linux-fsdevel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Qian Cai <cai@redhat.com>
To: syzbot <syzbot+ea48ca29949b1820e745@syzkaller.appspotmail.com>
Cc: linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org,
	miklos@szeredi.hu, syzkaller-bugs@googlegroups.com
Subject: Re: INFO: task can't die in request_wait_answer
Date: Wed, 07 Oct 2020 16:58:03 -0400	[thread overview]
Message-ID: <1f950d7fa9446fb55fe8d224bd419084922f867d.camel@redhat.com> (raw)
In-Reply-To: <000000000000f84cce05b0e4a83e@google.com>

On Sun, 2020-10-04 at 21:10 -0700, syzbot wrote:
> syzbot has found a reproducer for the following issue on:
> 
> HEAD commit:    2172e358 Add linux-next specific files for 20201002
> git tree:       linux-next
> console output: https://syzkaller.appspot.com/x/log.txt?x=1596c7a3900000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=70698f530a7e856f
> dashboard link: https://syzkaller.appspot.com/bug?extid=ea48ca29949b1820e745
> compiler:       gcc (GCC) 10.1.0-syz 20200507
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=16e1c8e7900000
> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=10a166af900000

Looking through the reproducer, it has all those privileged operations like
mount etc which seems indicating that syzkaller tries to run as a root user
which could easily screw up things like those soft-lockups.

So far, I can only reproduce this as a root user and then also need to Ctrl-C
the reproducer in order for the kernel to stuck in request_wait_answer() forever
probably because no response from the server (the server was already exited).

> 
> IMPORTANT: if you fix the issue, please add the following tag to the commit:
> Reported-by: syzbot+ea48ca29949b1820e745@syzkaller.appspotmail.com
> 
> INFO: task syz-executor220:7040 can't die for more than 143 seconds.
> task:syz-executor220 state:D stack:28792 pid: 7040 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7040 blocked for more than 143 seconds.
>       Not tainted 5.9.0-rc7-next-20201002-syzkaller #0
> "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
> task:syz-executor220 state:D stack:28792 pid: 7040 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7044 can't die for more than 143 seconds.
> task:syz-executor220 state:D stack:28752 pid: 7044 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7044 blocked for more than 144 seconds.
>       Not tainted 5.9.0-rc7-next-20201002-syzkaller #0
> "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
> task:syz-executor220 state:D stack:28752 pid: 7044 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7066 can't die for more than 144 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7066 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7066 blocked for more than 144 seconds.
>       Not tainted 5.9.0-rc7-next-20201002-syzkaller #0
> "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
> task:syz-executor220 state:D stack:29048 pid: 7066 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7071 can't die for more than 144 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7071 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7071 blocked for more than 145 seconds.
>       Not tainted 5.9.0-rc7-next-20201002-syzkaller #0
> "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
> task:syz-executor220 state:D stack:29048 pid: 7071 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7087 can't die for more than 145 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7087 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7087 blocked for more than 145 seconds.
>       Not tainted 5.9.0-rc7-next-20201002-syzkaller #0
> "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
> task:syz-executor220 state:D stack:29048 pid: 7087 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7097 can't die for more than 145 seconds.
> task:syz-executor220 state:D stack:28912 pid: 7097 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7097 blocked for more than 146 seconds.
>       Not tainted 5.9.0-rc7-next-20201002-syzkaller #0
> "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
> task:syz-executor220 state:D stack:28912 pid: 7097 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7110 can't die for more than 146 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7110 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7110 blocked for more than 146 seconds.
>       Not tainted 5.9.0-rc7-next-20201002-syzkaller #0
> "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
> task:syz-executor220 state:D stack:29048 pid: 7110 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7111 can't die for more than 147 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7111 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7111 blocked for more than 147 seconds.
>       Not tainted 5.9.0-rc7-next-20201002-syzkaller #0
> "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
> task:syz-executor220 state:D stack:29048 pid: 7111 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7128 can't die for more than 147 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7128 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7128 blocked for more than 147 seconds.
>       Not tainted 5.9.0-rc7-next-20201002-syzkaller #0
> "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
> task:syz-executor220 state:D stack:29048 pid: 7128 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7136 can't die for more than 148 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7136 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7136 blocked for more than 148 seconds.
>       Not tainted 5.9.0-rc7-next-20201002-syzkaller #0
> "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
> task:syz-executor220 state:D stack:29048 pid: 7136 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7149 can't die for more than 148 seconds.
> task:syz-executor220 state:D stack:28912 pid: 7149 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7164 can't die for more than 148 seconds.
> task:syz-executor220 state:D stack:28912 pid: 7164 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7165 can't die for more than 149 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7165 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7178 can't die for more than 149 seconds.
> task:syz-executor220 state:D stack:28912 pid: 7178 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7192 can't die for more than 149 seconds.
> task:syz-executor220 state:D stack:28912 pid: 7192 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7199 can't die for more than 149 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7199 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7215 can't die for more than 150 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7215 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7224 can't die for more than 150 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7224 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7237 can't die for more than 150 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7237 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7241 can't die for more than 150 seconds.
> task:syz-executor220 state:D stack:28912 pid: 7241 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7253 can't die for more than 151 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7253 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7267 can't die for more than 151 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7267 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7270 can't die for more than 151 seconds.
> task:syz-executor220 state:D stack:28912 pid: 7270 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7281 can't die for more than 152 seconds.
> task:syz-executor220 state:D stack:28912 pid: 7281 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7293 can't die for more than 152 seconds.
> task:syz-executor220 state:D stack:28912 pid: 7293 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7310 can't die for more than 152 seconds.
> task:syz-executor220 state:D stack:28648 pid: 7310 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7314 can't die for more than 152 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7314 ppid:  6888
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7342 can't die for more than 153 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7342 ppid:  6887
> flags:0x00004004
> Call Trace:
>  context_switch kernel/sched/core.c:3772 [inline]
>  __schedule+0xec5/0x2200 kernel/sched/core.c:4521
>  schedule+0xcf/0x270 kernel/sched/core.c:4599
>  request_wait_answer+0x505/0x7f0 fs/fuse/dev.c:402
>  __fuse_request_send fs/fuse/dev.c:421 [inline]
>  fuse_simple_request+0x526/0xc10 fs/fuse/dev.c:503
>  fuse_do_getattr+0x226/0xc40 fs/fuse/dir.c:952
>  fuse_update_get_attr fs/fuse/dir.c:988 [inline]
>  fuse_getattr+0x37f/0x430 fs/fuse/dir.c:1723
>  vfs_getattr_nosec+0x246/0x2e0 fs/stat.c:87
>  vfs_getattr fs/stat.c:124 [inline]
>  vfs_statx+0x18d/0x390 fs/stat.c:189
>  vfs_fstatat fs/stat.c:207 [inline]
>  vfs_stat include/linux/fs.h:3148 [inline]
>  __do_sys_newstat+0x91/0x110 fs/stat.c:349
>  do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> RIP: 0033:0x446c99
> Code: Bad RIP value.
> RSP: 002b:00007fafe2cfedb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
> RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c99
> RDX: 0000000000446c99 RSI: 0000000000000000 RDI: 00000000200004c0
> RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
> R13: 00007fff48a82c7f R14: 00007fafe2cff9c0 R15: 0000000000000000
> INFO: task syz-executor220:7349 can't die for more than 153 seconds.
> task:syz-executor220 state:D stack:29048 pid: 7349 ppid:  6888
> flags:0x00004004
> 


      reply	other threads:[~2020-10-07 20:58 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-09-23 12:48 INFO: task can't die in request_wait_answer syzbot
2020-10-05  4:10 ` syzbot
2020-10-07 20:58   ` Qian Cai [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1f950d7fa9446fb55fe8d224bd419084922f867d.camel@redhat.com \
    --to=cai@redhat.com \
    --cc=linux-fsdevel@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=miklos@szeredi.hu \
    --cc=syzbot+ea48ca29949b1820e745@syzkaller.appspotmail.com \
    --cc=syzkaller-bugs@googlegroups.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).