binder: 3835:3835 ioctl 0 c0306201 returned -22
binder: 3838:3838 ioctl 0 c0306201 returned -22
binder: 3835:3835 ioctl 0 c0306201 returned -22
binder: 3838:3838 ioctl 0 c0306201 returned -22
binder: 3835:3835 ioctl 0 c0306201 returned -22
INFO: task init:3857 blocked for more than 120 seconds.
      Not tainted 4.9.94-g8683408 #3
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
init            D29000  3857      1 0x00000000
 ffff8801d8729800 ffff8801c14379c0 ffff8801b91ec000 ffff8801b673c800
 ffff8801db321b98 ffff8801c2117570 ffffffff838c040d 0000000000000000
 ffff8801d872a0ea ffff8801c21176d0 0000000000000046 ffff8801db322468
Call Trace:
 [<ffffffff838c1a0f>] schedule+0x7f/0x1b0 kernel/sched/core.c:3557
 [<ffffffff838cde21>] schedule_timeout+0x861/0xf70 kernel/time/timer.c:1768
 [<ffffffff838ca53e>] __down_common kernel/locking/semaphore.c:221 [inline]
 [<ffffffff838ca53e>] __down+0x12e/0x1f0 kernel/locking/semaphore.c:238
 [<ffffffff81229eee>] down+0x5e/0x80 kernel/locking/semaphore.c:61
 [<ffffffff812587ac>] console_lock+0x2c/0x80 kernel/printk/printk.c:2212
 [<ffffffff8125e01c>] console_device+0x1c/0xc0 kernel/printk/printk.c:2549
 [<ffffffff820013da>] tty_lookup_driver drivers/tty/tty_io.c:1994 [inline]
 [<ffffffff820013da>] tty_open_by_driver drivers/tty/tty_io.c:2039 [inline]
 [<ffffffff820013da>] tty_open+0x71a/0xe20 drivers/tty/tty_io.c:2116
 [<ffffffff8157c55d>] chrdev_open+0x22d/0x4c0 fs/char_dev.c:392
 [<ffffffff81567443>] do_dentry_open+0x703/0xc80 fs/open.c:766
 [<ffffffff8156ac2c>] vfs_open+0x11c/0x210 fs/open.c:879
 [<ffffffff815a1d68>] do_last fs/namei.c:3409 [inline]
 [<ffffffff815a1d68>] path_openat+0x758/0x3590 fs/namei.c:3533
 [<ffffffff815a8e67>] do_filp_open+0x197/0x270 fs/namei.c:3567
 [<ffffffff8156b63d>] do_sys_open+0x30d/0x5c0 fs/open.c:1072
 [<ffffffff8156b91d>] SYSC_open fs/open.c:1090 [inline]
 [<ffffffff8156b91d>] SyS_open+0x2d/0x40 fs/open.c:1085
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff838d1313>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb

Showing all locks held in the system:
2 locks held by khungtaskd/515:
 #0:  (rcu_read_lock){......}, at: [<ffffffff813646bc>] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
 #0:  (rcu_read_lock){......}, at: [<ffffffff813646bc>] watchdog+0x11c/0xa20 kernel/hung_task.c:239
 #1:  (tasklist_lock){.+.+..}, at: [<ffffffff81423bb0>] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
1 lock held by rsyslogd/3652:
 #0:  (&f->f_pos_lock){+.+.+.}, at: [<ffffffff815d565c>] __fdget_pos+0xac/0xd0 fs/file.c:781
2 locks held by getty/3748:
 #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff838cf4b2>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 #1:  (&ldata->atomic_read_lock){+.+...}, at: [<ffffffff82007082>] n_tty_read+0x202/0x16b0 drivers/tty/n_tty.c:2133
1 lock held by syzkaller881055/3836:
 #0:  (&pipe->mutex/1){+.+.+.}, at: [<ffffffff8158a746>] __pipe_lock fs/pipe.c:87 [inline]
 #0:  (&pipe->mutex/1){+.+.+.}, at: [<ffffffff8158a746>] pipe_write+0xb6/0xd60 fs/pipe.c:370
1 lock held by init/3857:
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff8200112c>] tty_open_by_driver drivers/tty/tty_io.c:2038 [inline]
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff8200112c>] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2116
1 lock held by init/3858:
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff8200112c>] tty_open_by_driver drivers/tty/tty_io.c:2038 [inline]
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff8200112c>] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2116
1 lock held by init/3859:
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff8200112c>] tty_open_by_driver drivers/tty/tty_io.c:2038 [inline]
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff8200112c>] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2116
1 lock held by init/3860:
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff8200112c>] tty_open_by_driver drivers/tty/tty_io.c:2038 [inline]
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff8200112c>] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2116
1 lock held by init/3861:
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff8200112c>] tty_open_by_driver drivers/tty/tty_io.c:2038 [inline]
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff8200112c>] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2116
1 lock held by init/3862:
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff8200112c>] tty_open_by_driver drivers/tty/tty_io.c:2038 [inline]
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff8200112c>] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2116

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 515 Comm: khungtaskd Not tainted 4.9.94-g8683408 #3
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d86cfd08 ffffffff81d9b509 0000000000000000 0000000000000001
 0000000000000001 0000000000000001 ffffffff810b7d60 ffff8801d86cfd40
 ffffffff81da6837 0000000000000001 0000000000000000 0000000000000002
Call Trace:
 [<ffffffff81d9b509>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d9b509>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81da6837>] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99
 [<ffffffff81da67ca>] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60
 [<ffffffff810b7e64>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
 [<ffffffff81364c54>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<ffffffff81364c54>] check_hung_task kernel/hung_task.c:125 [inline]
 [<ffffffff81364c54>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline]
 [<ffffffff81364c54>] watchdog+0x6b4/0xa20 kernel/hung_task.c:239
 [<ffffffff8119ad2d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff838d14dc>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 3834 Comm: syzkaller881055 Not tainted 4.9.94-g8683408 #3
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801b8713000 task.stack: ffff8801b6780000
RIP: 0010:[<ffffffff820379bb>] 
c [<ffffffff820379bb>] inb arch/x86/include/asm/io.h:316 [inline]
RIP: 0010:[<ffffffff820379bb>] 
c [<ffffffff820379bb>] io_serial_in+0x6b/0x90 drivers/tty/serial/8250/8250_port.c:414
RSP: 0018:ffff8801b6787888  EFLAGS: 00000002
RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000
RDX: 00000000000003fd RSI: ffffffff82037961 RDI: ffffffff8627fc78
RBP: ffff8801b6787898 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8627fc40
R13: 0000000000000020 R14: fffffbfff0c4ffcf R15: fffffbfff0c4ff91
FS:  0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:0000000008e58840
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00007ffc9e34c2f8 CR3: 00000001b8bac000 CR4: 0000000000160670
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffffffff8627fc40
c 000000000000270f
c ffff8801b67878e8
c ffffffff82039584
c
 ffffffff81dc6828
c ffffffff8627fc88
c ffffffff8627fe7a
c ffffffff8627fc40
c
 0000000000000070
c ffffffff820396d0
c dffffc0000000000
c 0000000000000070
c
Call Trace:
 [<ffffffff82039584>] serial_in drivers/tty/serial/8250/8250.h:111 [inline]
 [<ffffffff82039584>] wait_for_xmitr+0x94/0x1e0 drivers/tty/serial/8250/8250_port.c:1997
 [<ffffffff820396ef>] serial8250_console_putchar+0x1f/0x60 drivers/tty/serial/8250/8250_port.c:3103
 [<ffffffff82021f19>] uart_console_write+0x59/0xf0 drivers/tty/serial/serial_core.c:1859
 [<ffffffff820458f8>] serial8250_console_write+0x528/0x820 drivers/tty/serial/8250/8250_port.c:3169
 [<ffffffff8203246f>] univ8250_console_write+0x5f/0x70 drivers/tty/serial/8250/8250_core.c:594
 [<ffffffff81259e4d>] call_console_drivers.isra.18.constprop.28+0x1ad/0x360 kernel/printk/printk.c:1589
 [<ffffffff8125cc4f>] console_unlock+0x42f/0xb40 kernel/printk/printk.c:2449
 [<ffffffff8125d7a8>] vprintk_emit+0x448/0x790 kernel/printk/printk.c:1903
 [<ffffffff8125db18>] vprintk+0x28/0x30 kernel/printk/printk.c:1913
 [<ffffffff8125db3d>] vprintk_default+0x1d/0x30 kernel/printk/printk.c:1914
 [<ffffffff8142a985>] vprintk_func kernel/printk/internal.h:36 [inline]
 [<ffffffff8142a985>] printk+0xaf/0xd7 kernel/printk/printk.c:1975
 [<ffffffff82d9bfe8>] binder_ioctl.cold.82+0x61/0x121 drivers/android/binder.c:4833
 [<ffffffff816840d6>] C_SYSC_ioctl fs/compat_ioctl.c:1602 [inline]
 [<ffffffff816840d6>] compat_SyS_ioctl+0x126/0x1fe0 fs/compat_ioctl.c:1549
 [<ffffffff81006da7>] do_syscall_32_irqs_on arch/x86/entry/common.c:325 [inline]
 [<ffffffff81006da7>] do_fast_syscall_32+0x2f7/0x870 arch/x86/entry/common.c:387
 [<ffffffff838d2a10>] entry_SYSENTER_compat+0x90/0xa2 arch/x86/entry/entry_64_compat.S:137
Code: 
c24 
cc9 
c00 
c00 
c00 
c49 
c8d 
c7c 
c24 
c38 
c48 
cb8 
c00 
c00 
c00 
c00 
c00 
cfc 
cff 
cdf 
c48 
c89 
cfa 
c48 
cc1 
cea 
c03 
cd3 
ce3 
c80 
c3c 
c02 
c00 
c75 
c17 
c41 
c03 
c5c 
c24 
c38 
c89 
cda 
cec 
c<5b> 
c0f 
cb6 
cc0 
c41 
c5c 
c5d 
cc3 
ce8 
c18 
c19 
c50 
cff 
ceb 
cc2 
ce8 
c71 
c19 
c50 
cff 
ceb 
c