INFO: task syz-executor.2:13704 blocked for more than 143 seconds. Not tainted 5.4.0-rc7+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D28144 13704 8611 0xa0024000 Call Trace: context_switch kernel/sched/core.c:3384 [inline] __schedule+0x909/0x1ee0 kernel/sched/core.c:4078 schedule+0xd9/0x260 kernel/sched/core.c:4145 rwsem_down_read_slowpath+0x4cc/0xfb0 kernel/locking/rwsem.c:1102 __down_read kernel/locking/rwsem.c:1344 [inline] down_read+0x1f2/0x430 kernel/locking/rwsem.c:1497 exit_mm kernel/exit.c:451 [inline] do_exit+0x450/0x2e60 kernel/exit.c:804 do_group_exit+0x135/0x360 kernel/exit.c:921 __do_sys_exit_group kernel/exit.c:932 [inline] __se_sys_exit_group kernel/exit.c:930 [inline] __ia32_sys_exit_group+0x44/0x50 kernel/exit.c:930 do_syscall_32_irqs_on arch/x86/entry/common.c:333 [inline] do_fast_syscall_32+0x27b/0xdb3 arch/x86/entry/common.c:404 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f18a39 Code: Bad RIP value. RSP: 002b:000000000847fd7c EFLAGS: 00000202 ORIG_RAX: 00000000000000fc RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000805889b RBP: 00000000fffffff7 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 INFO: task syz-executor.2:13705 blocked for more than 143 seconds. Not tainted 5.4.0-rc7+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D25768 13705 8611 0xa0024002 Call Trace: context_switch kernel/sched/core.c:3384 [inline] __schedule+0x909/0x1ee0 kernel/sched/core.c:4078 schedule+0xd9/0x260 kernel/sched/core.c:4145 rwsem_down_read_slowpath+0x4cc/0xfb0 kernel/locking/rwsem.c:1102 __down_read kernel/locking/rwsem.c:1344 [inline] down_read+0x1f2/0x430 kernel/locking/rwsem.c:1497 exit_mm kernel/exit.c:451 [inline] do_exit+0x450/0x2e60 kernel/exit.c:804 do_group_exit+0x135/0x360 kernel/exit.c:921 get_signal+0x47c/0x2500 kernel/signal.c:2734 do_signal+0x87/0x1700 arch/x86/kernel/signal.c:815 exit_to_usermode_loop+0x286/0x380 arch/x86/entry/common.c:159 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:274 [inline] do_syscall_32_irqs_on arch/x86/entry/common.c:348 [inline] do_fast_syscall_32+0xb87/0xdb3 arch/x86/entry/common.c:404 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f18a39 Code: Bad RIP value. RSP: 002b:00000000f5d140cc EFLAGS: 00000296 ORIG_RAX: 0000000000000091 RAX: 00000000000004c1 RBX: 0000000000000005 RCX: 0000000020395000 RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 INFO: task syz-executor.2:13708 blocked for more than 144 seconds. Not tainted 5.4.0-rc7+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D27736 13708 8611 0xa0024000 Call Trace: context_switch kernel/sched/core.c:3384 [inline] __schedule+0x909/0x1ee0 kernel/sched/core.c:4078 schedule+0xd9/0x260 kernel/sched/core.c:4145 rwsem_down_read_slowpath+0x4cc/0xfb0 kernel/locking/rwsem.c:1102 __down_read kernel/locking/rwsem.c:1344 [inline] down_read+0x1f2/0x430 kernel/locking/rwsem.c:1497 exit_mm kernel/exit.c:451 [inline] do_exit+0x450/0x2e60 kernel/exit.c:804 do_group_exit+0x135/0x360 kernel/exit.c:921 get_signal+0x47c/0x2500 kernel/signal.c:2734 do_signal+0x87/0x1700 arch/x86/kernel/signal.c:815 exit_to_usermode_loop+0x286/0x380 arch/x86/entry/common.c:159 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:274 [inline] do_syscall_32_irqs_on arch/x86/entry/common.c:348 [inline] do_fast_syscall_32+0xb87/0xdb3 arch/x86/entry/common.c:404 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f18a39 Code: Bad RIP value. RSP: 002b:00000000f5cf312c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 RAX: fffffffffffffe00 RBX: 000000000816aff8 RCX: 0000000000000080 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000816affc RBP: 00000000f5cf3228 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 INFO: task syz-executor.2:13734 blocked for more than 144 seconds. Not tainted 5.4.0-rc7+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D29664 13734 8611 0xa0024000 Call Trace: context_switch kernel/sched/core.c:3384 [inline] __schedule+0x909/0x1ee0 kernel/sched/core.c:4078 schedule+0xd9/0x260 kernel/sched/core.c:4145 rwsem_down_read_slowpath+0x4cc/0xfb0 kernel/locking/rwsem.c:1102 __down_read kernel/locking/rwsem.c:1344 [inline] down_read+0x1f2/0x430 kernel/locking/rwsem.c:1497 exit_mm kernel/exit.c:451 [inline] do_exit+0x450/0x2e60 kernel/exit.c:804 do_group_exit+0x135/0x360 kernel/exit.c:921 get_signal+0x47c/0x2500 kernel/signal.c:2734 do_signal+0x87/0x1700 arch/x86/kernel/signal.c:815 exit_to_usermode_loop+0x286/0x380 arch/x86/entry/common.c:159 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:274 [inline] do_syscall_32_irqs_on arch/x86/entry/common.c:348 [inline] do_fast_syscall_32+0xb87/0xdb3 arch/x86/entry/common.c:404 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f18a39 Code: Bad RIP value. RSP: 002b:00000000f5cb10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000167 RAX: ffffffffffffff9f RBX: 0000000000000000 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 INFO: task syz-executor.2:13735 blocked for more than 145 seconds. Not tainted 5.4.0-rc7+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D29712 13735 8611 0x20020004 Call Trace: context_switch kernel/sched/core.c:3384 [inline] __schedule+0x909/0x1ee0 kernel/sched/core.c:4078 schedule+0xd9/0x260 kernel/sched/core.c:4145 rwsem_down_read_slowpath+0x4cc/0xfb0 kernel/locking/rwsem.c:1102 __down_read kernel/locking/rwsem.c:1344 [inline] down_read+0x1f2/0x430 kernel/locking/rwsem.c:1497 do_user_addr_fault arch/x86/mm/fault.c:1392 [inline] __do_page_fault+0xaa2/0xdd0 arch/x86/mm/fault.c:1506 do_page_fault+0x38/0x590 arch/x86/mm/fault.c:1530 page_fault+0x39/0x40 arch/x86/entry/entry_64.S:1202 RIP: 0010:do_strncpy_from_user lib/strncpy_from_user.c:47 [inline] RIP: 0010:strncpy_from_user+0x1e9/0x400 lib/strncpy_from_user.c:120 Code: 49 83 ec 08 bf 07 00 00 00 48 83 c3 08 4c 89 e6 e8 cc 88 1a fe 49 83 fc 07 0f 86 a8 01 00 00 e8 1d 87 1a fe 48 8b 45 d0 31 f6 <4c> 8b 3c 18 31 ff 89 75 c8 e8 89 88 1a fe 8b 75 c8 85 f6 0f 84 5a RSP: 0018:ffff88809ef5fd58 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000ab93000 RDX: 00000000000000eb RSI: 0000000000000000 RDI: 0000000000000007 RBP: ffff88809ef5fd90 R08: ffff8880667ee1c0 R09: ffff88821bc4f540 R10: 000000000000001c R11: ffffea0002a66887 R12: 0000000000000fe0 R13: ffff8880a99a2820 R14: 0000000000000fe0 R15: 0000000000000fe0 getname_flags fs/namei.c:149 [inline] getname_flags+0x11b/0x5b0 fs/namei.c:128 getname+0x1a/0x20 fs/namei.c:209 do_sys_open+0x2c9/0x5d0 fs/open.c:1091 __do_compat_sys_openat fs/open.c:1143 [inline] __se_compat_sys_openat fs/open.c:1141 [inline] __ia32_compat_sys_openat+0x98/0xf0 fs/open.c:1141 do_syscall_32_irqs_on arch/x86/entry/common.c:333 [inline] do_fast_syscall_32+0x27b/0xdb3 arch/x86/entry/common.c:404 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f18a39 Code: Bad RIP value. RSP: 002b:00000000f5c900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Showing all locks held in the system: 1 lock held by khungtaskd/1073: #0: ffffffff88fab980 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:5337 1 lock held by rsyslogd/8477: #0: ffff8880a4340ae0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 fs/file.c:801 2 locks held by getty/8567: #0: ffff8880923ca090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f472e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8568: #0: ffff8880a610e090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8569: #0: ffff88808cb47090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f532e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8570: #0: ffff8880a8e4a090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f4b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8571: #0: ffff888098099090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f292e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8572: #0: ffff888095853090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f412e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8573: #0: ffff8880a0799090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f212e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by kworker/u4:5/9158: #0: ffff8880ae934d18 (&rq->lock){-.-.}, at: rq_lock kernel/sched/sched.h:1215 [inline] #0: ffff8880ae934d18 (&rq->lock){-.-.}, at: __schedule+0x232/0x1ee0 kernel/sched/core.c:4026 #1: ffffffff88fab980 (rcu_read_lock){....}, at: trace_sched_stat_runtime include/trace/events/sched.h:435 [inline] #1: ffffffff88fab980 (rcu_read_lock){....}, at: update_curr+0x2ea/0x8d0 kernel/sched/fair.c:860 1 lock held by syz-executor.2/13704: #0: ffff8880634b5158 (&mm->mmap_sem#2){++++}, at: exit_mm kernel/exit.c:451 [inline] #0: ffff8880634b5158 (&mm->mmap_sem#2){++++}, at: do_exit+0x450/0x2e60 kernel/exit.c:804 1 lock held by syz-executor.2/13705: #0: ffff8880634b5158 (&mm->mmap_sem#2){++++}, at: exit_mm kernel/exit.c:451 [inline] #0: ffff8880634b5158 (&mm->mmap_sem#2){++++}, at: do_exit+0x450/0x2e60 kernel/exit.c:804 1 lock held by syz-executor.2/13708: #0: ffff8880634b5158 (&mm->mmap_sem#2){++++}, at: exit_mm kernel/exit.c:451 [inline] #0: ffff8880634b5158 (&mm->mmap_sem#2){++++}, at: do_exit+0x450/0x2e60 kernel/exit.c:804 1 lock held by syz-executor.2/13733: 1 lock held by syz-executor.2/13734: #0: ffff8880634b5158 (&mm->mmap_sem#2){++++}, at: exit_mm kernel/exit.c:451 [inline] #0: ffff8880634b5158 (&mm->mmap_sem#2){++++}, at: do_exit+0x450/0x2e60 kernel/exit.c:804 1 lock held by syz-executor.2/13735: #0: ffff8880634b5158 (&mm->mmap_sem#2){++++}, at: do_user_addr_fault arch/x86/mm/fault.c:1392 [inline] #0: ffff8880634b5158 (&mm->mmap_sem#2){++++}, at: __do_page_fault+0xaa2/0xdd0 arch/x86/mm/fault.c:1506 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1073 Comm: khungtaskd Not tainted 5.4.0-rc7+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x197/0x210 lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:205 [inline] watchdog+0x9d0/0xef0 kernel/hung_task.c:289 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 13733 Comm: syz-executor.2 Not tainted 5.4.0-rc7+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__lock_acquire+0x156c/0x4a00 kernel/locking/lockdep.c:3925 Code: 8d 45 3f 4d 85 ed 4c 89 95 48 ff ff ff 49 0f 49 c5 48 c1 f8 06 48 8d 3c c5 a0 09 78 8a e8 0c 5c 55 00 4c 0f a3 2d a4 d4 1e 09 <4c> 8b 95 48 ff ff ff 4c 8b 9d 40 ff ff ff 0f 82 0e f0 ff ff e8 eb RSP: 0018:ffff8880748f7748 EFLAGS: 00000047 RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff815934f4 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8a780a98 RBP: ffff8880748f7860 R08: 1ffffffff14f0153 R09: fffffbfff14f0154 R10: fffffbfff14f0153 R11: ffffffff8a780a9f R12: 00000000000007c4 R13: 00000000000007c4 R14: 0000000000000000 R15: 00000000000407c4 FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:00000000f5cd2b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 0000000069c83000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x190/0x410 kernel/locking/lockdep.c:4487 __mutex_lock_common kernel/locking/mutex.c:956 [inline] __mutex_lock+0x156/0x13c0 kernel/locking/mutex.c:1103 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1118 perf_mmap+0x73b/0x19f0 kernel/events/core.c:5798 call_mmap include/linux/fs.h:1900 [inline] mmap_region+0xc35/0x1760 mm/mmap.c:1806 do_mmap+0x853/0x1190 mm/mmap.c:1577 do_mmap_pgoff include/linux/mm.h:2348 [inline] vm_mmap_pgoff+0x1c5/0x230 mm/util.c:496 ksys_mmap_pgoff+0x4aa/0x630 mm/mmap.c:1629 __do_sys_mmap_pgoff mm/mmap.c:1640 [inline] __se_sys_mmap_pgoff mm/mmap.c:1636 [inline] __ia32_sys_mmap_pgoff+0xdd/0x1a0 mm/mmap.c:1636 do_syscall_32_irqs_on arch/x86/entry/common.c:333 [inline] do_fast_syscall_32+0x27b/0xdb3 arch/x86/entry/common.c:404 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f18a39 Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 002b:00000000f5cd20cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 RAX: ffffffffffffffda RBX: 0000000020ffd000 RCX: 0000000000003000 RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000008 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000