binder: undelivered TRANSACTION_ERROR: 29201 INFO: task syz-executor0:13558 blocked for more than 140 seconds. Not tainted 4.9.128+ #93 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D30312 13558 2094 0x00000004 ffff880167db8000 ffff8801cf3c3180 ffff88014c4f2100 ffff8801a7810000 ffff8801db621018 ffff880140a77b10 ffffffff8277ee02 ffffffff82ecc360 ffff880167db8000 ffffffff810ecbba 00fffc0000000000 ffff8801db6218f0 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3553 [] __lock_sock+0x13c/0x250 net/core/sock.c:2035 [] lock_sock_nested+0xf6/0x120 net/core/sock.c:2505 [] lock_sock include/net/sock.h:1404 [inline] [] do_tcp_setsockopt.isra.5+0x124/0x1ca0 net/ipv4/tcp.c:2486 [] tcp_setsockopt+0xb6/0xe0 net/ipv4/tcp.c:2760 [] sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2706 [] SYSC_setsockopt net/socket.c:1785 [inline] [] SyS_setsockopt+0x166/0x260 net/socket.c:1764 [] do_syscall_64+0x19f/0x480 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] rcu_read_unlock include/linux/rcupdate.h:927 [inline] #0: (rcu_read_lock){......}, at: [] rcu_lock_break kernel/hung_task.c:143 [inline] #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:177 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x310/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 2 locks held by getty/2030: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 1 lock held by syz-executor2/4881: #0: (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x53/0x110 fs/exec.c:1369 2 locks held by syz-executor4/11159: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.128+ #93 ffff8801d9907d08 ffffffff81af2469 0000000000000000 0000000000000001 0000000000000001 0000000000000001 ffffffff810967d0 ffff8801d9907d40 ffffffff81afd1c9 0000000000000001 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.0+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12c/0x151 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6ad/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 25899 Comm: syz-executor4 Not tainted 4.9.128+ #93 task: ffff88017a958000 task.stack: ffff880186f80000 RIP: 0010:[] c [] syscall_trace_enter+0x1/0xd20 arch/x86/entry/common.c:65 RSP: 0018:ffff880186f87ef0 EFLAGS: 00000293 RAX: ffff88017a958000 RBX: ffff880186f87f58 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff81005664 RDI: ffff880186f87f58 RBP: ffff880186f87f48 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000000ca R13: ffff880186f87fd0 R14: ffff88017a958000 R15: 0000000000000000 FS: 00007fd5bb219700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020478000 CR3: 0000000168212000 CR4: 00000000001606b0 Stack: ffff880186f87f48c ffffffff8100566cc 0000000000000000c 0000000000000000c 0000000000000000c 0000000000000000c 0000000000000000c 0000000000000000c 0000000000000000c 0000000000000000c 0000000000000000c 0000000000000000c Call Trace: [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: cff cff ce8 c33 cf8 c4c c00 ce9 c66 cfe cff cff ce8 c29 cf8 c4c c00 ce9 cd0 cfd cff cff c4c c89 cf7 ce8 c1c cf8 c4c c00 ce9 c28 cfe cff cff c0f c1f c80 c00 c00 c00 c00 c55 c<48> c89 ce5 c41 c57 c49 cbf c00 c00 c00 c00 c00 cfc cff cdf c41 c56 c4c c8d c75 cd8 c