INFO: task syz.1.210:4493 blocked for more than 430 seconds. Tainted: G W syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.210 state:D stack:0 pid:4493 tgid:4490 ppid:3260 task_flags:0x400140 flags:0x00000002 Call Trace: [] context_switch kernel/sched/core.c:5387 [inline] [] __schedule+0x1aae/0x4dec kernel/sched/core.c:7188 [] __schedule_loop kernel/sched/core.c:7267 [inline] [] schedule+0xb4/0x334 kernel/sched/core.c:7282 [] fuse_wait_aborted+0x17c/0x22c fs/fuse/dev.c:2535 [] fuse_conn_destroy+0x82/0x248 fs/fuse/inode.c:2120 [] fuse_sb_destroy fs/fuse/inode.c:2139 [inline] [] fuse_kill_sb_anon+0x238/0x2c8 fs/fuse/inode.c:2152 [] deactivate_locked_super+0xd8/0x198 fs/super.c:476 [] vfs_get_super fs/super.c:1338 [inline] [] get_tree_nodev+0x144/0x178 fs/super.c:1346 [] fuse_get_tree+0x34c/0x418 fs/fuse/inode.c:2055 [] vfs_get_tree+0x7e/0x314 fs/super.c:1754 [] fc_mount+0x1c/0x1d8 fs/namespace.c:1193 [] do_new_mount_fc fs/namespace.c:3758 [inline] [] do_new_mount fs/namespace.c:3834 [inline] [] path_mount+0x6ae/0x1d14 fs/namespace.c:4154 [] do_mount fs/namespace.c:4167 [inline] [] __do_sys_mount fs/namespace.c:4383 [inline] [] __se_sys_mount fs/namespace.c:4360 [inline] [] __riscv_sys_mount+0x5c2/0x778 fs/namespace.c:4360 [] syscall_handler+0x92/0x114 arch/riscv/include/asm/syscall.h:112 [] do_trap_ecall_u+0x3dc/0x61c arch/riscv/kernel/traps.c:342 [] handle_exception+0x15e/0x16a arch/riscv/kernel/entry.S:232 Showing all locks held in the system: 1 lock held by khungtaskd/32: #0: ffffffff887f34e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2a/0x1a8 kernel/locking/lockdep.c:6771 1 lock held by syslogd/3022: 2 locks held by getty/3194: #0: ffffaf801bb490a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x48 drivers/tty/tty_ldsem.c:340 #1: ffff8f800008e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3be/0x1310 drivers/tty/n_tty.c:2211 2 locks held by syz-executor/3246: 1 lock held by syz-executor/3259: 4 locks held by kworker/u8:8/3872: 1 lock held by syz.1.210/4493: #0: ffffaf803245c0d8 (&type->s_umount_key#55/1){+.+.}-{4:4}, at: alloc_super+0x18a/0xb14 fs/super.c:345 2 locks held by kworker/1:4/4509: 1 lock held by syz-executor/4513: #0: ffffaf8072c9f8e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:652 [inline] #0: ffffaf8072c9f8e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1624 [inline] #0: ffffaf8072c9f8e0 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1968 [inline] #0: ffffaf8072c9f8e0 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x308/0x4dec kernel/sched/core.c:7063 3 locks held by kworker/u8:10/4860: 3 locks held by syz.2.227/4862: 3 locks held by syz.2.227/4864: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: riscv-virtio,qemu (DT) Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:149 [] show_stack+0x30/0x3c arch/riscv/kernel/stacktrace.c:155 [] __dump_stack lib/dump_stack.c:94 [inline] [] dump_stack_lvl+0x114/0x1ac lib/dump_stack.c:120 [] dump_stack+0x1c/0x28 lib/dump_stack.c:129 [] nmi_cpu_backtrace+0x25e/0x3b0 lib/nmi_backtrace.c:113 [] nmi_trigger_cpumask_backtrace+0x29e/0x460 lib/nmi_backtrace.c:62 [] arch_trigger_cpumask_backtrace+0x2c/0x40 arch/riscv/kernel/smp.c:350 [] trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] [] __sys_info lib/sys_info.c:157 [inline] [] sys_info+0x20c/0x254 lib/sys_info.c:165 [] check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] [] watchdog+0xa3c/0x12dc kernel/hung_task.c:561 [] kthread+0x31c/0x444 kernel/kthread.c:436 [] ret_from_fork_kernel+0x94/0xef8 arch/riscv/kernel/process.c:230 [] ret_from_fork_kernel_asm+0x16/0x18 arch/riscv/kernel/entry.S:363 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 4329 Comm: kworker/1:1 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: riscv-virtio,qemu (DT) Workqueue: events_power_efficient gc_worker epc : finish_task_switch.isra.0+0x214/0xa6c kernel/sched/core.c:5244 ra : raw_spin_rq_unlock_irq kernel/sched/sched.h:1644 [inline] ra : finish_lock_switch kernel/sched/core.c:5124 [inline] ra : finish_task_switch.isra.0+0x210/0xa6c kernel/sched/core.c:5242 epc : ffffffff80227ac8 ra : ffffffff80227ac4 sp : ffff8f800aab7360 gp : ffffffff8a2425a0 tp : ffffaf801cb50000 t0 : 1ffffffff22c37d9 t1 : ffffffff8007bc80 t2 : ffffffff9161bec8 s0 : ffff8f800aab73e0 s1 : ffffaf8072c9f880 a0 : 0000000000000001 a1 : ffffffff881ce830 a2 : 0000000000000007 a3 : 0000000000000001 a4 : 0000000000001000 a5 : 0000000000053313 a6 : 0000000000000003 a7 : 0000000041b58ab3 s2 : ffffaf8072ca0600 s3 : ffffaf8013281ac0 s4 : 0000000000000000 s5 : 0000000000000000 s6 : 0000000000000000 s7 : 1ffff5f00e5940c0 s8 : 1ffff5f00e594079 s9 : 0000000000000000 s10: ffffffff80000000 s11: ffffaf8013281ac0 t3 : ffffffff88057eb8 t4 : fffff5ef0e593f19 t5 : fffff5ef0e593f1a t6 : 0000000000000002 ssp : 0000000000000000 status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [] arch_local_irq_enable arch/riscv/include/asm/irqflags.h:21 [inline] [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1644 [inline] [] finish_lock_switch kernel/sched/core.c:5124 [inline] [] finish_task_switch.isra.0+0x214/0xa6c kernel/sched/core.c:5242 [] context_switch kernel/sched/core.c:5390 [inline] [] __schedule+0x1ab6/0x4dec kernel/sched/core.c:7188 [] preempt_schedule_irq+0x70/0x1c8 kernel/sched/core.c:7512 [] raw_irqentry_exit_cond_resched kernel/entry/common.c:142 [inline] [] raw_irqentry_exit_cond_resched kernel/entry/common.c:134 [inline] [] irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:476 [inline] [] irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:547 [inline] [] irqentry_exit+0x628/0xd78 kernel/entry/common.c:164 [] do_irq+0x34/0x4c arch/riscv/kernel/traps.c:444 [] handle_exception+0x13c/0x16a arch/riscv/kernel/entry.S:221 [] arch_local_irq_restore arch/riscv/include/asm/irqflags.h:51 [inline] [] lock_acquire kernel/locking/lockdep.c:5871 [inline] [] lock_acquire+0x286/0x500 kernel/locking/lockdep.c:5825 [] rcu_lock_acquire include/linux/rcupdate.h:300 [inline] [] rcu_read_lock include/linux/rcupdate.h:838 [inline] [] gc_worker+0x236/0x1504 net/netfilter/nf_conntrack_core.c:1543 [] process_one_work+0x974/0x20e0 kernel/workqueue.c:3302 [] process_scheduled_works kernel/workqueue.c:3385 [inline] [] worker_thread+0x540/0xcbc kernel/workqueue.c:3466 [] kthread+0x31c/0x444 kernel/kthread.c:436 [] ret_from_fork_kernel+0x94/0xef8 arch/riscv/kernel/process.c:230 [] ret_from_fork_kernel_asm+0x16/0x18 arch/riscv/kernel/entry.S:363