INFO: task syz.5.4984:23752 blocked for more than 430 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.4984 state:D stack:0 pid:23752 tgid:23745 ppid:20674 task_flags:0x400040 flags:0x00000001 Call trace: [<81b5771c>] (__schedule) from [<81b58bb4>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b5771c>] (__schedule) from [<81b58bb4>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:00000000 r9:00000000 r8:860fd700 r7:84c2b528 r6:eb1d5c40 r5:eb1d5b40 r4:84920c40 [<81b58b88>] (schedule) from [<8079e6d4>] (request_wait_answer fs/fuse/dev.c:743 [inline]) [<81b58b88>] (schedule) from [<8079e6d4>] (__fuse_request_send fs/fuse/dev.c:757 [inline]) [<81b58b88>] (schedule) from [<8079e6d4>] (fuse_chan_send+0x390/0x47c fs/fuse/dev.c:833) r5:eb1d5b40 r4:84c2b4d0 [<8079e344>] (fuse_chan_send) from [<807b0c3c>] (__fuse_simple_request+0x5c/0x68 fs/fuse/req.c:69) r8:00000001 r7:00000000 r6:eb1d5bd8 r5:89464f00 r4:eb1d5c40 [<807b0be0>] (__fuse_simple_request) from [<807a075c>] (fuse_simple_request fs/fuse/fuse_i.h:1012 [inline]) [<807b0be0>] (__fuse_simple_request) from [<807a075c>] (fuse_do_getattr+0x104/0x224 fs/fuse/dir.c:1505) r5:8534e6c0 r4:eb1d5bb8 [<807a0658>] (fuse_do_getattr) from [<807a28c0>] (fuse_perm_getattr fs/fuse/dir.c:1732 [inline]) [<807a0658>] (fuse_do_getattr) from [<807a28c0>] (fuse_permission+0x1d0/0x334 fs/fuse/dir.c:1773) r10:00000000 r9:89464f00 r8:82b21e14 r7:00000001 r6:00000000 r5:00000021 r4:8534e6c0 [<807a26f0>] (fuse_permission) from [<805af198>] (do_inode_permission fs/namei.c:583 [inline]) [<807a26f0>] (fuse_permission) from [<805af198>] (inode_permission+0xfc/0x16c fs/namei.c:653) r10:85511110 r9:85b95480 r8:eb1d5e30 r7:00000000 r6:82b21e14 r5:00000021 r4:8534e6c0 [<805af09c>] (inode_permission) from [<805af69c>] (may_open+0xf4/0x180 fs/namei.c:4274) r9:85b95480 r8:eb1d5e30 r7:82b21e14 r6:00000000 r5:8534e6c0 r4:00020020 [<805af5a8>] (may_open) from [<805b5c70>] (do_open fs/namei.c:4698 [inline]) [<805af5a8>] (may_open) from [<805b5c70>] (path_openat+0x47c/0x1260 fs/namei.c:4859) r7:eb1d5ef8 r5:82b21e14 r4:00020020 [<805b57f4>] (path_openat) from [<805b6b0c>] (do_file_open+0xb8/0x150 fs/namei.c:4888) r10:00000183 r9:84920c40 r8:00000001 r7:ffffff9c r6:eb1d5ef8 r5:84920c40 r4:838500c0 [<805b6a54>] (do_file_open) from [<805a9294>] (do_open_execat+0x6c/0x180 fs/exec.c:785) r8:ffffff9c r7:838500c0 r6:84920c40 r5:fffff000 r4:00000001 [<805a9228>] (do_open_execat) from [<805a9400>] (alloc_bprm+0x1c/0x344 fs/exec.c:1431) r5:00000000 r4:ffffff9c [<805a93e4>] (alloc_bprm) from [<805a9790>] (class_bprm_constructor fs/exec.c:1496 [inline]) [<805a93e4>] (alloc_bprm) from [<805a9790>] (do_execveat_common+0x68/0x18c fs/exec.c:1829) r9:84920c40 r8:00000000 r7:00000000 r6:84920c40 r5:838500c0 r4:ffffff9c [<805a9728>] (do_execveat_common) from [<805aa85c>] (__do_sys_execveat fs/exec.c:1960 [inline]) [<805a9728>] (do_execveat_common) from [<805aa85c>] (sys_execveat+0x4c/0x68 fs/exec.c:1953) r9:84920c40 r8:00000000 r7:00000000 r6:00000000 r5:ffffff9c r4:838500c0 [<805aa810>] (sys_execveat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xeb1d5fa8 to 0xeb1d5ff0) 5fa0: 00000000 00000000 ffffff9c 20001400 00000000 00000000 5fc0: 00000000 00000000 003463b8 00000183 00346378 00000000 003d0f00 76f100dc 5fe0: 76f0fe88 76f0fe78 00018ebc 00130820 r8:8020029c r7:00000183 r6:003463b8 r5:00000000 r4:00000000 INFO: task syz.5.4984:23763 blocked for more than 430 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.4984 state:D stack:0 pid:23763 tgid:23745 ppid:20674 task_flags:0x400140 flags:0x00800001 Call trace: [<81b5771c>] (__schedule) from [<81b58bb4>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b5771c>] (__schedule) from [<81b58bb4>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:00000000 r9:807ade7c r8:860fd700 r7:84c2b678 r6:eb1d1c20 r5:eb1d1bb8 r4:8318ee40 [<81b58b88>] (schedule) from [<8079e6d4>] (request_wait_answer fs/fuse/dev.c:743 [inline]) [<81b58b88>] (schedule) from [<8079e6d4>] (__fuse_request_send fs/fuse/dev.c:757 [inline]) [<81b58b88>] (schedule) from [<8079e6d4>] (fuse_chan_send+0x390/0x47c fs/fuse/dev.c:833) r5:eb1d1bb8 r4:84c2b620 [<8079e344>] (fuse_chan_send) from [<807b0c3c>] (__fuse_simple_request+0x5c/0x68 fs/fuse/req.c:69) r8:86e21f00 r7:eb1d1e4c r6:86777f00 r5:89464f00 r4:eb1d1c20 [<807b0be0>] (__fuse_simple_request) from [<807ad9c4>] (fuse_simple_request fs/fuse/fuse_i.h:1012 [inline]) [<807b0be0>] (__fuse_simple_request) from [<807ad9c4>] (fuse_setxattr+0xf0/0x150 fs/fuse/xattr.c:38) r5:8534e6c0 r4:00000014 [<807ad8d4>] (fuse_setxattr) from [<807adec0>] (fuse_xattr_set+0x44/0x68 fs/fuse/xattr.c:202) r8:00000014 r7:86e21f00 r6:834a1088 r5:82b21e14 r4:8534e6c0 [<807ade7c>] (fuse_xattr_set) from [<805da61c>] (__vfs_setxattr+0xb4/0xc8 fs/xattr.c:223) [<805da568>] (__vfs_setxattr) from [<805db05c>] (__vfs_setxattr_noperm+0x7c/0x204 fs/xattr.c:257) r9:82b21e14 r8:86e21f00 r7:8534e6c0 r6:00000000 r5:eb1d1e4c r4:834a1088 [<805dafe0>] (__vfs_setxattr_noperm) from [<805db288>] (__vfs_setxattr_locked+0xa4/0x12c fs/xattr.c:318) r10:eb1d1d90 r9:00000000 r8:8534e6c0 r7:86e21f00 r6:eb1d1e4c r5:82b21e14 r4:834a1088 [<805db1e4>] (__vfs_setxattr_locked) from [<805db3b0>] (vfs_setxattr+0xa0/0x180 fs/xattr.c:344) r8:00000014 r7:86e21f00 r6:834a1088 r5:8534e740 r4:00000014 [<805db310>] (vfs_setxattr) from [<805db524>] (do_setxattr+0x94/0x9c fs/xattr.c:662) r10:00000000 r9:834a1088 r8:82b21e14 r7:86e21f00 r6:00000014 r5:eb1d1e4c r4:eb1d1e38 [<805db490>] (do_setxattr) from [<805db834>] (filename_setxattr+0xb4/0xd8 fs/xattr.c:690) r9:eb1d1e38 r8:ffffff9c r7:831edb40 r6:00000000 r5:00000000 r4:00000000 [<805db780>] (filename_setxattr) from [<805db930>] (path_setxattrat+0xd8/0x1bc fs/xattr.c:734) r9:200003c0 r8:ffffff9c r7:831edb40 r6:00000100 r5:86e21f00 r4:00000013 [<805db858>] (path_setxattrat) from [<805dbbdc>] (__do_sys_lsetxattr fs/xattr.c:775 [inline]) [<805db858>] (path_setxattrat) from [<805dbbdc>] (sys_lsetxattr+0x34/0x3c fs/xattr.c:771) r10:000000e3 r9:8318ee40 r8:8020029c r7:000000e3 r6:00346458 r5:00000000 r4:20000380 [<805dbba8>] (sys_lsetxattr) from [<8020028c>] (__sys_trace_return+0x0/0x10) Exception stack(0xeb1d1fa8 to 0xeb1d1ff0) 1fa0: 00000000 00000000 200002c0 20000380 200003c0 00000014 1fc0: 00000000 00000000 00346458 000000e3 00346418 00000000 00000001 76eef0dc 1fe0: 76eeee88 76eeee78 00018ebc 00130820 r4:00000000 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 29 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express Call trace: [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:60070093 r6:60070093 r5:82332258 r4:00000000 [<80201a74>] (show_stack) from [<8021e5e0>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201a74>] (show_stack) from [<8021e5e0>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021e584>] (dump_stack_lvl) from [<8021e60c>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:00070013 r5:00000000 r4:00000001 [<8021e5f4>] (dump_stack) from [<81b40dbc>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:122) [<81b40c6c>] (nmi_cpu_backtrace) from [<81b40f10>] (nmi_trigger_cpumask_backtrace+0x134/0x208 lib/nmi_backtrace.c:65) r7:82a0b150 r6:83178000 r5:82a1c7b8 r4:ffffffff [<81b40ddc>] (nmi_trigger_cpumask_backtrace) from [<8022f0f4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:82a0b2f0 r8:00000002 r7:82a1ce80 r6:82ccae2c r5:00007f12 r4:00000048 [<8022f0dc>] (arch_trigger_cpumask_backtrace) from [<81b48a4c>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<8022f0dc>] (arch_trigger_cpumask_backtrace) from [<81b48a4c>] (__sys_info lib/sys_info.c:157 [inline]) [<8022f0dc>] (arch_trigger_cpumask_backtrace) from [<81b48a4c>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81b489e4>] (sys_info) from [<8038f87c>] (check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]) [<81b489e4>] (sys_info) from [<8038f87c>] (watchdog+0x3a0/0x848 kernel/hung_task.c:561) r5:00007f12 r4:0000000a [<8038f4dc>] (watchdog) from [<80281708>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df819e60 r8:83110980 r7:00000000 r6:8038f4dc r5:83178000 r4:8387c5c0 [<802815ec>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802815ec r4:8387c5c0 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 2825 Comm: pr/ttyAMA-1 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:198 LR is at spin_unlock_irqrestore include/linux/spinlock.h:408 [inline] LR is at __uart_port_unlock_irqrestore include/linux/serial_core.h:618 [inline] LR is at pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2700 pc : [<81b6207c>] lr : [<80b004c4>] psr: 60000113 sp : eb62dec8 ip : eb62ded8 fp : eb62ded4 r10: 82b5cd1c r9 : 00000001 r8 : 00000000 r7 : 00000117 r6 : 82b5cc80 r5 : 00000000 r4 : 00000001 r3 : 00004db1 r2 : 00000000 r1 : 60000113 r0 : 83ff7840 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 85b96b40 DAC: 00000000 Call trace: [<81b62054>] (_raw_spin_unlock_irqrestore) from [<80b004c4>] (spin_unlock_irqrestore include/linux/spinlock.h:408 [inline]) [<81b62054>] (_raw_spin_unlock_irqrestore) from [<80b004c4>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:618 [inline]) [<81b62054>] (_raw_spin_unlock_irqrestore) from [<80b004c4>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2700) [<80b004a4>] (pl011_console_device_unlock) from [<802ec160>] (nbcon_emit_one+0x88/0x100 kernel/printk/nbcon.c:1165) [<802ec0d8>] (nbcon_emit_one) from [<802ec3e0>] (nbcon_kthread_func+0x208/0x2ec kernel/printk/nbcon.c:1271) r6:82cc72ec r5:82b5cc80 r4:84930000 [<802ec1d8>] (nbcon_kthread_func) from [<80281708>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df931b38 r8:84af0500 r7:82b5cc80 r6:802ec1d8 r5:84930000 r4:84b07bc0 [<802815ec>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb62dfb0 to 0xeb62dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802815ec r4:84b07bc0