INFO: task syz-executor.5:18281 can't die for more than 143 seconds. syz-executor.5 D29544 18281 9652 0x00000004 Call Trace: context_switch kernel/sched/core.c:3380 [inline] __schedule+0x934/0x1f90 kernel/sched/core.c:4080 schedule+0xdc/0x2b0 kernel/sched/core.c:4154 __lock_sock+0x165/0x290 net/core/sock.c:2421 lock_sock_nested+0xfe/0x120 net/core/sock.c:2946 virtio_transport_release+0xc4/0xd60 net/vmw_vsock/virtio_transport_common.c:832 vsock_assign_transport+0xf3/0x3b0 net/vmw_vsock/af_vsock.c:454 vsock_stream_connect+0x2b3/0xc70 net/vmw_vsock/af_vsock.c:1288 __sys_connect_file+0x161/0x1c0 net/socket.c:1857 __sys_connect+0x174/0x1b0 net/socket.c:1874 __do_sys_connect net/socket.c:1885 [inline] __se_sys_connect net/socket.c:1882 [inline] __x64_sys_connect+0x73/0xb0 net/socket.c:1882 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c479 Code: Bad RIP value. RSP: 002b:00007fc0908aec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 00007fc0908af6d4 RCX: 000000000045c479 RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000006 RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000096 R14: 00000000004c2ece R15: 000000000076bf2c INFO: task syz-executor.5:18281 blocked for more than 143 seconds. Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.5 D29544 18281 9652 0x00000004 Call Trace: context_switch kernel/sched/core.c:3380 [inline] __schedule+0x934/0x1f90 kernel/sched/core.c:4080 schedule+0xdc/0x2b0 kernel/sched/core.c:4154 __lock_sock+0x165/0x290 net/core/sock.c:2421 lock_sock_nested+0xfe/0x120 net/core/sock.c:2946 virtio_transport_release+0xc4/0xd60 net/vmw_vsock/virtio_transport_common.c:832 vsock_assign_transport+0xf3/0x3b0 net/vmw_vsock/af_vsock.c:454 vsock_stream_connect+0x2b3/0xc70 net/vmw_vsock/af_vsock.c:1288 __sys_connect_file+0x161/0x1c0 net/socket.c:1857 __sys_connect+0x174/0x1b0 net/socket.c:1874 __do_sys_connect net/socket.c:1885 [inline] __se_sys_connect net/socket.c:1882 [inline] __x64_sys_connect+0x73/0xb0 net/socket.c:1882 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c479 Code: Bad RIP value. RSP: 002b:00007fc0908aec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 00007fc0908af6d4 RCX: 000000000045c479 RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000006 RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000096 R14: 00000000004c2ece R15: 000000000076bf2c INFO: task syz-executor.5:18286 can't die for more than 143 seconds. syz-executor.5 D24168 18286 9652 0x00000004 Call Trace: context_switch kernel/sched/core.c:3380 [inline] __schedule+0x934/0x1f90 kernel/sched/core.c:4080 schedule+0xdc/0x2b0 kernel/sched/core.c:4154 __lock_sock+0x165/0x290 net/core/sock.c:2421 lock_sock_nested+0xfe/0x120 net/core/sock.c:2946 virtio_transport_release+0xc4/0xd60 net/vmw_vsock/virtio_transport_common.c:832 vsock_assign_transport+0xf3/0x3b0 net/vmw_vsock/af_vsock.c:454 vsock_stream_connect+0x2b3/0xc70 net/vmw_vsock/af_vsock.c:1288 __sys_connect_file+0x161/0x1c0 net/socket.c:1857 __sys_connect+0x174/0x1b0 net/socket.c:1874 __do_sys_connect net/socket.c:1885 [inline] __se_sys_connect net/socket.c:1882 [inline] __x64_sys_connect+0x73/0xb0 net/socket.c:1882 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c479 Code: Bad RIP value. RSP: 002b:00007fc09088dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 00007fc09088e6d4 RCX: 000000000045c479 RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000006 RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000096 R14: 00000000004c2ece R15: 000000000076bfcc INFO: task syz-executor.5:18286 blocked for more than 144 seconds. Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.5 D24168 18286 9652 0x00000004 Call Trace: context_switch kernel/sched/core.c:3380 [inline] __schedule+0x934/0x1f90 kernel/sched/core.c:4080 schedule+0xdc/0x2b0 kernel/sched/core.c:4154 __lock_sock+0x165/0x290 net/core/sock.c:2421 lock_sock_nested+0xfe/0x120 net/core/sock.c:2946 virtio_transport_release+0xc4/0xd60 net/vmw_vsock/virtio_transport_common.c:832 vsock_assign_transport+0xf3/0x3b0 net/vmw_vsock/af_vsock.c:454 vsock_stream_connect+0x2b3/0xc70 net/vmw_vsock/af_vsock.c:1288 __sys_connect_file+0x161/0x1c0 net/socket.c:1857 __sys_connect+0x174/0x1b0 net/socket.c:1874 __do_sys_connect net/socket.c:1885 [inline] __se_sys_connect net/socket.c:1882 [inline] __x64_sys_connect+0x73/0xb0 net/socket.c:1882 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c479 Code: Bad RIP value. RSP: 002b:00007fc09088dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 00007fc09088e6d4 RCX: 000000000045c479 RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000006 RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000096 R14: 00000000004c2ece R15: 000000000076bfcc Showing all locks held in the system: 1 lock held by khungtaskd/1116: #0: ffffffff89badac0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 kernel/locking/lockdep.c:5546 1 lock held by rsyslogd/9501: #0: ffff888096f9a660 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 fs/file.c:821 2 locks held by getty/9591: #0: ffff888099b85090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc900017fb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 drivers/tty/n_tty.c:2156 2 locks held by getty/9592: #0: ffff88809b144090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc9000184b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 drivers/tty/n_tty.c:2156 2 locks held by getty/9593: #0: ffff88809f11f090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc9000187b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 drivers/tty/n_tty.c:2156 2 locks held by getty/9594: #0: ffff88809a73b090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc9000185b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 drivers/tty/n_tty.c:2156 2 locks held by getty/9595: #0: ffff888096b8e090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc9000186b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 drivers/tty/n_tty.c:2156 2 locks held by getty/9596: #0: ffff888098e32090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc9000183b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 drivers/tty/n_tty.c:2156 2 locks held by getty/9597: #0: ffff888098b53090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc900017bb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 drivers/tty/n_tty.c:2156 4 locks held by kworker/u4:1/9641: 1 lock held by syz-executor.5/18281: #0: ffff88808bcc4910 (sk_lock-AF_VSOCK){+.+.}, at: lock_sock include/net/sock.h:1574 [inline] #0: ffff88808bcc4910 (sk_lock-AF_VSOCK){+.+.}, at: vsock_stream_connect+0xfb/0xc70 net/vmw_vsock/af_vsock.c:1258 1 lock held by syz-executor.5/18286: #0: ffff88808f2ba910 (sk_lock-AF_VSOCK){+.+.}, at: lock_sock include/net/sock.h:1574 [inline] #0: ffff88808f2ba910 (sk_lock-AF_VSOCK){+.+.}, at: vsock_stream_connect+0xfb/0xc70 net/vmw_vsock/af_vsock.c:1258 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1116 Comm: khungtaskd Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x197/0x210 lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:147 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:249 [inline] watchdog+0xdf1/0x14e0 kernel/hung_task.c:333 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 9641 Comm: kworker/u4:1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: krdsd rds_tcp_accept_worker RIP: 0010:check_memory_region+0x1f/0x1a0 mm/kasan/generic.c:191 Code: 00 66 2e 0f 1f 84 00 00 00 00 00 48 85 f6 0f 84 34 01 00 00 48 b8 ff ff ff ff ff 7f ff ff 55 0f b6 d2 48 39 c7 48 89 e5 41 55 <41> 54 53 0f 86 07 01 00 00 4c 8d 5c 37 ff 49 89 f8 48 b8 00 00 00 RSP: 0018:ffffc900012e7ad0 EFLAGS: 00000012 RAX: ffff7fffffffffff RBX: 1ffff9200025cf64 RCX: ffffffff815b85b1 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8aa607c0 RBP: ffffc900012e7ad8 R08: 1ffffffff16a4d1f R09: fffffbfff16a4d20 R10: fffffbfff16a4d1f R11: ffffffff8b5268ff R12: ffffffff89badac0 R13: ffffffff876b706d R14: ffffc900012e7ba0 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000045c44f CR3: 0000000090f8f000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __kasan_check_read+0x11/0x20 mm/kasan/common.c:95 instrument_atomic_read include/linux/instrumented.h:56 [inline] test_bit include/asm-generic/bitops/instrumented-non-atomic.h:110 [inline] cpumask_test_cpu include/linux/cpumask.h:360 [inline] trace_lock_release include/trace/events/lock.h:58 [inline] lock_release+0x1a1/0x960 kernel/locking/lockdep.c:4737 rcu_lock_release include/linux/rcupdate.h:213 [inline] rcu_read_unlock include/linux/rcupdate.h:655 [inline] rds_conn_path_connect_if_down net/rds/connection.c:904 [inline] rds_conn_path_connect_if_down+0x23f/0x460 net/rds/connection.c:894 rds_tcp_accept_one_path net/rds/tcp_listen.c:97 [inline] rds_tcp_accept_one+0xa45/0xc00 net/rds/tcp_listen.c:214 rds_tcp_accept_worker+0x56/0x80 net/rds/tcp.c:525 process_one_work+0xa05/0x17a0 kernel/workqueue.c:2266 worker_thread+0x98/0xe40 kernel/workqueue.c:2412 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352