INFO: task syz.3.10081:10233 blocked for more than 430 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.10081 state:D stack:0 pid:10233 tgid:10233 ppid:7840 task_flags:0x400040 flags:0x00000005 Call trace: [<81aeb24c>] (__schedule) from [<81aec660>] (__schedule_loop kernel/sched/core.c:6993 [inline]) [<81aeb24c>] (__schedule) from [<81aec660>] (schedule+0x2c/0x134 kernel/sched/core.c:7008) r10:85317480 r9:85240c40 r8:847e6400 r7:84cbead8 r6:eaa45ea8 r5:eaa45e50 r4:85240c40 [<81aec634>] (schedule) from [<80769714>] (request_wait_answer fs/fuse/dev.c:585 [inline]) [<81aec634>] (schedule) from [<80769714>] (__fuse_request_send fs/fuse/dev.c:599 [inline]) [<81aec634>] (schedule) from [<80769714>] (__fuse_simple_request+0x398/0x4f4 fs/fuse/dev.c:693) r5:eaa45e50 r4:84cbea80 [<8076937c>] (__fuse_simple_request) from [<80774df4>] (fuse_simple_request fs/fuse/fuse_i.h:1263 [inline]) [<8076937c>] (__fuse_simple_request) from [<80774df4>] (fuse_flush+0x178/0x1b4 fs/fuse/file.c:494) r8:86685e80 r7:8747bcc0 r6:85391500 r5:83780000 r4:85317480 [<80774c7c>] (fuse_flush) from [<80570184>] (filp_flush+0x38/0x88 fs/open.c:1469) r8:85391540 r7:8464b400 r6:0000001e r5:85391500 r4:85317480 [<8057014c>] (filp_flush) from [<805701e8>] (filp_close+0x14/0x28 fs/open.c:1482) r7:8464b400 r6:0000001e r5:85317480 r4:85391500 [<805701d4>] (filp_close) from [<805a1a68>] (__range_close fs/file.c:794 [inline]) [<805701d4>] (filp_close) from [<805a1a68>] (__do_sys_close_range fs/file.c:855 [inline]) [<805701d4>] (filp_close) from [<805a1a68>] (sys_close_range+0x18c/0x224 fs/file.c:819) r5:00000008 r4:85391500 [<805a18dc>] (sys_close_range) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xeaa45fa8 to 0xeaa45ff0) 5fa0: 00000000 00000000 00000003 0000001e 00000000 7e85f918 5fc0: 00000000 00000000 00000000 000001b4 0068598f ffffffff 00000000 00346384 5fe0: 7e85f840 7e85f830 00028034 00130300 r10:000001b4 r9:85240c40 r8:8020029c r7:000001b4 r6:00000000 r5:00000000 r4:00000000 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 29 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express Call trace: [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:60000093 r6:60000093 r5:822a8a28 r4:00000000 [<80201af0>] (show_stack) from [<8021e410>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:00000013 r5:00000000 r4:00000001 [<8021e424>] (dump_stack) from [<81ad4c7c>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:113) [<81ad4b2c>] (nmi_cpu_backtrace) from [<81ad4dcc>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000000 r6:8280c550 r5:8281af38 r4:ffffffff [<81ad4c9c>] (nmi_trigger_cpumask_backtrace) from [<8022f124>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:82ac7834 r8:8280c6d8 r7:000aa8c1 r6:85241428 r5:82804d80 r4:00000048 [<8022f10c>] (arch_trigger_cpumask_backtrace) from [<81adc8bc>] (trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline]) [<8022f10c>] (arch_trigger_cpumask_backtrace) from [<81adc8bc>] (__sys_info lib/sys_info.c:157 [inline]) [<8022f10c>] (arch_trigger_cpumask_backtrace) from [<81adc8bc>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81adc854>] (sys_info) from [<80385260>] (check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]) [<81adc854>] (sys_info) from [<80385260>] (watchdog+0x59c/0x8d8 kernel/hung_task.c:515) r5:82804d80 r4:86adb214 [<80384cc4>] (watchdog) from [<802814a0>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df819e60 r8:83103600 r7:00000000 r6:80384cc4 r5:83180000 r4:83880880 [<80281384>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281384 r4:83880880 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 10206 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express Workqueue: 0x0 (events) PC is at kmap_local_sched_in kernel/sched/core.c:5061 [inline] PC is at finish_task_switch+0x90/0x294 kernel/sched/core.c:5163 LR is at __raw_spin_unlock include/linux/spinlock_api_smp.h:169 [inline] LR is at _raw_spin_unlock+0x2c/0x50 kernel/locking/spinlock.c:186 pc : [<8028ebd0>] lr : [<81af5654>] psr: 20000013 sp : eaa9de68 ip : eaa9de58 fp : eaa9deac r10: 00002001 r9 : 85574980 r8 : 00000000 r7 : 40000001 r6 : 81aeb728 r5 : ddde5400 r4 : 00000000 r3 : 85574980 r2 : 00000001 r1 : 822a8a28 r0 : 00000001 Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 8793d200 DAC: 00000000 Call trace: [<8028eb40>] (finish_task_switch) from [<81aeb728>] (context_switch kernel/sched/core.c:5301 [inline]) [<8028eb40>] (finish_task_switch) from [<81aeb728>] (__schedule+0x4dc/0x13e8 kernel/sched/core.c:6911) r10:00000001 r9:850b03c0 r8:40000001 r7:40000001 r6:85574980 r5:ddde5400 r4:833c4980 [<81aeb24c>] (__schedule) from [<81aec660>] (__schedule_loop kernel/sched/core.c:6993 [inline]) [<81aeb24c>] (__schedule) from [<81aec660>] (schedule+0x2c/0x134 kernel/sched/core.c:7008) r10:00000000 r9:84ce3830 r8:85574980 r7:82804d80 r6:ddde4da0 r5:ddde4d80 r4:85574980 [<81aec634>] (schedule) from [<802773a8>] (worker_thread+0xa0/0x318 kernel/workqueue.c:3455) r5:ddde4d80 r4:84ce3800 [<80277308>] (worker_thread) from [<802814a0>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0181e88 r8:84ce3e80 r7:84ce3800 r6:80277308 r5:85574980 r4:862ddf00 [<80281384>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeaa9dfb0 to 0xeaa9dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281384 r4:862ddf00