INFO: task syz-executor.1:1474 blocked for more than 140 seconds. Not tainted 4.19.161-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D29080 1474 8157 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 request_wait_answer+0x3dc/0x750 fs/fuse/dev.c:485 __fuse_request_send+0x123/0x1c0 fs/fuse/dev.c:505 fuse_simple_request+0x2e6/0x820 fs/fuse/dev.c:576 fuse_do_getattr+0x230/0xc50 fs/fuse/dir.c:927 fuse_update_get_attr fs/fuse/dir.c:960 [inline] fuse_getattr+0x261/0x2e0 fs/fuse/dir.c:1838 vfs_getattr_nosec+0xff/0x160 fs/stat.c:79 vfs_getattr fs/stat.c:116 [inline] vfs_statx+0x15a/0x210 fs/stat.c:189 vfs_stat include/linux/fs.h:3133 [inline] __do_sys_newstat fs/stat.c:337 [inline] __se_sys_newstat+0x96/0x120 fs/stat.c:333 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45deb9 Code: Bad RIP value. RSP: 002b:00007fa3f3e65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 RAX: ffffffffffffffda RBX: 0000000000035280 RCX: 000000000045deb9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000bc0 RBP: 000000000119bf58 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf2c R13: 00007ffedb47fc1f R14: 00007fa3f3e669c0 R15: 000000000119bf2c INFO: task syz-executor.1:1492 blocked for more than 140 seconds. Not tainted 4.19.161-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D29504 1492 8157 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 request_wait_answer+0x3dc/0x750 fs/fuse/dev.c:485 __fuse_request_send+0x123/0x1c0 fs/fuse/dev.c:505 fuse_simple_request+0x2e6/0x820 fs/fuse/dev.c:576 fuse_do_getattr+0x230/0xc50 fs/fuse/dir.c:927 fuse_update_get_attr fs/fuse/dir.c:960 [inline] fuse_getattr+0x261/0x2e0 fs/fuse/dir.c:1838 vfs_getattr_nosec+0xff/0x160 fs/stat.c:79 vfs_getattr fs/stat.c:116 [inline] vfs_statx+0x15a/0x210 fs/stat.c:189 vfs_stat include/linux/fs.h:3133 [inline] __do_sys_newstat fs/stat.c:337 [inline] __se_sys_newstat+0x96/0x120 fs/stat.c:333 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45deb9 Code: Bad RIP value. RSP: 002b:00007fa3f3e65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 RAX: ffffffffffffffda RBX: 0000000000035280 RCX: 000000000045deb9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000bc0 RBP: 000000000119bf58 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf2c R13: 00007ffedb47fc1f R14: 00007fa3f3e669c0 R15: 000000000119bf2c Showing all locks held in the system: 1 lock held by khungtaskd/1566: #0: 00000000e12f8736 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4440 1 lock held by in:imklog/7820: #0: 00000000c890d379 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 fs/file.c:767 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1566 Comm: khungtaskd Not tainted 4.19.161-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2fe lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1a6/0x1eb lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x991/0xe60 kernel/hung_task.c:287 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4693 Comm: systemd-journal Not tainted 4.19.161-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:317 [inline] RIP: 0010:read_pkru arch/x86/include/asm/pgtable.h:130 [inline] RIP: 0010:__pkru_allows_pkey arch/x86/include/asm/pgtable.h:1391 [inline] RIP: 0010:arch_vma_access_permitted arch/x86/include/asm/mmu_context.h:337 [inline] RIP: 0010:handle_mm_fault+0x787/0xb10 mm/memory.c:4280 Code: 34 08 48 c7 c0 7b 95 26 8b 48 89 c7 48 c1 ef 03 0f b6 0c 0f 40 38 d6 40 0f 9e c7 40 84 f6 0f 95 c2 40 84 d7 0f 85 ce 02 00 00 <83> e0 07 38 c1 0f 9e c2 84 c9 0f 95 c0 84 c2 0f 85 b9 02 00 00 48 RSP: 0000:ffff8880a086fe30 EFLAGS: 00000246 RAX: ffffffff8b26957b RBX: ffff8880a0907780 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 1ffffffff164d201 RBP: ffff8880a087db58 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000055 R13: 00007f58ed8e9000 R14: ffff8880a087dba8 R15: ffff8880a087db98 FS: 00007f58f035f8c0(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f58ed8e9000 CR3: 00000000a1113000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x7f58ef669120 Code: fe 6f 06 c5 fe 6f 4e 20 c5 fe 6f 56 40 c5 fe 6f 5e 60 c5 fe 6f 64 16 e0 c5 fe 6f 6c 16 c0 c5 fe 6f 74 16 a0 c5 fe 6f 7c 16 80 fe 7f 07 c5 fe 7f 4f 20 c5 fe 7f 57 40 c5 fe 7f 5f 60 c5 fe 7f RSP: 002b:00007ffffd214bb8 EFLAGS: 00010202 RAX: 00007f58ed8e8fe8 RBX: 0000000000000090 RCX: 0000000000409fa8 RDX: 0000000000000090 RSI: 00007ffffd214c60 RDI: 00007f58ed8e8fe8 RBP: 0000000000000000 R08: 000000000040a078 R09: 00007ffffd217cf0 R10: 001b57b9057f2f7a R11: 00007f58ed8e8fa8 R12: 0000556fadec1e80 R13: 9d24621b197abf05 R14: 00007ffffd214e50 R15: 00007ffffd214c60