INFO: task syz-executor.0:324 blocked for more than 140 seconds. Not tainted 4.9.169+ #43 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.0 D29640 324 2110 0x00000004 ffff8801c7f52f80 ffff8801b43bcd00 ffff8801db621000 ffff8801c9545f00 ffff8801db621018 ffff880184097c90 ffffffff8280152e ffffffff8280d93c ffff8801c8c93aa8 00ff880184097be0 ffff8801db6218f0 1ffff10030812f81 Call Trace: [<00000000b857819e>] schedule+0x92/0x1c0 kernel/sched/core.c:3546 [<000000009baf1be1>] rwsem_down_read_failed+0x258/0x3e0 kernel/locking/rwsem-xadd.c:267 [<000000007544d86b>] call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94 [<0000000059f49a6f>] __down_read arch/x86/include/asm/rwsem.h:65 [inline] [<0000000059f49a6f>] down_read+0x52/0xb0 kernel/locking/rwsem.c:24 [<00000000864f6c97>] __do_page_fault+0x7bd/0xa60 arch/x86/mm/fault.c:1342 [<000000006d15ae9d>] do_page_fault+0x28/0x30 arch/x86/mm/fault.c:1469 [<00000000d6452bd4>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:951 Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [<0000000051a7daa7>] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [<0000000051a7daa7>] watchdog+0x13c/0xae0 kernel/hung_task.c:239 #1: (tasklist_lock){.+.?..}, at: [<000000009ef07205>] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4339 1 lock held by rsyslogd/1911: #0: (&f->f_pos_lock){+.+.+.}, at: [<0000000091df7074>] __fdget_pos+0xa8/0xd0 fs/file.c:782 2 locks held by getty/2039: #0: (&tty->ldisc_sem){++++++}, at: [<000000005fa72966>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [<000000001c3bf10f>] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 1 lock held by syz-executor.0/324: #0: (&mm->mmap_sem){++++++}, at: [<00000000864f6c97>] __do_page_fault+0x7bd/0xa60 arch/x86/mm/fault.c:1342 1 lock held by syz-executor.0/325: #0: (&mm->mmap_sem){++++++}, at: [<0000000008d79614>] exit_mm kernel/exit.c:480 [inline] #0: (&mm->mmap_sem){++++++}, at: [<0000000008d79614>] do_exit+0x3b7/0x2aa0 kernel/exit.c:828 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.169+ #43 ffff8801d98d7cc8 ffffffff81b4f7f1 0000000000000001 0000000000000000 0000000000000001 ffffffff81097401 dffffc0000000000 ffff8801d98d7d00 ffffffff81b5aa8c 0000000000000001 0000000000000000 0000000000000001 Call Trace: [<000000008abc68b9>] __dump_stack lib/dump_stack.c:15 [inline] [<000000008abc68b9>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<000000009516bc4c>] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [<0000000075222336>] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [<00000000156c5a5f>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [<00000000bfdebe96>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [<00000000bfdebe96>] check_hung_task kernel/hung_task.c:125 [inline] [<00000000bfdebe96>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [<00000000bfdebe96>] watchdog+0x661/0xae0 kernel/hung_task.c:239 [<00000000de70c7d4>] kthread+0x278/0x310 kernel/kthread.c:211 [<00000000253ad6d5>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 29277 Comm: syz-executor.2 Not tainted 4.9.169+ #43 task: 000000000e647e9d task.stack: 00000000110102b5 RIP: 0033:[<0000000000401584>] c [<0000000084ade5dc>] 0x401584 RSP: 002b:00007f0970d45690 EFLAGS: 00000202 RAX: 000000007fe3953d RBX: 000000000000000b RCX: 0000000000458c29 RDX: 0000000000000000 RSI: 00007f0970d456c0 RDI: 000000000000000b RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f0970d46700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c420467e80 CR3: 00000001a9cb1000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600