INFO: task syz-executor.2:18814 can't die for more than 143 seconds. syz-executor.2 D28392 18814 8665 0x00004006 Call Trace: context_switch kernel/sched/core.c:3265 [inline] __schedule+0x76e/0x17d0 kernel/sched/core.c:3937 schedule+0xa8/0x270 kernel/sched/core.c:4001 perf_event_free_task+0x50d/0x6d0 kernel/events/core.c:11610 copy_process+0x460d/0x6b10 kernel/fork.c:2309 _do_fork+0x146/0xfa0 kernel/fork.c:2395 __do_sys_clone kernel/fork.c:2550 [inline] __se_sys_clone kernel/fork.c:2531 [inline] __x64_sys_clone+0x1ab/0x270 kernel/fork.c:2531 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459829 Code: Bad RIP value. RSP: 002b:00007f508dfc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459829 RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000008001100 RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f508dfc56d4 R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 00000000ffffffff INFO: task syz-executor.2:18814 blocked for more than 143 seconds. Not tainted 5.3.0-rc5-next-20190819 #68 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D28392 18814 8665 0x00004006 Call Trace: context_switch kernel/sched/core.c:3265 [inline] __schedule+0x76e/0x17d0 kernel/sched/core.c:3937 schedule+0xa8/0x270 kernel/sched/core.c:4001 perf_event_free_task+0x50d/0x6d0 kernel/events/core.c:11610 copy_process+0x460d/0x6b10 kernel/fork.c:2309 _do_fork+0x146/0xfa0 kernel/fork.c:2395 __do_sys_clone kernel/fork.c:2550 [inline] __se_sys_clone kernel/fork.c:2531 [inline] __x64_sys_clone+0x1ab/0x270 kernel/fork.c:2531 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459829 Code: Bad RIP value. RSP: 002b:00007f508dfc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459829 RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000008001100 RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f508dfc56d4 R13: 00000000004bfce6 R14: 00000000004d1a58 R15: 00000000ffffffff Showing all locks held in the system: 1 lock held by khungtaskd/1062: #0: ffffffff88fa9ac0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:5337 2 locks held by getty/8619: #0: ffff88808cf50e10 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f1d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8620: #0: ffff88808cf50590 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f212e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8621: #0: ffff8880a756a6d0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f392e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8622: #0: ffff88808e2e4ed0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f352e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8623: #0: ffff8880913d0d10 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f152e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8624: #0: ffff8880a756af50 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8625: #0: ffff88809c022210 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f012e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by kworker/u4:9/10853: #0: ffff8880ae934918 (&rq->lock){-.-.}, at: newidle_balance+0xa30/0xe90 kernel/sched/fair.c:9845 #1: ffffffff88fa9ac0 (rcu_read_lock){....}, at: perf_iterate_sb+0x0/0xa10 kernel/events/core.c:7031 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1062 Comm: khungtaskd Not tainted 5.3.0-rc5-next-20190819 #68 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x172/0x1f0 lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:269 [inline] watchdog+0xc99/0x1360 kernel/hung_task.c:353 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 8527 Comm: rs:main Q:Reg Not tainted 5.3.0-rc5-next-20190819 #68 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:match_held_lock+0x1a/0x510 kernel/locking/lockdep.c:4014 Code: 55 00 8b 45 84 e9 67 ff ff ff 66 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 89 fb <48> 83 c7 10 48 89 fa 48 83 ec 08 48 c1 ea 03 80 3c 02 00 0f 85 f5 RSP: 0018:ffff8880909bee30 EFLAGS: 00000092 RAX: dffffc0000000000 RBX: ffff888091206978 RCX: ffff8880909bef10 RDX: 0000000000000005 RSI: ffff8880a30f0838 RDI: ffff888091206978 RBP: ffff8880909bee58 R08: 0000000000000005 R09: ffff8880912068d0 R10: fffffbfff138d458 R11: ffffffff89c6a2c7 R12: ffff888091206978 R13: ffffffff83366f7e R14: ffff8880a30f0838 R15: 0000000000000004 FS: 00007fcb58410700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000001f60000 CR3: 0000000098d56000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: find_held_lock+0x35/0x130 kernel/locking/lockdep.c:4058 __lock_release kernel/locking/lockdep.c:4242 [inline] lock_release+0x254/0x960 kernel/locking/lockdep.c:4506 __raw_spin_unlock include/linux/spinlock_api_smp.h:150 [inline] _raw_spin_unlock+0x1b/0x50 kernel/locking/spinlock.c:183 spin_unlock include/linux/spinlock.h:378 [inline] dd_dispatch_request+0x25e/0xac0 block/mq-deadline.c:398 blk_mq_do_dispatch_sched+0x2a4/0x430 block/blk-mq-sched.c:103 blk_mq_sched_dispatch_requests+0x3f4/0x6d0 block/blk-mq-sched.c:211 __blk_mq_run_hw_queue+0x1cc/0x2e0 block/blk-mq.c:1386 __blk_mq_delay_run_hw_queue+0x53e/0x600 block/blk-mq.c:1454 blk_mq_run_hw_queue+0x19d/0x350 block/blk-mq.c:1491 blk_mq_sched_insert_requests+0x308/0x680 block/blk-mq-sched.c:444 blk_mq_flush_plug_list+0x87a/0xd90 block/blk-mq.c:1755 blk_flush_plug_list+0x349/0x520 block/blk-core.c:1755 blk_finish_plug block/blk-core.c:1772 [inline] blk_finish_plug+0x58/0xa2 block/blk-core.c:1768 ext4_writepages+0xcc4/0x2e80 fs/ext4/inode.c:2973 do_writepages+0xfa/0x2a0 mm/page-writeback.c:2342 __filemap_fdatawrite_range+0x2bc/0x3b0 mm/filemap.c:420 file_write_and_wait_range+0x175/0x210 mm/filemap.c:781 __generic_file_fsync+0x79/0x200 fs/libfs.c:996 ext4_sync_file+0x89a/0x15c0 fs/ext4/fsync.c:120 vfs_fsync_range+0x141/0x230 fs/sync.c:197 generic_write_sync include/linux/fs.h:2845 [inline] ext4_file_write_iter+0x406/0x13c0 fs/ext4/file.c:279 call_write_iter include/linux/fs.h:1890 [inline] new_sync_write+0x4d3/0x770 fs/read_write.c:483 __vfs_write+0xe1/0x110 fs/read_write.c:496 vfs_write+0x268/0x5d0 fs/read_write.c:558 ksys_write+0x14f/0x290 fs/read_write.c:611 __do_sys_write fs/read_write.c:623 [inline] __se_sys_write fs/read_write.c:620 [inline] __x64_sys_write+0x73/0xb0 fs/read_write.c:620 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fcb59e6e19d Code: d1 20 00 00 75 10 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 be fa ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 07 fb ff ff 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007fcb5840f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000123 RCX: 00007fcb59e6e19d RDX: 0000000000000123 RSI: 0000000001f55340 RDI: 0000000000000001 RBP: 0000000001f55340 R08: 0000000001f55408 R09: 00007fcb597eb495 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007fcb5840f480 R14: 000000000000000e R15: 0000000001f55140