INFO: task syz.1.1337:10284 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.1337 state:D stack:0 pid:10284 tgid:10283 ppid:9429 task_flags:0x400140 flags:0x00000001 Call trace: [<81a3e01c>] (__schedule) from [<81a3efb0>] (__schedule_loop kernel/sched/core.c:7043 [inline]) [<81a3e01c>] (__schedule) from [<81a3efb0>] (schedule+0x2c/0x130 kernel/sched/core.c:7058) r10:8384de80 r9:8384dd00 r8:8483d9f8 r7:8483d9f8 r6:dfac9c68 r5:dfac9cb8 r4:83a90c00 [<81a3ef84>] (schedule) from [<80731690>] (request_wait_answer fs/fuse/dev.c:565 [inline]) [<81a3ef84>] (schedule) from [<80731690>] (__fuse_request_send fs/fuse/dev.c:579 [inline]) [<81a3ef84>] (schedule) from [<80731690>] (__fuse_simple_request+0x348/0x498 fs/fuse/dev.c:673) r5:dfac9cb8 r4:8483d9a0 [<80731348>] (__fuse_simple_request) from [<8073acc4>] (fuse_simple_request fs/fuse/fuse_i.h:1244 [inline]) [<80731348>] (__fuse_simple_request) from [<8073acc4>] (fuse_send_open fs/fuse/file.c:52 [inline]) [<80731348>] (__fuse_simple_request) from [<8073acc4>] (fuse_file_open+0x180/0x230 fs/fuse/file.c:147) r8:85ba7200 r7:00000001 r6:00000000 r5:00000001 r4:849d8f40 [<8073ab44>] (fuse_file_open) from [<8073ad9c>] (fuse_do_open+0x28/0x3c fs/fuse/file.c:176) r10:85bbbb40 r9:00000000 r8:85bbbb68 r7:849d8f40 r6:85bbbb40 r5:85043900 r4:85bbbb40 [<8073ad74>] (fuse_do_open) from [<807348b4>] (fuse_dir_open+0x60/0xb0 fs/fuse/dir.c:1707) r4:00000000 [<80734854>] (fuse_dir_open) from [<8054e3e0>] (do_dentry_open+0x2c0/0x4d0 fs/open.c:965) r7:80734854 r6:85043900 r5:00000000 r4:85bbbb40 [<8054e120>] (do_dentry_open) from [<80550148>] (vfs_open+0x2c/0xe8 fs/open.c:1095) r9:00000000 r8:dfac9e58 r7:00000000 r6:85bbbb68 r5:8291ed6c r4:85bbbb40 [<8055011c>] (vfs_open) from [<80568c3c>] (do_open fs/namei.c:3887 [inline]) [<8055011c>] (vfs_open) from [<80568c3c>] (path_openat+0x30c/0x1150 fs/namei.c:4046) r6:dfac9f20 r5:8291ed6c r4:00000000 [<80568930>] (path_openat) from [<80569b2c>] (do_filp_open+0xac/0x148 fs/namei.c:4073) r10:00000142 r9:8621e000 r8:00000001 r7:dfac9e58 r6:dfac9f20 r5:83a90c00 r4:ffffff9c [<80569a80>] (do_filp_open) from [<805506a8>] (do_sys_openat2+0x90/0xe0 fs/open.c:1435) r9:83a90c00 r8:8020029c r7:ffffff9c r6:dfac9f58 r5:8621e000 r4:00000004 [<80550618>] (do_sys_openat2) from [<80550ad0>] (do_sys_open fs/open.c:1450 [inline]) [<80550618>] (do_sys_openat2) from [<80550ad0>] (__do_sys_openat fs/open.c:1466 [inline]) [<80550618>] (do_sys_openat2) from [<80550ad0>] (sys_openat+0x98/0xd4 fs/open.c:1461) r7:00000142 r6:0031630c r5:20004280 r4:ffffff9c [<80550a38>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfac9fa8 to 0xdfac9ff0) 9fa0: 00000000 00000000 ffffff9c 20004280 00000000 00000040 9fc0: 00000000 00000000 0031630c 00000142 00300000 00000000 00006364 76fc40bc 9fe0: 76fc3ec0 76fc3eb0 000195a4 00132510 r5:00000000 r4:00000000 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:000f0013 r5:600f0093 r4:82260e74 [<80201b08>] (show_stack) from [<8021fc60>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201b08>] (show_stack) from [<8021fc60>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<8021fbf0>] (dump_stack_lvl) from [<8021fc84>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000001 r4:00000001 [<8021fc6c>] (dump_stack) from [<81a27c30>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81a27ad0>] (nmi_cpu_backtrace) from [<81a27d7c>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8280c690 r5:8281ac94 r4:ffffffff [<81a27c4c>] (nmi_trigger_cpumask_backtrace) from [<802304fc>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:82abd56c r8:82804d40 r7:00022c00 r6:00007f43 r5:8281b248 r4:83241d0c [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037d958>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037d958>] (check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037d958>] (watchdog+0x4d4/0x81c kernel/hung_task.c:491) [<8037d484>] (watchdog) from [<80281fcc>] (kthread+0x12c/0x280 kernel/kthread.c:463) r10:00000000 r9:00000000 r8:8037d484 r7:830cf700 r6:830cf700 r5:83221800 r4:00000001 [<80281ea0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281ea0 r4:833a5cc0 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 2845 Comm: pr/ttyAMA-1 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:194 LR is at spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] LR is at __uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline] LR is at pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603 pc : [<81a47fe4>] lr : [<80a79fc8>] psr: 600f0113 sp : eb925eb0 ip : eb925ec0 fp : eb925ebc r10: 82959154 r9 : 00000000 r8 : 00000000 r7 : 00000117 r6 : 829590b8 r5 : 00000000 r4 : 00000001 r3 : 00001377 r2 : 00000000 r1 : 600f0113 r0 : 84af5440 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 84d06880 DAC: fffffffd Call trace: [<81a47fbc>] (_raw_spin_unlock_irqrestore) from [<80a79fc8>] (spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]) [<81a47fbc>] (_raw_spin_unlock_irqrestore) from [<80a79fc8>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline]) [<81a47fbc>] (_raw_spin_unlock_irqrestore) from [<80a79fc8>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603) [<80a79fa8>] (pl011_console_device_unlock) from [<802e456c>] (nbcon_emit_one+0x88/0x100 kernel/printk/nbcon.c:1142) [<802e44e4>] (nbcon_emit_one) from [<802e478c>] (nbcon_kthread_func+0x1a8/0x2a4 kernel/printk/nbcon.c:1229) r6:8280c690 r5:83bfc800 r4:829590b8 [<802e45e4>] (nbcon_kthread_func) from [<80281fcc>] (kthread+0x12c/0x280 kernel/kthread.c:463) r10:00000000 r9:829590b8 r8:802e45e4 r7:8432b380 r6:8432b380 r5:83bfc800 r4:00000001 [<80281ea0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb925fb0 to 0xeb925ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281ea0 r4:8407e840