binder: undelivered TRANSACTION_ERROR: 29189 INFO: task syz-executor7:15907 blocked for more than 140 seconds. Not tainted 4.19.0-rc1+ #212 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor7 D23992 15907 4492 0x00000004 Call Trace: context_switch kernel/sched/core.c:2825 [inline] __schedule+0x87c/0x1df0 kernel/sched/core.c:3473 schedule+0xfb/0x450 kernel/sched/core.c:3517 __rwsem_down_read_failed_common kernel/locking/rwsem-xadd.c:269 [inline] rwsem_down_read_failed+0x362/0x610 kernel/locking/rwsem-xadd.c:286 call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94 __down_read arch/x86/include/asm/rwsem.h:83 [inline] down_read+0xc3/0x1d0 kernel/locking/rwsem.c:26 __do_page_fault+0xae1/0xe50 arch/x86/mm/fault.c:1331 do_page_fault+0xf6/0x7a4 arch/x86/mm/fault.c:1470 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1161 RIP: 0033:0x40052d Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 RSP: 002b:00007fff45e30990 EFLAGS: 00010246 RAX: 000000002001d000 RBX: fffffffffffffffe RCX: 0000000000000000 RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000001c5f848 RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 R10: 00007fff45e30aa0 R11: 0000000000000246 R12: 00000000000003e8 R13: 000000000093028c R14: 0000000000062540 R15: 0000000000062513 INFO: task syz-executor7:15969 blocked for more than 140 seconds. Not tainted 4.19.0-rc1+ #212 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor7 D19816 15969 4492 0x80000004 Call Trace: context_switch kernel/sched/core.c:2825 [inline] __schedule+0x87c/0x1df0 kernel/sched/core.c:3473 schedule+0xfb/0x450 kernel/sched/core.c:3517 __rwsem_down_read_failed_common kernel/locking/rwsem-xadd.c:269 [inline] rwsem_down_read_failed+0x362/0x610 kernel/locking/rwsem-xadd.c:286 call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94 __down_read arch/x86/include/asm/rwsem.h:83 [inline] down_read+0xc3/0x1d0 kernel/locking/rwsem.c:26 exit_mm kernel/exit.c:511 [inline] do_exit+0x593/0x26e0 kernel/exit.c:854 do_group_exit+0x177/0x440 kernel/exit.c:970 get_signal+0x851/0x18e0 kernel/signal.c:2513 do_signal+0x9c/0x21c0 arch/x86/kernel/signal.c:816 exit_to_usermode_loop+0x2e5/0x380 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x6be/0x820 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457089 Code: 08 e8 3b a9 fb ff 48 8b 44 24 20 48 8b 4c 24 18 48 8b 54 24 38 48 8b 7c 24 48 eb 8d 48 8b 6c 24 50 48 83 c4 58 c3 48 89 04 24 <48> 89 5c 24 08 e8 0d a9 fb ff 48 8b 44 24 40 48 8b 4c 24 48 48 8b RSP: 002b:00007f5399c29cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00000000009301e8 RCX: 0000000000457089 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000009301e8 RBP: 00000000009301e0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000009301ec R13: 00007fff45e3094f R14: 00007f5399c2a9c0 R15: 0000000000000002 INFO: task syz-executor7:15975 blocked for more than 140 seconds. Not tainted 4.19.0-rc1+ #212 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor7 D23608 15975 4492 0x80000004 Call Trace: context_switch kernel/sched/core.c:2825 [inline] __schedule+0x87c/0x1df0 kernel/sched/core.c:3473 schedule+0xfb/0x450 kernel/sched/core.c:3517 __rwsem_down_read_failed_common kernel/locking/rwsem-xadd.c:269 [inline] rwsem_down_read_failed+0x362/0x610 kernel/locking/rwsem-xadd.c:286 call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94 __down_read arch/x86/include/asm/rwsem.h:83 [inline] down_read+0xc3/0x1d0 kernel/locking/rwsem.c:26 exit_mm kernel/exit.c:511 [inline] do_exit+0x593/0x26e0 kernel/exit.c:854 do_group_exit+0x177/0x440 kernel/exit.c:970 get_signal+0x851/0x18e0 kernel/signal.c:2513 do_signal+0x9c/0x21c0 arch/x86/kernel/signal.c:816 exit_to_usermode_loop+0x2e5/0x380 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x6be/0x820 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457089 Code: 08 e8 3b a9 fb ff 48 8b 44 24 20 48 8b 4c 24 18 48 8b 54 24 38 48 8b 7c 24 48 eb 8d 48 8b 6c 24 50 48 83 c4 58 c3 48 89 04 24 <48> 89 5c 24 08 e8 0d a9 fb ff 48 8b 44 24 40 48 8b 4c 24 48 48 8b RSP: 002b:00007f5399c08cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 0000000000930288 RCX: 0000000000457089 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000930288 RBP: 0000000000930280 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000093028c R13: 00007fff45e3094f R14: 00007f5399c099c0 R15: 0000000000000003 Showing all locks held in the system: 1 lock held by khungtaskd/775: #0: 000000005085199a (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x428 kernel/locking/lockdep.c:4436 1 lock held by rsyslogd/4351: #0: 00000000c3b0c241 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 fs/file.c:766 2 locks held by getty/4441: #0: 000000003afd8eca (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:353 #1: 000000002b1780a9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4442: #0: 00000000d2a67ff1 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:353 #1: 000000006d43f6c2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4443: #0: 00000000aa749d4c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:353 #1: 00000000b97d1a99 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4444: #0: 00000000d4a7863d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:353 #1: 0000000067f4469e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4445: #0: 00000000feb1d169 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:353 #1: 000000006685d50b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4446: #0: 000000000200e474 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:353 #1: 00000000fd5edb6d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4447: #0: 00000000c0aaed1c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:353 #1: 00000000c0093800 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 1 lock held by syz-executor7/15907: #0: 000000000755167b (&mm->mmap_sem){++++}, at: __do_page_fault+0xae1/0xe50 arch/x86/mm/fault.c:1331 1 lock held by syz-executor7/15912: 1 lock held by syz-executor7/15969: #0: 000000000755167b (&mm->mmap_sem){++++}, at: exit_mm kernel/exit.c:511 [inline] #0: 000000000755167b (&mm->mmap_sem){++++}, at: do_exit+0x593/0x26e0 kernel/exit.c:854 1 lock held by syz-executor7/15975: #0: 000000000755167b (&mm->mmap_sem){++++}, at: exit_mm kernel/exit.c:511 [inline] #0: 000000000755167b (&mm->mmap_sem){++++}, at: do_exit+0x593/0x26e0 kernel/exit.c:854 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 775 Comm: khungtaskd Not tainted 4.19.0-rc1+ #212 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113 nmi_cpu_backtrace.cold.3+0x48/0x88 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x151/0x192 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:144 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline] watchdog+0xb39/0x1040 kernel/hung_task.c:265 kthread+0x35a/0x420 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x6/0x10 arch/x86/include/asm/irqflags.h:56