff8426f5a0 ffffffff847f0b40 fffffbfff08fdc1c dffffc0000000000 ffff8801db31bca0 ffff8800baca7d00 ffffffff810b9abb ffffffff839f6dc0 0000000000000003 ffff8800baca7d60 ffffffff81d11764 ffffffff8141b993 Call Trace: [] nmi_raise_cpu_backtrace+0x5b/0x70 arch/x86/kernel/apic/hw_nmi.c:33 [] nmi_trigger_all_cpu_backtrace+0x4a4/0x550 lib/nmi_backtrace.c:85 [] arch_trigger_all_cpu_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 [] trigger_all_cpu_backtrace include/linux/nmi.h:44 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6fa/0xae0 kernel/hung_task.c:238 [] kthread+0x268/0x300 kernel/kthread.c:211 [] ret_from_fork+0x55/0x80 arch/x86/entry/entry_64.S:510 Code: b3 5f ff f6 c4 10 75 e1 44 89 e8 c1 e0 18 89 04 25 10 b3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 b3 5f ff <41> f7 c4 00 02 00 00 74 1a e8 2b 33 17 00 4c 89 e7 57 9d 0f 1f