INFO: task syz-executor7:4191 blocked for more than 120 seconds. Not tainted 4.9.110-g00a0bcb #7 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor7 D27976 4191 3858 0x20020004 ffff8801a3851800 ffff8801c19bcfc0 ffff8801d44e64c0 ffff8801cc306000 ffff8801db321c18 ffff8801c2f67310 ffffffff839e6ded 1ffff100385ece56 ffffffff85542200 0000000041b58ab3 00ffffff843c30c8 ffff8801db3224e8 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3557 [] schedule_timeout+0x861/0xf70 kernel/time/timer.c:1768 [] io_schedule_timeout+0x1ba/0x390 kernel/sched/core.c:5180 [] io_schedule include/linux/sched.h:460 [inline] [] dio_await_one fs/direct-io.c:461 [inline] [] dio_await_completion fs/direct-io.c:515 [inline] [] do_blockdev_direct_IO+0x2d5b/0x5a80 fs/direct-io.c:1331 [] __blockdev_direct_IO+0xa5/0xd0 fs/direct-io.c:1360 [] blkdev_direct_IO+0xa0/0xd0 fs/block_dev.c:183 [] generic_file_read_iter+0x660/0x1a90 mm/filemap.c:1951 [] blkdev_read_iter+0x105/0x170 fs/block_dev.c:1738 [] generic_file_splice_read+0x2c9/0x4f0 fs/splice.c:309 [] do_splice_to+0x10c/0x170 fs/splice.c:899 [] splice_direct_to_actor+0x23f/0x7e0 fs/splice.c:971 [] do_splice_direct+0x1a3/0x270 fs/splice.c:1080 [] do_sendfile+0x4f0/0xc60 fs/read_write.c:1393 [] C_SYSC_sendfile fs/read_write.c:1469 [inline] [] compat_SyS_sendfile+0xd1/0x160 fs/read_write.c:1458 [] do_syscall_32_irqs_on arch/x86/entry/common.c:325 [inline] [] do_fast_syscall_32+0x2f7/0x870 arch/x86/entry/common.c:387 [] entry_SYSENTER_compat+0x90/0xa2 arch/x86/entry/entry_64_compat.S:137 Showing all locks held in the system: 2 locks held by khungtaskd/519: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.?..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/3674: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 2 locks held by getty/3770: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2133 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.110-g00a0bcb #7 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d9287d08 ffffffff81eb2329 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffff810b9580 ffff8801d9287d40 ffffffff81ebd627 0000000000000000 0000000000000000 0000000000000002 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.9.110-g00a0bcb #7 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801d9a6b000 task.stack: ffff8801d9a80000 RIP: 0010:[] c [] tick_sched_timer+0xc5/0x120 kernel/time/tick-sched.c:1196 RSP: 0018:ffff8801db307dc8 EFLAGS: 00000046 RAX: dffffc0000000000 RBX: ffff8801db31cf00 RCX: 0000000000000000 RDX: 1ffffffff0b6625c RSI: ffffffff812ccdb9 RDI: ffffffff85b312e0 RBP: ffff8801db307de8 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: ffff8801db31cf74 R13: 00000101265a754c R14: ffff8801d9a87ce8 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000022eb000 CR3: 00000001c51e9000 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8801db31cf00c ffffffff812ccd10c ffff8801db31c900c dffffc0000000000c ffff8801db307f20c ffffffff812a4645c ffff8801db307eb0c ffff8801db307eb8c 7fab14f4cb923873c 1ffff1003b660fcbc ffff8801db31c960c ffffed003b660fd7c Call Trace: [] __run_hrtimer kernel/time/hrtimer.c:1255 [inline] [] __hrtimer_run_queues+0x375/0xe50 kernel/time/hrtimer.c:1319 [] hrtimer_interrupt+0x1b1/0x430 kernel/time/hrtimer.c:1353 [] local_apic_timer_interrupt+0x74/0xa0 arch/x86/kernel/apic/apic.c:935 [] smp_apic_timer_interrupt+0x7c/0xa0 arch/x86/kernel/apic/apic.c:959 [] apic_timer_interrupt+0xa0/0xb0 arch/x86/entry/entry_64.S:648 d [] ? native_safe_halt+0x6/0x10 arch/x86/include/asm/irqflags.h:53 [] arch_safe_halt arch/x86/include/asm/paravirt.h:104 [inline] [] default_idle+0x55/0x360 arch/x86/kernel/process.c:437 [] arch_cpu_idle+0x10/0x20 arch/x86/kernel/process.c:428 [] default_idle_call+0x45/0x60 kernel/sched/idle.c:97 [] cpuidle_idle_call kernel/sched/idle.c:155 [inline] [] cpu_idle_loop kernel/sched/idle.c:248 [inline] [] cpu_startup_entry+0x2b5/0x380 kernel/sched/idle.c:303 [] start_secondary+0x328/0x400 arch/x86/kernel/smpboot.c:257 Code: cd2 c75 c63 c8b c43 c74 c85 cc0 c75 c4a ce8 c87 c1b c09 c00 c48 cc7 cc7 ce0 c12 cb3 c85 c48 cb8 c00 c00 c00 c00 c00 cfc cff cdf c48 c89 cfa c48 cc1 cea c03 c80 c3c c02 c00 c<75> c50 c48 c8b c15 c02 c45 c86 c04 c4c c89 cee c48 c89 cdf cbb c01 c00 c00 c00 ce8 c