INFO: task syz-executor.0:3567 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:0 pid:3567 tgid:3567 ppid:1 task_flags:0x400140 flags:0x00000005 Call trace: [<81a6463c>] (__schedule) from [<81a655d0>] (__schedule_loop kernel/sched/core.c:7011 [inline]) [<81a6463c>] (__schedule) from [<81a655d0>] (schedule+0x2c/0x130 kernel/sched/core.c:7026) r10:df985bfc r9:00000002 r8:60000013 r7:83794228 r6:df985c04 r5:84b66c00 r4:84b66c00 [<81a655a4>] (schedule) from [<81a659b8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7083) r5:84b66c00 r4:83794224 [<81a659a0>] (schedule_preempt_disabled) from [<81a68568>] (__mutex_lock_common kernel/locking/mutex.c:676 [inline]) [<81a659a0>] (schedule_preempt_disabled) from [<81a68568>] (__mutex_lock.constprop.0+0x350/0xa24 kernel/locking/mutex.c:760) [<81a68218>] (__mutex_lock.constprop.0) from [<81a68d10>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1049) r10:83226014 r9:80808080 r8:00000001 r7:00000000 r6:85421110 r5:83794000 r4:85421110 [<81a68cfc>] (__mutex_lock_slowpath) from [<81a68d50>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:274) [<81a68d14>] (mutex_lock) from [<807524f8>] (fuse_lock_inode+0x34/0x3c fs/fuse/inode.c:604) [<807524c4>] (fuse_lock_inode) from [<80746f0c>] (fuse_lookup+0x64/0x174 fs/fuse/dir.c:427) [<80746ea8>] (fuse_lookup) from [<8056ee9c>] (__lookup_slow+0x8c/0x140 fs/namei.c:1816) r9:80808080 r8:df985e60 r7:83794000 r6:00000403 r5:85412aa0 r4:85421110 [<8056ee10>] (__lookup_slow) from [<80572f20>] (lookup_slow fs/namei.c:1833 [inline]) [<8056ee10>] (__lookup_slow) from [<80572f20>] (walk_component+0x104/0x170 fs/namei.c:2151) r9:80808080 r8:00000403 r7:00000002 r6:df985e58 r5:83794080 r4:85412aa0 [<80572e1c>] (walk_component) from [<805731ac>] (link_path_walk+0x220/0x3dc fs/namei.c:2519) r9:80808080 r8:2f2f2f2f r7:d0d0d0d0 r6:df985e58 r5:fefefeff r4:83226015 [<80572f8c>] (link_path_walk) from [<8057488c>] (path_openat+0x7c/0x1150 fs/namei.c:4130) r10:84986cc0 r9:83226000 r8:df985e58 r7:df985e58 r6:df985f20 r5:83226010 r4:ffffff9c [<80574810>] (path_openat) from [<80575a0c>] (do_filp_open+0xac/0x148 fs/namei.c:4161) r10:00000142 r9:83226000 r8:00000003 r7:df985e58 r6:df985f20 r5:84b66c00 r4:ffffff9c [<80575960>] (do_filp_open) from [<8055c5b4>] (do_sys_openat2+0x90/0xe0 fs/open.c:1437) r9:84b66c00 r8:8020029c r7:ffffff9c r6:df985f58 r5:83226000 r4:00000003 [<8055c524>] (do_sys_openat2) from [<8055c9dc>] (do_sys_open fs/open.c:1452 [inline]) [<8055c524>] (do_sys_openat2) from [<8055c9dc>] (__do_sys_openat fs/open.c:1468 [inline]) [<8055c524>] (do_sys_openat2) from [<8055c9dc>] (sys_openat+0x98/0xd4 fs/open.c:1463) r7:00000142 r6:00000000 r5:00093608 r4:ffffff9c [<8055c944>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdf985fa8 to 0xdf985ff0) 5fa0: 00000002 7ebae61c ffffff9c 00093608 000a4800 00000000 5fc0: 00000002 7ebae61c 00000000 00000142 00140000 00000000 7ebae670 7ebae630 5fe0: 0011c000 7ebae580 0004b8d4 000502b8 r5:7ebae61c r4:00000002 INFO: task syz-executor.0:3567 is blocked on a mutex likely owned by task syz-executor.0:3972. INFO: task syz-executor.0:3972 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:0 pid:3972 tgid:3965 ppid:3567 task_flags:0x400140 flags:0x00000005 Call trace: [<81a6463c>] (__schedule) from [<81a655d0>] (__schedule_loop kernel/sched/core.c:7011 [inline]) [<81a6463c>] (__schedule) from [<81a655d0>] (schedule+0x2c/0x130 kernel/sched/core.c:7026) r10:00000000 r9:dfa21c8c r8:84a730c8 r7:84a730c8 r6:dfa21bf0 r5:dfa21b58 r4:83baa400 [<81a655a4>] (schedule) from [<8074157c>] (request_wait_answer fs/fuse/dev.c:585 [inline]) [<81a655a4>] (schedule) from [<8074157c>] (__fuse_request_send fs/fuse/dev.c:599 [inline]) [<81a655a4>] (schedule) from [<8074157c>] (__fuse_simple_request+0x384/0x4dc fs/fuse/dev.c:693) r5:dfa21b58 r4:84a73070 [<807411f8>] (__fuse_simple_request) from [<80746ce8>] (fuse_simple_request fs/fuse/fuse_i.h:1250 [inline]) [<807411f8>] (__fuse_simple_request) from [<80746ce8>] (fuse_lookup_name+0xc0/0x280 fs/fuse/dir.c:381) r8:849a3e80 r7:84c8f800 r6:85414568 r5:00000001 r4:dfa21c90 [<80746c28>] (fuse_lookup_name) from [<80746f38>] (fuse_lookup+0x90/0x174 fs/fuse/dir.c:428) r10:8334c014 r9:00000001 r8:00000001 r7:00000000 r6:85414550 r5:83794000 r4:85414550 [<80746ea8>] (fuse_lookup) from [<8056ee9c>] (__lookup_slow+0x8c/0x140 fs/namei.c:1816) r9:80808080 r8:dfa21e60 r7:83794000 r6:00000401 r5:85412aa0 r4:85414550 [<8056ee10>] (__lookup_slow) from [<80572f20>] (lookup_slow fs/namei.c:1833 [inline]) [<8056ee10>] (__lookup_slow) from [<80572f20>] (walk_component+0x104/0x170 fs/namei.c:2151) r9:80808080 r8:00000401 r7:00000002 r6:dfa21e58 r5:83794080 r4:85412aa0 [<80572e1c>] (walk_component) from [<805731ac>] (link_path_walk+0x220/0x3dc fs/namei.c:2519) r9:80808080 r8:2f2f2f2f r7:d0d0d0d0 r6:dfa21e58 r5:fefefeff r4:8334c015 [<80572f8c>] (link_path_walk) from [<8057488c>] (path_openat+0x7c/0x1150 fs/namei.c:4130) r10:84cb7840 r9:8334c000 r8:dfa21e58 r7:dfa21e58 r6:dfa21f20 r5:8334c010 r4:ffffff9c [<80574810>] (path_openat) from [<80575a0c>] (do_filp_open+0xac/0x148 fs/namei.c:4161) r10:00000142 r9:8334c000 r8:00000001 r7:dfa21e58 r6:dfa21f20 r5:83baa400 r4:ffffff9c [<80575960>] (do_filp_open) from [<8055c5b4>] (do_sys_openat2+0x90/0xe0 fs/open.c:1437) r9:83baa400 r8:8020029c r7:ffffff9c r6:dfa21f58 r5:8334c000 r4:00000005 [<8055c524>] (do_sys_openat2) from [<8055c9dc>] (do_sys_open fs/open.c:1452 [inline]) [<8055c524>] (do_sys_openat2) from [<8055c9dc>] (__do_sys_openat fs/open.c:1468 [inline]) [<8055c524>] (do_sys_openat2) from [<8055c9dc>] (sys_openat+0x98/0xd4 fs/open.c:1463) r7:00000142 r6:00000000 r5:76b23da0 r4:ffffff9c [<8055c944>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfa21fa8 to 0xdfa21ff0) 1fa0: 00000002 76b23da0 ffffff9c 76b23da0 00000002 00000000 1fc0: 00000002 76b23da0 00000000 00000142 00000000 6e704000 20000240 20000a40 1fe0: 0000005c 76b23d10 00091144 0004ee98 r5:76b23da0 r4:00000002 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00000013 r5:60000093 r4:822527c4 [<80201b08>] (show_stack) from [<8021f8f8>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201b08>] (show_stack) from [<8021f8f8>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<8021f888>] (dump_stack_lvl) from [<8021f91c>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000001 r4:00000001 [<8021f904>] (dump_stack) from [<81a4e254>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81a4e0f4>] (nmi_cpu_backtrace) from [<81a4e3a0>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8280c690 r5:8281ae34 r4:ffffffff [<81a4e270>] (nmi_trigger_cpumask_backtrace) from [<802304fc>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:8281ba28 r8:8280c810 r7:00008e00 r6:00007f54 r5:82abf7d4 r4:83e6f50c [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037faf8>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037faf8>] (check_hung_uninterruptible_tasks kernel/hung_task.c:332 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037faf8>] (watchdog+0x5d0/0x850 kernel/hung_task.c:495) [<8037f528>] (watchdog) from [<8028020c>] (kthread+0x12c/0x280 kernel/kthread.c:463) r10:00000000 r9:00000000 r8:8037f528 r7:830d5380 r6:830d5380 r5:8321e000 r4:00000001 [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 r4:833db900 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 2820 Comm: pr/ttyAMA-1 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:194 LR is at spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] LR is at __uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline] LR is at pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603 pc : [<81a6e4a4>] lr : [<80a8f5a8>] psr: 60070013 sp : eac75eb0 ip : eac75ec0 fp : eac75ebc r10: 82959594 r9 : 00000000 r8 : 00000000 r7 : 00000117 r6 : 829594f8 r5 : 00000000 r4 : 00000001 r3 : 00000547 r2 : 00000000 r1 : 60070013 r0 : 83e7c040 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 84a77140 DAC: fffffffd Call trace: [<81a6e47c>] (_raw_spin_unlock_irqrestore) from [<80a8f5a8>] (spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]) [<81a6e47c>] (_raw_spin_unlock_irqrestore) from [<80a8f5a8>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline]) [<81a6e47c>] (_raw_spin_unlock_irqrestore) from [<80a8f5a8>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603) [<80a8f588>] (pl011_console_device_unlock) from [<802e3750>] (nbcon_emit_one+0x88/0x100 kernel/printk/nbcon.c:1142) [<802e36c8>] (nbcon_emit_one) from [<802e3970>] (nbcon_kthread_func+0x1a8/0x2a4 kernel/printk/nbcon.c:1229) r6:8280c690 r5:83babc00 r4:829594f8 [<802e37c8>] (nbcon_kthread_func) from [<8028020c>] (kthread+0x12c/0x280 kernel/kthread.c:463) r10:00000000 r9:829594f8 r8:802e37c8 r7:84a25a80 r6:84a25a80 r5:83babc00 r4:00000001 [<802800e0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac75fb0 to 0xeac75ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800e0 r4:84707cc0