INFO: task syz-executor666:10344 can't die for more than 143 seconds. syz-executor666 D27656 10344 10343 0x00004004 Call Trace: context_switch kernel/sched/core.c:3254 [inline] __schedule+0x755/0x15b0 kernel/sched/core.c:3921 schedule+0xa8/0x270 kernel/sched/core.c:3985 rwsem_down_read_slowpath+0x4cc/0xfb0 kernel/locking/rwsem.c:1090 __down_read kernel/locking/rwsem.c:1320 [inline] down_read+0x1f4/0x3f0 kernel/locking/rwsem.c:1463 do_user_addr_fault arch/x86/mm/fault.c:1392 [inline] __do_page_fault+0xaa2/0xdd0 arch/x86/mm/fault.c:1506 do_page_fault+0x38/0x590 arch/x86/mm/fault.c:1530 page_fault+0x39/0x40 arch/x86/entry/entry_64.S:1200 RIP: 0033:0x4ab79d Code: Bad RIP value. RSP: 002b:00007ffe83f4fa90 EFLAGS: 00010206 RAX: 00000000004ab8c0 RBX: 0000000000000001 RCX: 00000000006e0330 RDX: 0000000000407620 RSI: 0000000000000000 RDI: 00000000004ccb90 RBP: 00007ffe83f4fab0 R08: 000000037ffffa00 R09: 000000037ffffa00 R10: 00007ffe83f4fb20 R11: 0000000000000000 R12: 0000000000000001 R13: 00000000006e0320 R14: 000000000000002d R15: 20c49ba5e353f7cf INFO: task syz-executor666:10344 blocked for more than 143 seconds. Not tainted 5.3.0-rc1-next-20190726 #53 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor666 D27656 10344 10343 0x00004004 Call Trace: context_switch kernel/sched/core.c:3254 [inline] __schedule+0x755/0x15b0 kernel/sched/core.c:3921 schedule+0xa8/0x270 kernel/sched/core.c:3985 rwsem_down_read_slowpath+0x4cc/0xfb0 kernel/locking/rwsem.c:1090 __down_read kernel/locking/rwsem.c:1320 [inline] down_read+0x1f4/0x3f0 kernel/locking/rwsem.c:1463 do_user_addr_fault arch/x86/mm/fault.c:1392 [inline] __do_page_fault+0xaa2/0xdd0 arch/x86/mm/fault.c:1506 do_page_fault+0x38/0x590 arch/x86/mm/fault.c:1530 page_fault+0x39/0x40 arch/x86/entry/entry_64.S:1200 RIP: 0033:0x4ab79d Code: Bad RIP value. RSP: 002b:00007ffe83f4fa90 EFLAGS: 00010206 RAX: 00000000004ab8c0 RBX: 0000000000000001 RCX: 00000000006e0330 RDX: 0000000000407620 RSI: 0000000000000000 RDI: 00000000004ccb90 RBP: 00007ffe83f4fab0 R08: 000000037ffffa00 R09: 000000037ffffa00 R10: 00007ffe83f4fb20 R11: 0000000000000000 R12: 0000000000000001 R13: 00000000006e0320 R14: 000000000000002d R15: 20c49ba5e353f7cf INFO: task syz-executor666:10345 blocked for more than 143 seconds. Not tainted 5.3.0-rc1-next-20190726 #53 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor666 D28456 10345 10343 0x80004004 Call Trace: context_switch kernel/sched/core.c:3254 [inline] __schedule+0x755/0x15b0 kernel/sched/core.c:3921 schedule+0xa8/0x270 kernel/sched/core.c:3985 rwsem_down_read_slowpath+0x4cc/0xfb0 kernel/locking/rwsem.c:1090 __down_read kernel/locking/rwsem.c:1320 [inline] down_read+0x1f4/0x3f0 kernel/locking/rwsem.c:1463 exit_mm kernel/exit.c:513 [inline] do_exit+0x47b/0x2eb0 kernel/exit.c:865 do_group_exit+0x135/0x360 kernel/exit.c:982 get_signal+0x47c/0x2500 kernel/signal.c:2728 do_signal+0x87/0x1700 arch/x86/kernel/signal.c:815 exit_to_usermode_loop+0x286/0x380 arch/x86/entry/common.c:159 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:274 [inline] do_syscall_64+0x65f/0x760 arch/x86/entry/common.c:300 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4468f9 Code: 67 66 69 6c 65 3d 64 65 62 75 67 2e 63 22 0a 00 00 45 52 52 4f 52 3a 20 6f 75 74 20 6f 66 20 6d 65 6d 6f 72 79 20 64 75 72 69 <6e> 67 20 64 65 62 75 67 20 73 65 74 75 70 0a 00 00 00 00 00 00 00 RSP: 002b:00007fa837579db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00000000006dbc28 RCX: 00000000004468f9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000006dbc28 RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c R13: 00007ffe83f4fa8f R14: 00007fa83757a9c0 R15: 20c49ba5e353f7cf INFO: task syz-executor666:10346 can't die for more than 144 seconds. syz-executor666 R running task 29704 10346 10343 0x00004006 Call Trace: INFO: lockdep is turned off. NMI backtrace for cpu 0 CPU: 0 PID: 1057 Comm: khungtaskd Not tainted 5.3.0-rc1-next-20190726 #53 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x172/0x1f0 lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:269 [inline] watchdog+0xc99/0x1360 kernel/hung_task.c:353 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 10346 Comm: syz-executor666 Not tainted 5.3.0-rc1-next-20190726 #53 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:atomic64_read include/asm-generic/atomic-instrumented.h:836 [inline] RIP: 0010:atomic_long_read include/asm-generic/atomic-long.h:28 [inline] RIP: 0010:__mutex_unlock_slowpath+0x93/0x6b0 kernel/locking/mutex.c:1211 Code: f3 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 48 8d 45 98 48 c7 45 98 01 00 00 00 48 89 45 a0 e8 52 3d 1a fa be 08 00 00 00 <4c> 89 ff e8 35 51 6e fa 4c 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 35 RSP: 0018:ffff8880a856f9d8 EFLAGS: 00000296 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 1ffffffff134be76 RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 0000000000000286 RBP: ffff8880a856fa88 R08: 1ffffffff134b838 R09: fffffbfff134b839 R10: fffffbfff134b838 R11: ffffffff89a5c1c7 R12: ffff888089c52a80 R13: ffff8880a856fb70 R14: 0000000000000000 R15: ffff8880a8b0d730 FS: 00007fa837559700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 00000000913ce000 CR4: 00000000001406e0 Call Trace: mutex_unlock+0xd/0x10 kernel/locking/mutex.c:714 perf_mmap+0x734/0x1920 kernel/events/core.c:5711 call_mmap include/linux/fs.h:1875 [inline] mmap_region+0xc35/0x1760 mm/mmap.c:1792 do_mmap+0x82e/0x1150 mm/mmap.c:1565 do_mmap_pgoff include/linux/mm.h:2393 [inline] vm_mmap_pgoff+0x1c5/0x230 mm/util.c:391 ksys_mmap_pgoff+0x4aa/0x630 mm/mmap.c:1615 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:100 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:91 [inline] __x64_sys_mmap+0xe9/0x1b0 arch/x86/kernel/sys_x86_64.c:91 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4468f9 Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fa837558da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00000000006dbc38 RCX: 00000000004468f9 RDX: 0000000003000001 RSI: 0000000000003000 RDI: 0000000020ffd000 RBP: 00000000006dbc30 R08: 0000000000000003 R09: 0000000000000000 R10: 0000000000001011 R11: 0000000000000246 R12: 00000000006dbc3c R13: 00007ffe83f4fa8f R14: 00007fa8375599c0 R15: 20c49ba5e353f7cf