INFO: task syz-executor.3:23920 can't die for more than 143 seconds. syz-executor.3 R running task 24088 23920 23019 0x00004006 Call Trace: Showing all locks held in the system: 1 lock held by khungtaskd/1054: #0: 0000000002daa46b (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e /kernel/locking/lockdep.c:5257 1 lock held by rsyslogd/8470: #0: 0000000053f06340 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 /fs/file.c:801 2 locks held by getty/8560: #0: 0000000028868991 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 /drivers/tty/tty_ldsem.c:341 #1: 00000000a3efc36a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 /drivers/tty/n_tty.c:2156 2 locks held by getty/8561: #0: 000000005eadb968 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 /drivers/tty/tty_ldsem.c:341 #1: 00000000b7611921 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 /drivers/tty/n_tty.c:2156 2 locks held by getty/8562: #0: 000000003392d47f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 /drivers/tty/tty_ldsem.c:341 #1: 00000000672df8b5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 /drivers/tty/n_tty.c:2156 2 locks held by getty/8563: #0: 0000000002d1c9c7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 /drivers/tty/tty_ldsem.c:341 #1: 0000000052f1646f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 /drivers/tty/n_tty.c:2156 2 locks held by getty/8564: #0: 000000002964b3b7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 /drivers/tty/tty_ldsem.c:341 #1: 00000000c73004c4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 /drivers/tty/n_tty.c:2156 2 locks held by getty/8565: #0: 000000009b845eb7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 /drivers/tty/tty_ldsem.c:341 #1: 00000000ce352640 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 /drivers/tty/n_tty.c:2156 2 locks held by getty/8566: #0: 000000000b6975b2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 /drivers/tty/tty_ldsem.c:341 #1: 00000000b27c2404 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 /drivers/tty/n_tty.c:2156 1 lock held by syz-executor.3/23920: ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1054 Comm: khungtaskd Not tainted 5.2.0-next-20190718 #41 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack /lib/dump_stack.c:77 [inline] dump_stack+0x172/0x1f0 /lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x70/0xb2 /lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x23b/0x28b /lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 /arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace /./include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks /kernel/hung_task.c:249 [inline] watchdog+0xc54/0x1320 /kernel/hung_task.c:333 kthread+0x361/0x430 /kernel/kthread.c:255 ret_from_fork+0x24/0x30 /arch/x86/entry/entry_64.S:352 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 23920 Comm: syz-executor.3 Not tainted 5.2.0-next-20190718 #41 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:check_memory_region+0x21/0x1a0 /mm/kasan/generic.c:191 Code: 2e 0f 1f 84 00 00 00 00 00 48 85 f6 0f 84 34 01 00 00 48 b8 ff ff ff ff ff 7f ff ff 55 0f b6 d2 48 39 c7 48 89 e5 41 55 41 54 <53> 0f 86 07 01 00 00 4c 8d 5c 37 ff 49 89 f8 48 b8 00 00 00 00 00 RSP: 0018:ffff8880a53fecb0 EFLAGS: 00000216 RAX: ffff7fffffffffff RBX: ffff88812ffffcc8 RCX: ffffffff81987ddc RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88812ffffcc8 RBP: ffff8880a53fecc0 R08: 1ffff11025ffff9b R09: ffffed1025ffff9c R10: ffffed1025ffff9b R11: ffff88812ffffcdf R12: ffff88812fffc000 R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807138c6c0 FS: 00007f350ea16700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 00000000921d2000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __kasan_check_read+0x11/0x20 /mm/kasan/common.c:92 atomic64_read /./include/asm-generic/atomic-instrumented.h:836 [inline] atomic_long_read /./include/asm-generic/atomic-long.h:28 [inline] node_page_state+0x1c/0x50 /mm/vmstat.c:995 too_many_isolated /mm/compaction.c:753 [inline] isolate_migratepages_block+0x13e/0x2de0 /mm/compaction.c:800 isolate_migratepages /mm/compaction.c:1817 [inline] compact_zone+0x1428/0x38d0 /mm/compaction.c:2158 compact_zone_order+0x1af/0x2a0 /mm/compaction.c:2308 try_to_compact_pages+0x281/0xb70 /mm/compaction.c:2360 __alloc_pages_direct_compact+0x154/0x460 /mm/page_alloc.c:3902 __alloc_pages_slowpath+0x49f/0x2520 /mm/page_alloc.c:4465 __alloc_pages_nodemask+0x62e/0x8f0 /mm/page_alloc.c:4745 __alloc_pages /./include/linux/gfp.h:473 [inline] __alloc_pages_node /./include/linux/gfp.h:486 [inline] alloc_pages_vma+0x3c5/0x560 /mm/mempolicy.c:2144 do_huge_pmd_anonymous_page+0x48a/0x19d0 /mm/huge_memory.c:743 create_huge_pmd /mm/memory.c:3735 [inline] __handle_mm_fault+0x2d3b/0x3f20 /mm/memory.c:3939 handle_mm_fault+0x1b5/0x6b0 /mm/memory.c:4005 faultin_page /mm/gup.c:651 [inline] __get_user_pages+0x7d4/0x1b30 /mm/gup.c:854 __get_user_pages_locked /mm/gup.c:1030 [inline] get_user_pages_remote+0x234/0x4b0 /mm/gup.c:1170 process_vm_rw_single_vec /mm/process_vm_access.c:109 [inline] process_vm_rw_core.isra.0+0x464/0xb10 /mm/process_vm_access.c:216 process_vm_rw+0x21f/0x240 /mm/process_vm_access.c:284 __do_sys_process_vm_writev /mm/process_vm_access.c:306 [inline] __se_sys_process_vm_writev /mm/process_vm_access.c:301 [inline] __x64_sys_process_vm_writev+0xe3/0x1a0 /mm/process_vm_access.c:301 do_syscall_64+0xfd/0x6a0 /arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459819 Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f350ea15c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459819 RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000063 RBP: 000000000075bf20 R08: 000000000000023a R09: 0000000000000000 R10: 0000000020121000 R11: 0000000000000246 R12: 00007f350ea166d4 R13: 00000000004c69ea R14: 00000000004db950 R15: 00000000ffffffff