binder: 10314:10316 ioctl c0306201 20000440 returned -22 binder: 10317:10318 unknown command 0 binder: 10317:10318 ioctl c0306201 20000440 returned -22 binder: 10317:10319 unknown command 0 binder: 10317:10319 ioctl c0306201 20000440 returned -22 INFO: task init:20526 blocked for more than 140 seconds. Not tainted 4.9.184+ #6 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. init D28872 20526 1 0x00000000 0000000000000083 ffff8801c84c97c0 ffff8801cbeae300 ffff8801db721000 ffff8801c84cdf00 ffff8801db721018 ffff8801d0b4f5a0 ffffffff8280a5ce ffffffff810ae520 0000000000000000 0000000000000000 ffff8801db7218f0 Call Trace: [<0000000095ac288b>] schedule+0x92/0x1c0 kernel/sched/core.c:3546 [<00000000d93a1408>] schedule_timeout+0x766/0xe50 kernel/time/timer.c:1771 [<00000000d2a29564>] __down_common kernel/locking/semaphore.c:221 [inline] [<00000000d2a29564>] __down+0x190/0x2b0 kernel/locking/semaphore.c:238 [<000000000c70315b>] down+0x64/0x90 kernel/locking/semaphore.c:61 [<000000006d760c20>] console_lock+0x2c/0x80 kernel/printk/printk.c:2217 [<00000000916755fd>] console_device+0x1c/0xc0 kernel/printk/printk.c:2554 [<00000000e42ee93c>] tty_lookup_driver drivers/tty/tty_io.c:2018 [inline] [<00000000e42ee93c>] tty_open_by_driver drivers/tty/tty_io.c:2063 [inline] [<00000000e42ee93c>] tty_open+0x796/0xe10 drivers/tty/tty_io.c:2140 [<000000009d45620d>] chrdev_open+0x230/0x630 fs/char_dev.c:398 [<00000000b9d67e45>] do_dentry_open+0x422/0xd20 fs/open.c:772 [<0000000091a90222>] vfs_open+0x105/0x230 fs/open.c:885 [<0000000029ded14f>] do_last fs/namei.c:3457 [inline] [<0000000029ded14f>] path_openat+0xbf5/0x2f60 fs/namei.c:3581 [<00000000ef7832fd>] do_filp_open+0x1a1/0x280 fs/namei.c:3615 [<00000000695854d9>] do_sys_open+0x2f0/0x610 fs/open.c:1078 [<0000000046d7843a>] SYSC_open fs/open.c:1096 [inline] [<0000000046d7843a>] SyS_open+0x2d/0x40 fs/open.c:1091 [<000000001eea3d8a>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288 [<000000003253ca68>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [<0000000099bb8b2b>] check_hung_uninterruptible_tasks kernel/hung_task.c:169 [inline] #0: (rcu_read_lock){......}, at: [<0000000099bb8b2b>] watchdog+0x14b/0xaf0 kernel/hung_task.c:263 #1: (tasklist_lock){.+.+..}, at: [<000000008b54ab65>] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/1902: #0: (&f->f_pos_lock){+.+.+.}, at: [<000000001fc48918>] __fdget_pos+0xa8/0xd0 fs/file.c:782 2 locks held by getty/2030: #0: (&tty->ldisc_sem){++++++}, at: [<000000006258f22f>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+...}, at: [<00000000ef6bc4dd>] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 1 lock held by init/20526: #0: (tty_mutex){+.+.+.}, at: [<0000000024e8b036>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<0000000024e8b036>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/20527: #0: (tty_mutex){+.+.+.}, at: [<0000000024e8b036>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<0000000024e8b036>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/20529: #0: (tty_mutex){+.+.+.}, at: [<0000000024e8b036>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<0000000024e8b036>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/20531: #0: (tty_mutex){+.+.+.}, at: [<0000000024e8b036>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<0000000024e8b036>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/20532: #0: (tty_mutex){+.+.+.}, at: [<0000000024e8b036>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<0000000024e8b036>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/20534: #0: (tty_mutex){+.+.+.}, at: [<0000000024e8b036>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<0000000024e8b036>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.184+ #6 ffff8801d98d7cc8 ffffffff81b580a1 0000000000000001 0000000000000000 0000000000000001 ffffffff81099a01 dffffc0000000000 ffff8801d98d7d00 ffffffff81b6333c 0000000000000001 0000000000000000 0000000000000001 Call Trace: [<000000003c662fba>] __dump_stack lib/dump_stack.c:15 [inline] [<000000003c662fba>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<00000000e94cb787>] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [<000000004b830c3a>] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [<00000000eb51c0cc>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [<00000000a680dad1>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [<00000000a680dad1>] check_hung_task kernel/hung_task.c:126 [inline] [<00000000a680dad1>] check_hung_uninterruptible_tasks kernel/hung_task.c:183 [inline] [<00000000a680dad1>] watchdog+0x670/0xaf0 kernel/hung_task.c:263 [<00000000e7c3e313>] kthread+0x278/0x310 kernel/kthread.c:211 [<00000000695c9c43>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 10319 Comm: syz-executor211 Not tainted 4.9.184+ #6 task: 00000000c061310a task.stack: 000000000bbb3d0a RIP: 0010:[] c [<0000000032bba992>] preempt_count arch/x86/include/asm/preempt.h:22 [inline] RIP: 0010:[] c [<0000000032bba992>] check_kcov_mode kernel/kcov.c:66 [inline] RIP: 0010:[] c [<0000000032bba992>] __sanitizer_cov_trace_pc+0x11/0x50 kernel/kcov.c:100 RSP: 0018:ffff8801c7b8f828 EFLAGS: 00000006 RAX: ffff8801cdf25f00 RBX: ffff8801db621000 RCX: ffff8801cdf267b0 RDX: 0000000000000000 RSI: ffffffff81bbe707 RDI: ffffffff82b44840 RBP: ffff8801c7b8f828 R08: 0000000000000001 R09: 0000000000001c59 R10: ffff8801cdf267b0 R11: 0000000000000001 R12: 0000000000000000 R13: ffffffff82b44800 R14: ffffffff82b44840 R15: ffff8801cdf25f10 FS: 00007f1db21bc700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1db21dce78 CR3: 00000001c495e000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8801c7b8f868c ffffffff81bbe707c ffffffff81bbf8adc ffff8801db621000c ffff8801cdf25f00c ffff8801db621000c 0000000000000001c ffff8801cdf25f10c ffff8801c7b8f878c ffffffff81bbe8ecc ffff8801c7b8f888c ffffffff810a7ef0c Call Trace: [<000000000d286121>] check_preemption_disabled+0x37/0x200 lib/smp_processor_id.c:15 [<0000000022916c8f>] debug_smp_processor_id+0x1c/0x20 lib/smp_processor_id.c:56 [<000000002b1f2923>] kvm_clock_read+0x10/0x40 arch/x86/kernel/kvmclock.c:89 [<00000000ea7fe27e>] kvm_sched_clock_read+0x9/0x20 arch/x86/kernel/kvmclock.c:103 [<000000008b4d5dd2>] paravirt_sched_clock arch/x86/include/asm/paravirt.h:185 [inline] [<000000008b4d5dd2>] sched_clock+0x9/0x10 arch/x86/kernel/tsc.c:328 [<00000000d0a31625>] sched_clock_cpu+0x144/0x1c0 kernel/sched/clock.c:305 [<000000003f74ce8b>] update_rq_clock kernel/sched/core.c:112 [inline] [<000000003f74ce8b>] update_rq_clock+0xb7/0x180 kernel/sched/core.c:103 [<00000000ab348ba0>] dequeue_task kernel/sched/core.c:768 [inline] [<00000000ab348ba0>] deactivate_task+0xd0/0x2e0 kernel/sched/core.c:789 [<00000000b61688f2>] __schedule+0x7df/0x1f10 kernel/sched/core.c:3451 [<0000000023834ac2>] do_task_dead+0xb7/0xe0 kernel/sched/core.c:3520 [<0000000046438761>] do_exit+0x14aa/0x2aa0 kernel/exit.c:899 [<0000000040d8daab>] do_group_exit+0x111/0x300 kernel/exit.c:945 [<0000000094f4ff4d>] get_signal+0x377/0x1cb0 kernel/signal.c:2382 [<00000000b84e2945>] do_signal+0x9c/0x1920 arch/x86/kernel/signal.c:812 [<00000000246c23b0>] exit_to_usermode_loop+0x11c/0x160 arch/x86/entry/common.c:159 [<00000000afbb526c>] prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline] [<00000000afbb526c>] syscall_return_slowpath arch/x86/entry/common.c:266 [inline] [<00000000afbb526c>] do_syscall_64+0x3ab/0x5c0 arch/x86/entry/common.c:293 [<000000003253ca68>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c89 cef ce8 c43 cc1 c1d c00 ce9 c1e cfe cff cff c66 c2e c0f c1f c84 c00 c00 c00 c00 c00 c0f c1f c40 c00 c55 c48 c89 ce5 c48 c8b c75 c08 c65 c48 c8b c04 c25 c00 c7e c01 c00 c<65> c8b c15 cd8 c6e ccf c7e c81 ce2 c00 c01 c1f c00 c75 c2b c8b c90 c38 c12 c00 c00 c