[18106] 0 18106 17618 12677 33 3 0 0 syz-executor2 [18138] 0 18138 17618 12677 33 3 0 0 syz-executor2 [18191] 0 18191 17618 12677 33 3 0 0 syz-executor2 [18223] 0 18223 17585 8201 26 3 0 0 syz-executor2 [18271] 0 18271 17618 12710 30 3 0 0 syz-executor0 INFO: task syz-executor4:32463 blocked for more than 140 seconds. Not tainted 4.14.90+ #29 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [18284] 0 18284 17618 12677 33 3 0 0 syz-executor2 [18288] 0 18288 17684 12804 30 3 0 0 syz-executor0 syz-executor4 D30248 32463 1846 0x00000004 Call Trace: [18355] 0 18355 17618 12677 33 3 0 0 syz-executor2 [18367] 0 18367 17585 8232 24 4 0 0 syz-executor3 schedule+0x7f/0x1b0 kernel/sched/core.c:3490 __lock_sock+0x11d/0x210 net/core/sock.c:2237 [18426] 0 18426 17618 12677 33 3 0 0 syz-executor2 lock_sock_nested+0xe3/0x100 net/core/sock.c:2758 [18589] 0 18589 17618 12677 33 3 0 0 syz-executor2 lock_sock include/net/sock.h:1452 [inline] packet_setsockopt+0x7be/0x2680 net/packet/af_packet.c:3742 [18644] 0 18644 17618 12677 33 3 0 0 syz-executor2 [18683] 0 18683 17618 12677 33 3 0 0 syz-executor2 [18789] 0 18789 17618 12677 33 3 0 0 syz-executor2 SYSC_setsockopt net/socket.c:1864 [inline] SyS_setsockopt+0x132/0x220 net/socket.c:1843 [18831] 0 18831 17585 8235 23 3 0 0 syz-executor0 do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289 [18835] 0 18835 17684 8241 23 3 0 0 [18845] 0 18845 17618 12677 33 3 0 0 syz-executor2 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x457669 RSP: 002b:00007f6bb384ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [18864] 0 18864 17651 8240 25 4 0 0 syz-executor3 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457669 [18900] 0 18900 17618 12677 33 3 0 0 syz-executor2 RDX: 000000000000000c RSI: 0000000000000107 RDI: 0000000000000003 RBP: 000000000072bfa0 R08: 0000000000000004 R09: 0000000000000000 [18955] 0 18955 17618 12677 33 3 0 0 syz-executor2 R10: 0000000020000180 R11: 0000000000000246 R12: 00007f6bb384f6d4 [18964] 0 18964 17651 8238 25 4 0 0 syz-executor0 R13: 00000000004c4ea4 R14: 00000000004d8f58 R15: 00000000ffffffff [18973] 0 18973 17618 12677 33 3 0 0 syz-executor2 INFO: task syz-executor4:32467 blocked for more than 140 seconds. [19011] 0 19011 17618 8237 25 4 0 0 syz-executor0 Not tainted 4.14.90+ #29 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [19067] 0 19067 17618 12677 33 3 0 0 syz-executor2 syz-executor4 D30248 32467 1846 0x00000004 Call Trace: [19075] 0 19075 17618 8234 25 4 0 1000 syz-executor4 [19090] 0 19090 17651 8236 25 4 0 1000 syz-executor4 [19098] 0 19098 17651 8236 25 4 0 1000 syz-executor4 schedule+0x7f/0x1b0 kernel/sched/core.c:3490 __lock_sock+0x11d/0x210 net/core/sock.c:2237 [19130] 0 19130 17618 12677 33 3 0 0 syz-executor2 lock_sock_nested+0xe3/0x100 net/core/sock.c:2758 lock_sock include/net/sock.h:1452 [inline] packet_setsockopt+0x7be/0x2680 net/packet/af_packet.c:3742 [19167] 0 19167 17618 8238 25 3 0 0 syz-executor3 [19205] 0 19205 17618 12677 33 3 0 0 syz-executor2 [19224] 0 19224 17717 12838 31 3 0 0 syz-executor3 [19269] 0 19269 17618 12677 33 3 0 0 syz-executor2 SYSC_setsockopt net/socket.c:1864 [inline] SyS_setsockopt+0x132/0x220 net/socket.c:1843 [19319] 0 19319 17618 12677 33 3 0 0 syz-executor2 do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289 [19354] 0 19354 17618 12326 32 4 0 1000 syz-executor4 entry_SYSCALL_64_after_hwframe+0x42/0xb7 [19357] 0 19357 17651 8239 25 4 0 0 syz-executor3 RIP: 0033:0x457669 RSP: 002b:00007f6bb380cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457669 [19374] 0 19374 17618 12677 33 3 0 0 syz-executor2 [19385] 0 19385 17618 12326 32 4 0 1000 syz-executor4 RDX: 000000000000000c RSI: 0000000000000107 RDI: 0000000000000004 [19453] 0 19453 17618 12707 33 3 0 0 syz-executor2 RBP: 000000000072c0e0 R08: 0000000000000004 R09: 0000000000000000 R10: 0000000020000180 R11: 0000000000000246 R12: 00007f6bb380d6d4 [19477] 0 19477 17585 8233 23 3 0 0 syz-executor0 R13: 00000000004c4ea4 R14: 00000000004d8f58 R15: 00000000ffffffff Showing all locks held in the system: [19507] 0 19507 17618 12677 33 3 0 0 syz-executor2 [19527] 0 19527 17651 8239 24 3 0 0 syz-executor0 2 locks held by init/1: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x26d/0xb60 arch/x86/mm/fault.c:1354 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x75/0xb0 fs/ext4/inode.c:6178 1 lock held by khungtaskd/23: #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x74/0x20f kernel/locking/lockdep.c:4541 2 locks held by rs:main Q:Reg/1625: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x26d/0xb60 arch/x86/mm/fault.c:1354 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x75/0xb0 fs/ext4/inode.c:6178 2 locks held by cron/1672: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x26d/0xb60 arch/x86/mm/fault.c:1354 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x75/0xb0 fs/ext4/inode.c:6178 2 locks held by getty/1755: #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1ff/0x1700 drivers/tty/n_tty.c:2156 2 locks held by syz-fuzzer/1780: #0: (&mm->mmap_sem){++++}, at: [] __do_page_fault+0x26d/0xb60 arch/x86/mm/fault.c:1354 #1: (&ei->i_mmap_sem){++++}, at: [] ext4_filemap_fault+0x75/0xb0 fs/ext4/inode.c:6178 ============================================= [19571] 0 19571 17618 12677 33 3 0 0 syz-executor2 [19580] 0 19580 17684 8239 25 4 0 1000 syz-executor4 [19635] 0 19635 17618 12677 33 3 0 0 syz-executor2 [19694] 0 19694 17618 12677 33 3 0 0 syz-executor2 [19780] 0 19780 17585 8232 24 3 0 1000 syz-executor4 [19782] 0 19782 17585 8234 24 3 0 1000 syz-executor4 [19787] 0 19787 17651 8238 24 3 0 1000 syz-executor4 [19789] 0 19789 17618 12677 33 3 0 0 syz-executor2 [19869] 0 19869 17618 12677 33 3 0 0 syz-executor2 [19910] 0 19910 17585 8233 24 4 0 0 syz-executor0 [19932] 0 19932 17618 12677 33 3 0 0 syz-executor2 [19982] 0 19982 17618 12677 33 3 0 0 syz-executor2 [20038] 0 20038 17618 12677 33 3 0 0 syz-executor2 [20122] 0 20122 17618 12677 33 3 0 0 syz-executor2 [20167] 0 20167 17585 8224 22 3 0 0 syz-executor0 NMI backtrace for cpu 1 CPU: 1 PID: 23 Comm: khungtaskd Not tainted 4.14.90+ #29 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xb9/0x11b lib/dump_stack.c:53 nmi_cpu_backtrace.cold.0+0x47/0x85 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x121/0x146 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:196 [inline] watchdog+0x574/0xa70 kernel/hung_task.c:252 kthread+0x348/0x420 kernel/kthread.c:232 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 32408 Comm: getty Not tainted 4.14.90+ #29 task: ffff8881da0a5e00 task.stack: ffff8881a0fd0000 RIP: 0010:mark_lock+0xa6/0xf80 kernel/locking/lockdep.c:3164 RSP: 0000:ffff8881a0fd6fa0 EFLAGS: 00000046 RAX: dffffc0000000000 RBX: ffff8881da0a6680 RCX: 1ffff1103b414cd4 RDX: 1ffffffff7966a56 RSI: ffff8881da0a6680 RDI: ffffffffbcb352b0 RBP: ffffffffbcb35280 R08: 0000000000000001 R09: 0000000000000008 R10: ffff8881da0a6680 R11: 1ffff1103b414ccf R12: 0000000000000100 R13: 0000000000000008 R14: ffff8881da0a5e00 R15: ffff8881da0a66a0 FS: 00007f49cdd27700(0000) GS:ffff8881dba00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9ee94a3290 CR3: 000000017eea6004 CR4: 00000000001606b0 DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: __lock_acquire+0x619/0x4320 kernel/locking/lockdep.c:3448 lock_acquire+0x10f/0x380 kernel/locking/lockdep.c:3991 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:128 [inline] _raw_spin_lock_irq+0x36/0x40 kernel/locking/spinlock.c:168 spin_lock_irq include/linux/spinlock.h:342 [inline] shrink_inactive_list+0x3c6/0xee0 mm/vmscan.c:1819 shrink_list mm/vmscan.c:2175 [inline] shrink_node_memcg+0x5e8/0x12e0 mm/vmscan.c:2438 shrink_node+0x301/0xbf0 mm/vmscan.c:2630 shrink_zones mm/vmscan.c:2812 [inline] do_try_to_free_pages+0x349/0xde0 mm/vmscan.c:2874 try_to_free_pages+0x204/0x6b0 mm/vmscan.c:3080 __perform_reclaim mm/page_alloc.c:3593 [inline] __alloc_pages_direct_reclaim mm/page_alloc.c:3614 [inline] __alloc_pages_slowpath mm/page_alloc.c:4001 [inline] __alloc_pages_nodemask+0xa8a/0x2180 mm/page_alloc.c:4210 __alloc_pages include/linux/gfp.h:461 [inline] __alloc_pages_node include/linux/gfp.h:474 [inline] alloc_pages_node include/linux/gfp.h:488 [inline] __page_cache_alloc include/linux/pagemap.h:226 [inline] page_cache_read mm/filemap.c:2286 [inline] filemap_fault+0xcdd/0x14a0 mm/filemap.c:2470 ext4_filemap_fault+0x7d/0xb0 fs/ext4/inode.c:6179 __do_fault+0x80/0x210 mm/memory.c:3194 do_read_fault mm/memory.c:3604 [inline] do_fault mm/memory.c:3730 [inline] handle_pte_fault mm/memory.c:3960 [inline] __handle_mm_fault+0x991/0x25f0 mm/memory.c:4084 handle_mm_fault+0x2f2/0x6eb mm/memory.c:4121 __do_page_fault+0x45d/0xb60 arch/x86/mm/fault.c:1425 page_fault+0x42/0x50 arch/x86/entry/entry_64.S:1104 RIP: 6dce65d0: (null) RSP: cdd2eee0:0000000000000001 EFLAGS: 00000004 Code: 50 01 00 00 48 81 ed 50 01 00 00 48 81 c5 20 48 b1 bc 48 8d 7d 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 c9 0b 00 00 4c 85 65 30 0f 84 a6 00 00 00 41 bc 01 00 00 [20168] 0 20168 17618 12677 33 3 0 0 syz-executor2