INFO: task syz.5.2589:19433 blocked for more than 430 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.2589 state:D stack:0 pid:19433 tgid:19432 ppid:18658 task_flags:0x400040 flags:0x00000001 Call trace: [<81ab1e1c>] (__schedule) from [<80298848>] (__schedule_loop kernel/sched/core.c:6945 [inline]) [<81ab1e1c>] (__schedule) from [<80298848>] (rt_mutex_schedule+0x20/0x38 kernel/sched/core.c:7241) r10:8ac00000 r9:00000002 r8:00000000 r7:dfcc5dd8 r6:dfcc5de0 r5:8ac03c00 r4:8ac03c00 [<80298828>] (rt_mutex_schedule) from [<81ab9924>] (rt_mutex_slowlock_block.constprop.0+0x40/0x1d4 kernel/locking/rtmutex.c:1647) r5:8ac03c00 r4:83330854 [<81ab98e4>] (rt_mutex_slowlock_block.constprop.0) from [<81abac7c>] (__rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline]) [<81ab98e4>] (rt_mutex_slowlock_block.constprop.0) from [<81abac7c>] (__rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1760 [inline]) [<81ab98e4>] (rt_mutex_slowlock_block.constprop.0) from [<81abac7c>] (rt_mutex_slowlock.constprop.0+0xd4/0x364 kernel/locking/rtmutex.c:1800) r10:60000013 r9:dfcc5de0 r8:00000002 r7:dfcc5dd8 r6:83330854 r5:00000000 r4:8ac03c00 [<81ababa8>] (rt_mutex_slowlock.constprop.0) from [<81abaff0>] (__rt_mutex_lock kernel/locking/rtmutex.c:1815 [inline]) [<81ababa8>] (rt_mutex_slowlock.constprop.0) from [<81abaff0>] (__rt_mutex_lock_common kernel/locking/rtmutex_api.c:49 [inline]) [<81ababa8>] (rt_mutex_slowlock.constprop.0) from [<81abaff0>] (rt_mutex_lock+0x44/0x48 kernel/locking/rtmutex_api.c:89) r10:84da2080 r9:00000001 r8:84df2400 r7:84da2100 r6:84da2100 r5:00000001 r4:83330840 [<81abafac>] (rt_mutex_lock) from [<81118f98>] (i2c_adapter_lock_bus+0x14/0x18 drivers/i2c/i2c-core-base.c:849) [<81118f84>] (i2c_adapter_lock_bus) from [<8111ae8c>] (i2c_lock_bus include/linux/i2c.h:809 [inline]) [<81118f84>] (i2c_adapter_lock_bus) from [<8111ae8c>] (__i2c_lock_bus_helper drivers/i2c/i2c-core.h:46 [inline]) [<81118f84>] (i2c_adapter_lock_bus) from [<8111ae8c>] (i2c_transfer+0x9c/0x110 drivers/i2c/i2c-core-base.c:2313) [<8111adf0>] (i2c_transfer) from [<81120314>] (i2cdev_ioctl_rdwr+0x228/0x258 drivers/i2c/i2c-dev.c:306) r6:84da2100 r5:00000001 r4:84da210c [<811200ec>] (i2cdev_ioctl_rdwr) from [<81120e90>] (i2cdev_ioctl+0x354/0x418 drivers/i2c/i2c-dev.c:467) r10:8ac03c00 r9:00000004 r8:8aab16c0 r7:00000707 r6:84da2100 r5:84df2400 r4:20000080 [<81120b3c>] (i2cdev_ioctl) from [<805854f4>] (vfs_ioctl fs/ioctl.c:51 [inline]) [<81120b3c>] (i2cdev_ioctl) from [<805854f4>] (do_vfs_ioctl fs/ioctl.c:551 [inline]) [<81120b3c>] (i2cdev_ioctl) from [<805854f4>] (__do_sys_ioctl fs/ioctl.c:595 [inline]) [<81120b3c>] (i2cdev_ioctl) from [<805854f4>] (sys_ioctl+0x130/0xba0 fs/ioctl.c:583) r7:20000080 r6:8aab16c1 r5:00000000 r4:00000707 [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfcc5fa8 to 0xdfcc5ff0) 5fa0: 00000000 00000000 00000004 00000707 20000080 00000000 5fc0: 00000000 00000000 00316310 00000036 00300000 00000000 00006364 76f840bc 5fe0: 76f83ec0 76f83eb0 0001929c 00132320 r10:00000036 r9:8ac03c00 r8:8020029c r7:00000036 r6:00316310 r5:00000000 r4:00000000 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express Call trace: [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00010013 r5:60010093 r4:8229592c [<80201b58>] (show_stack) from [<8021ee34>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000000 r4:00000001 [<8021ee40>] (dump_stack) from [<81a9b900>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81a9b7a0>] (nmi_cpu_backtrace) from [<81a9ba4c>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000000 r6:8280c710 r5:8281af5c r4:ffffffff [<81a9b91c>] (nmi_trigger_cpumask_backtrace) from [<8022f818>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:00007ef3 r8:8280c890 r7:00048540 r6:00007ef3 r5:82ac27e4 r4:00000048 [<8022f800>] (arch_trigger_cpumask_backtrace) from [<81aa355c>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<8022f800>] (arch_trigger_cpumask_backtrace) from [<81aa355c>] (__sys_info lib/sys_info.c:157 [inline]) [<8022f800>] (arch_trigger_cpumask_backtrace) from [<81aa355c>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81aa34f4>] (sys_info) from [<80383748>] (check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]) [<81aa34f4>] (sys_info) from [<80383748>] (watchdog+0x464/0x8a0 kernel/hung_task.c:515) r5:82ac27e4 r4:8325480c [<803832e4>] (watchdog) from [<8027f6fc>] (kthread+0x12c/0x280 kernel/kthread.c:463) r10:00000000 r9:00000000 r8:803832e4 r7:8335af80 r6:8335af80 r5:8321d400 r4:00000001 [<8027f5d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5d0 r4:832c0e40 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 3092 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express PC is at rw_verify_area+0x50/0x1a8 fs/read_write.c:473 LR is at vfs_write+0x6c/0x44c fs/read_write.c:677 pc : [<80568010>] lr : [<8056adf8>] psr: 60000013 sp : df95dea0 ip : df95ded8 fp : df95ded4 r10: 00000004 r9 : 7e97c67c r8 : 00000000 r7 : 00000002 r6 : 84c126c0 r5 : 00000000 r4 : 00000020 r3 : 00000020 r2 : 00000000 r1 : 84c126c0 r0 : 00000001 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 84d87040 DAC: 00000000 Call trace: [<80567fc0>] (rw_verify_area) from [<8056adf8>] (vfs_write+0x6c/0x44c fs/read_write.c:677) r9:7e97c67c r8:00000000 r7:83840000 r6:00000020 r5:84c126c0 r4:84c126c0 [<8056ad8c>] (vfs_write) from [<8056b39c>] (ksys_write+0xc8/0xe8 fs/read_write.c:738) r10:00000004 r9:83840000 r8:8020029c r7:00000020 r6:7e97c67c r5:84c126c0 r4:84c126c0 [<8056b2d4>] (ksys_write) from [<8056b3cc>] (__do_sys_write fs/read_write.c:749 [inline]) [<8056b2d4>] (ksys_write) from [<8056b3cc>] (sys_write+0x10/0x14 fs/read_write.c:746) r7:00000004 r6:002eec68 r5:7e97c67c r4:00000020 [<8056b3bc>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdf95dfa8 to 0xdf95dff0) dfa0: 00000020 7e97c67c 00000002 7e97c67c 00000020 00000001 dfc0: 00000020 7e97c67c 002eec68 00000004 00000020 002efa6c 02775000 7e97e760 dfe0: 00000158 7e97c540 00104208 00130278 INFO: task syz.5.2589:19433 blocked for more than 450 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.2589 state:D stack:0 pid:19433 tgid:19432 ppid:18658 task_flags:0x400040 flags:0x00000001 Call trace: [<81ab1e1c>] (__schedule) from [<80298848>] (__schedule_loop kernel/sched/core.c:6945 [inline]) [<81ab1e1c>] (__schedule) from [<80298848>] (rt_mutex_schedule+0x20/0x38 kernel/sched/core.c:7241) r10:8ac00000 r9:00000002 r8:00000000 r7:dfcc5dd8 r6:dfcc5de0 r5:8ac03c00 r4:8ac03c00 [<80298828>] (rt_mutex_schedule) from [<81ab9924>] (rt_mutex_slowlock_block.constprop.0+0x40/0x1d4 kernel/locking/rtmutex.c:1647) r5:8ac03c00 r4:83330854 [<81ab98e4>] (rt_mutex_slowlock_block.constprop.0) from [<81abac7c>] (__rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline]) [<81ab98e4>] (rt_mutex_slowlock_block.constprop.0) from [<81abac7c>] (__rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1760 [inline]) [<81ab98e4>] (rt_mutex_slowlock_block.constprop.0) from [<81abac7c>] (rt_mutex_slowlock.constprop.0+0xd4/0x364 kernel/locking/rtmutex.c:1800) r10:60000013 r9:dfcc5de0 r8:00000002 r7:dfcc5dd8 r6:83330854 r5:00000000 r4:8ac03c00 [<81ababa8>] (rt_mutex_slowlock.constprop.0) from [<81abaff0>] (__rt_mutex_lock kernel/locking/rtmutex.c:1815 [inline]) [<81ababa8>] (rt_mutex_slowlock.constprop.0) from [<81abaff0>] (__rt_mutex_lock_common kernel/locking/rtmutex_api.c:49 [inline]) [<81ababa8>] (rt_mutex_slowlock.constprop.0) from [<81abaff0>] (rt_mutex_lock+0x44/0x48 kernel/locking/rtmutex_api.c:89) r10:84da2080 r9:00000001 r8:84df2400 r7:84da2100 r6:84da2100 r5:00000001 r4:83330840 [<81abafac>] (rt_mutex_lock) from [<81118f98>] (i2c_adapter_lock_bus+0x14/0x18 drivers/i2c/i2c-core-base.c:849) [<81118f84>] (i2c_adapter_lock_bus) from [<8111ae8c>] (i2c_lock_bus include/linux/i2c.h:809 [inline]) [<81118f84>] (i2c_adapter_lock_bus) from [<8111ae8c>] (__i2c_lock_bus_helper drivers/i2c/i2c-core.h:46 [inline]) [<81118f84>] (i2c_adapter_lock_bus) from [<8111ae8c>] (i2c_transfer+0x9c/0x110 drivers/i2c/i2c-core-base.c:2313) [<8111adf0>] (i2c_transfer) from [<81120314>] (i2cdev_ioctl_rdwr+0x228/0x258 drivers/i2c/i2c-dev.c:306) r6:84da2100 r5:00000001 r4:84da210c [<811200ec>] (i2cdev_ioctl_rdwr) from [<81120e90>] (i2cdev_ioctl+0x354/0x418 drivers/i2c/i2c-dev.c:467) r10:8ac03c00 r9:00000004 r8:8aab16c0 r7:00000707 r6:84da2100 r5:84df2400 r4:20000080 [<81120b3c>] (i2cdev_ioctl) from [<805854f4>] (vfs_ioctl fs/ioctl.c:51 [inline]) [<81120b3c>] (i2cdev_ioctl) from [<805854f4>] (do_vfs_ioctl fs/ioctl.c:551 [inline]) [<81120b3c>] (i2cdev_ioctl) from [<805854f4>] (__do_sys_ioctl fs/ioctl.c:595 [inline]) [<81120b3c>] (i2cdev_ioctl) from [<805854f4>] (sys_ioctl+0x130/0xba0 fs/ioctl.c:583) r7:20000080 r6:8aab16c1 r5:00000000 r4:00000707 [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfcc5fa8 to 0xdfcc5ff0) 5fa0: 00000000 00000000 00000004 00000707 20000080 00000000 5fc0: 00000000 00000000 00316310 00000036 00300000 00000000 00006364 76f840bc 5fe0: 76f83ec0 76f83eb0 0001929c 00132320 r10:00000036 r9:8ac03c00 r8:8020029c r7:00000036 r6:00316310 r5:00000000 r4:00000000 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express Call trace: [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00000113 r5:60000193 r4:8229592c [<80201b58>] (show_stack) from [<8021ee34>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000001 r4:00000001 [<8021ee40>] (dump_stack) from [<81a9b900>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81a9b7a0>] (nmi_cpu_backtrace) from [<81a9ba4c>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8280c710 r5:8281af5c r4:ffffffff [<81a9b91c>] (nmi_trigger_cpumask_backtrace) from [<8022f818>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:00007f14 r8:8280c890 r7:00048d40 r6:00007f14 r5:82ac27e4 r4:00000048 [<8022f800>] (arch_trigger_cpumask_backtrace) from [<81aa355c>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<8022f800>] (arch_trigger_cpumask_backtrace) from [<81aa355c>] (__sys_info lib/sys_info.c:157 [inline]) [<8022f800>] (arch_trigger_cpumask_backtrace) from [<81aa355c>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81aa34f4>] (sys_info) from [<80383748>] (check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]) [<81aa34f4>] (sys_info) from [<80383748>] (watchdog+0x464/0x8a0 kernel/hung_task.c:515) r5:82ac27e4 r4:8323ff0c [<803832e4>] (watchdog) from [<8027f6fc>] (kthread+0x12c/0x280 kernel/kthread.c:463) r10:00000000 r9:00000000 r8:803832e4 r7:8335af80 r6:8335af80 r5:8321d400 r4:00000001 [<8027f5d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5d0 r4:832c0e40 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 2908 Comm: klogd Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express PC is at __kmalloc_node_track_caller_noprof+0x0/0x574 mm/slub.c:5763 LR is at kmalloc_reserve+0x68/0xfc net/core/skbuff.c:608 pc : [<8051c050>] lr : [<815a3374>] psr: 200e0013 sp : ebad1d10 ip : ebad1d10 fp : ebad1d3c r10: 00482cc0 r9 : 00000200 r8 : 815a49f8 r7 : ffffffff r6 : ebad1d4b r5 : ebad1d44 r4 : 00400cc0 r3 : 815a49f8 r2 : ffffffff r1 : 00482cc0 r0 : 00000200 Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 84bc4b40 DAC: fffffffd Call trace: [<815a330c>] (kmalloc_reserve) from [<815a49f8>] (__alloc_skb+0xb0/0x198 net/core/skbuff.c:690) r10:ebad1e20 r9:00000000 r8:00400cc0 r7:830b0c00 r6:00000000 r5:ffffffff r4:8adb70c0 r3:ebad1d4b [<815a4948>] (__alloc_skb) from [<815ad4ec>] (alloc_skb include/linux/skbuff.h:1383 [inline]) [<815a4948>] (__alloc_skb) from [<815ad4ec>] (alloc_skb_with_frags+0x44/0x1ec net/core/skbuff.c:6712) r8:802c0eb0 r7:ebad1dcc r6:00000000 r5:00001000 r4:00000003 [<815ad4a8>] (alloc_skb_with_frags) from [<8159d4e8>] (sock_alloc_send_pskb+0x1f4/0x228 net/core/sock.c:2995) r10:ebad1e20 r9:00000000 r8:802c0eb0 r7:ebad1dcc r6:83846000 r5:7fffffff r4:84dfc340 [<8159d2f4>] (sock_alloc_send_pskb) from [<8187f8a0>] (unix_dgram_sendmsg+0x128/0x708 net/unix/af_unix.c:2130) r10:0000005b r9:84bc5c00 r8:83846000 r7:84dfc340 r6:00000000 r5:0000005b r4:ebad1e98 [<8187f778>] (unix_dgram_sendmsg) from [<8159693c>] (sock_sendmsg_nosec net/socket.c:727 [inline]) [<8187f778>] (unix_dgram_sendmsg) from [<8159693c>] (__sock_sendmsg+0x44/0x78 net/socket.c:742) r10:00000121 r9:84bc5c00 r8:84bc5c00 r7:00000000 r6:83461180 r5:ebad1e98 r4:00000000 [<815968f8>] (__sock_sendmsg) from [<81598f9c>] (__sys_sendto+0x110/0x160 net/socket.c:2206) r7:00000000 r6:83461180 r5:00004000 r4:00000000 [<81598e8c>] (__sys_sendto) from [<81599030>] (__do_sys_send net/socket.c:2223 [inline]) [<81598e8c>] (__sys_sendto) from [<81599030>] (sys_send+0x20/0x28 net/socket.c:2220) r9:83846000 r8:8020029c r7:00000121 r6:7e9e0858 r5:00000000 r4:00000000 [<81599010>] (sys_send) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xebad1fa8 to 0xebad1ff0) 1fa0: 00000000 00000000 00000003 7e9e0858 0000005b 00004000 1fc0: 00000000 00000000 7e9e0858 00000121 7e9e0858 00000040 0000005b 00000000 1fe0: 00000001 7e9e0770 00000000 76db0590