INFO: task syz-executor2:5892 blocked for more than 120 seconds. Not tainted 4.9.72-gcb7518e #114 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor2 D28960 5892 3584 0x00000004 ffff8801c906b000 ffff8801cfc86a00 ffff8801cfc86f40 ffff8801ca141800 ffff8801db221458 ffff8801c21f7740 ffffffff8389e5fb ffff8801c21f7718 ffffffff8123940f 00ffffff838a9f6a ffff8801db221d28 ffff8801db221d50 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3550 [] rwsem_down_read_failed+0x1e0/0x320 kernel/locking/rwsem-xadd.c:260 [] call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94 [] __down_read arch/x86/include/asm/rwsem.h:65 [inline] [] down_read+0x52/0xb0 kernel/locking/rwsem.c:24 [] set_termios+0xf5/0x670 drivers/tty/tty_ioctl.c:592 [] tty_mode_ioctl+0x931/0x9c0 drivers/tty/tty_ioctl.c:970 [] n_tty_ioctl_helper+0x40/0x360 drivers/tty/tty_ioctl.c:1161 [] n_tty_ioctl+0x148/0x2d0 drivers/tty/n_tty.c:2437 [] tty_ioctl+0x733/0x2170 drivers/tty/tty_io.c:2992 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x1aa/0x1140 fs/ioctl.c:679 [] SYSC_ioctl fs/ioctl.c:694 [inline] [] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:685 [] entry_SYSCALL_64_fastpath+0x23/0xc6 Showing all locks held in the system: 2 locks held by khungtaskd/514: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x125/0xa70 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x70/0x280 kernel/locking/lockdep.c:4336 2 locks held by getty/3307: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x1f4/0x16c0 drivers/tty/n_tty.c:2133 2 locks held by syz-executor2/5892: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&o_tty->termios_rwsem/1){++++..}, at: [] set_termios+0xf5/0x670 drivers/tty/tty_ioctl.c:592 3 locks held by syz-executor2/5897: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x1f4/0x16c0 drivers/tty/n_tty.c:2133 #2: (&o_tty->termios_rwsem/1){++++..}, at: [] n_tty_read+0x217/0x16c0 drivers/tty/n_tty.c:2137 2 locks held by syz-executor2/5906: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&o_tty->termios_rwsem/1){++++..}, at: [] set_termios+0xf5/0x670 drivers/tty/tty_ioctl.c:592 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 514 Comm: khungtaskd Not tainted 4.9.72-gcb7518e #114 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d8a6fd00 ffffffff81d922b9 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffff810ba190 ffff8801d8a6fd38 ffffffff81d9d3dd 0000000000000000 0000000000000000 ffff8801c90fb418 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace+0xfd/0x120 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x117/0x190 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6f0/0xa70 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x2a/0x40 arch/x86/entry/entry_64.S:433 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 5879 Comm: syz-executor2 Not tainted 4.9.72-gcb7518e #114 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801cd4f9800 task.stack: ffff8801c9b20000 RIP: 0010:[] c [] __read_once_size include/linux/compiler.h:243 [inline] RIP: 0010:[] c [] __sanitizer_cov_trace_pc+0x3b/0x50 kernel/kcov.c:105 RSP: 0018:ffff8801c9b27b28 EFLAGS: 00000246 RAX: 0000000000010000 RBX: ffffc90005141060 RCX: ffffffff82004466 RDX: 000000000000ffff RSI: ffffc900035b9000 RDI: ffffc90005142260 RBP: ffff8801c9b27b28 R08: 1ffff10039a9f41a R09: 0000000000000000 R10: 0000000000000003 R11: ffff8801cd4f9800 R12: ffffc90005140000 R13: 000000072e68c9aa R14: 000000002041b000 R15: ffff8801c23aceb8 FS: 00007f5960b85700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000018ea3e0 CR3: 00000001cf9ab000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8801c9b27b78c ffffffff82004466c ffffffffffffffffc 00000000000009aac 0000000000000000c ffff8801c23acc80c 1ffff10039364f75c 000000000000541bc ffffffffffffffe7c ffff8801ca18e600c ffff8801c9b27d70c ffffffff81ffd153c Call Trace: [] inq_canon drivers/tty/n_tty.c:2414 [inline] [] n_tty_ioctl+0x266/0x2d0 drivers/tty/n_tty.c:2431 [] tty_ioctl+0x733/0x2170 drivers/tty/tty_io.c:2992 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x1aa/0x1140 fs/ioctl.c:679 [] SYSC_ioctl fs/ioctl.c:694 [inline] [] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:685 [] entry_SYSCALL_64_fastpath+0x23/0xc6 Code: c9c cc0 cca c7e c81 ce2 c00 c01 c1f c00 c48 c8b c4d c08 c75 c2b c8b c90 c68 c12 c00 c00 c83 cfa c02 c75 c20 c48 c8b cb0 c70 c12 c00 c00 c8b c80 c6c c12 c00 c00 c48 c8b c16 c<48> c83 cc2 c01 c48 c39 cd0 c76 c07 c48 c89 c0c cd6 c48 c89 c16 c5d cc3 c0f c1f c00 c