INFO: task syz-executor.0:15355 blocked for more than 430 seconds. Not tainted 6.8.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:0 pid:15355 tgid:15354 ppid:13356 flags:0x00000005 Backtrace: [<81884e90>] (__schedule) from [<80281924>] (__schedule_loop kernel/sched/core.c:6813 [inline]) [<81884e90>] (__schedule) from [<80281924>] (rt_mutex_schedule+0x20/0x38 kernel/sched/core.c:7105) r10:845dbc00 r9:00000000 r8:00000002 r7:00000000 r6:eb329df0 r5:845dec00 r4:845dec00 [<80281904>] (rt_mutex_schedule) from [<8188b50c>] (rt_mutex_slowlock_block.constprop.0+0x38/0x160 kernel/locking/rtmutex.c:1636) r5:845dec00 r4:82e1e054 [<8188b4d4>] (rt_mutex_slowlock_block.constprop.0) from [<8188c794>] (__rt_mutex_slowlock kernel/locking/rtmutex.c:1704 [inline]) [<8188b4d4>] (rt_mutex_slowlock_block.constprop.0) from [<8188c794>] (__rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1740 [inline]) [<8188b4d4>] (rt_mutex_slowlock_block.constprop.0) from [<8188c794>] (rt_mutex_slowlock.constprop.0+0xec/0x2cc kernel/locking/rtmutex.c:1778) r10:00000001 r9:60000013 r8:00000002 r7:eb329df0 r6:845dec00 r5:82e1e054 r4:00000000 r3:eb329df0 [<8188c6a8>] (rt_mutex_slowlock.constprop.0) from [<8188ca58>] (__rt_mutex_lock kernel/locking/rtmutex.c:1793 [inline]) [<8188c6a8>] (rt_mutex_slowlock.constprop.0) from [<8188ca58>] (__rt_mutex_lock_common kernel/locking/rtmutex_api.c:31 [inline]) [<8188c6a8>] (rt_mutex_slowlock.constprop.0) from [<8188ca58>] (rt_mutex_lock+0x44/0x48 kernel/locking/rtmutex_api.c:71) r9:850354c0 r8:850354c0 r7:85035400 r6:85035400 r5:00000001 r4:82e1e040 [<8188ca14>] (rt_mutex_lock) from [<80f66934>] (i2c_adapter_lock_bus+0x14/0x18 drivers/i2c/i2c-core-base.c:845) [<80f66920>] (i2c_adapter_lock_bus) from [<80f684e0>] (i2c_lock_bus include/linux/i2c.h:792 [inline]) [<80f66920>] (i2c_adapter_lock_bus) from [<80f684e0>] (__i2c_lock_bus_helper drivers/i2c/i2c-core.h:46 [inline]) [<80f66920>] (i2c_adapter_lock_bus) from [<80f684e0>] (i2c_transfer+0x54/0x140 drivers/i2c/i2c-core-base.c:2297) [<80f6848c>] (i2c_transfer) from [<80f6d780>] (i2cdev_ioctl_rdwr+0x1e8/0x224 drivers/i2c/i2c-dev.c:297) r6:00000001 r5:85035400 r4:8503540c [<80f6d598>] (i2cdev_ioctl_rdwr) from [<80f6e1a4>] (i2cdev_ioctl+0x2d4/0x390 drivers/i2c/i2c-dev.c:458) r10:8541a0c0 r9:845dec00 r8:00000003 r7:20000200 r6:00000707 r5:85395c00 r4:20000200 [<80f6ded0>] (i2cdev_ioctl) from [<8050d3f8>] (vfs_ioctl fs/ioctl.c:51 [inline]) [<80f6ded0>] (i2cdev_ioctl) from [<8050d3f8>] (do_vfs_ioctl fs/ioctl.c:858 [inline]) [<80f6ded0>] (i2cdev_ioctl) from [<8050d3f8>] (__do_sys_ioctl fs/ioctl.c:902 [inline]) [<80f6ded0>] (i2cdev_ioctl) from [<8050d3f8>] (sys_ioctl+0x118/0xc24 fs/ioctl.c:890) r6:8541a0c1 r5:00000000 r4:00000707 [<8050d2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xeb329fa8 to 0xeb329ff0) 9fa0: 00000000 00000000 00000003 00000707 20000200 00000000 9fc0: 00000000 00000000 0014c2c8 00000036 7eb4132e 7eb4132f 003d0f00 76bdd0fc 9fe0: 76bdcf08 76bdcef8 000167f8 00050bc0 r10:00000036 r9:845dec00 r8:80200288 r7:00000036 r6:0014c2c8 r5:00000000 r4:00000000 NMI backtrace for cpu 1 CPU: 1 PID: 31 Comm: khungtaskd Not tainted 6.8.0-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<81863744>] (dump_backtrace) from [<81863840>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:256) r7:00000000 r6:00000013 r5:60000093 r4:81fc0f0c [<81863828>] (show_stack) from [<81880fc4>] (__dump_stack lib/dump_stack.c:88 [inline]) [<81863828>] (show_stack) from [<81880fc4>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:114) [<81880f54>] (dump_stack_lvl) from [<81880fe8>] (dump_stack+0x18/0x1c lib/dump_stack.c:123) r5:00000001 r4:00000001 [<81880fd0>] (dump_stack) from [<81850b1c>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<818509bc>] (nmi_cpu_backtrace) from [<81850c68>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8260c590 r5:8261a88c r4:ffffffff [<81850b38>] (nmi_trigger_cpumask_backtrace) from [<80210574>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:8260c6f4 r8:00065802 r7:8289cfe0 r6:00007f0e r5:841eee04 r4:83418e24 [<8021055c>] (arch_trigger_cpumask_backtrace) from [<8034df78>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<8021055c>] (arch_trigger_cpumask_backtrace) from [<8034df78>] (check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]) [<8021055c>] (arch_trigger_cpumask_backtrace) from [<8034df78>] (watchdog+0x480/0x594 kernel/hung_task.c:380) [<8034daf8>] (watchdog) from [<8026fd30>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:df819e58 r8:82ea0440 r7:00000000 r6:8034daf8 r5:82ee9800 r4:82f4a0c0 [<8026fc2c>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xdf8ddfb0 to 0xdf8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fc2c r4:82f4a0c0 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 18980 Comm: rm Not tainted 6.8.0-syzkaller #0 Hardware name: ARM-Versatile Express PC is at mmiocpy+0x44/0x330 arch/arm/lib/copy_template.S:104 LR is at 0x0 pc : [<81835464>] lr : [<00000000>] psr: 20000013 sp : ee7c1c4c ip : 00000000 fp : ee7c1db4 r10: 85dfb000 r9 : 00000000 r8 : 00000000 r7 : ee7c1c88 r6 : 00000000 r5 : 00000000 r4 : 00000000 r3 : 00000000 r2 : 00000040 r1 : ee7c1cc4 r0 : 84396840 Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 86841a00 DAC: fffffffd Backtrace: [<81843e7c>] (mas_wr_node_store) from [<8184eef4>] (mas_wr_modify lib/maple_tree.c:4189 [inline]) [<81843e7c>] (mas_wr_node_store) from [<8184eef4>] (mas_wr_store_entry lib/maple_tree.c:4229 [inline]) [<81843e7c>] (mas_wr_node_store) from [<8184eef4>] (mas_erase+0x364/0x500 lib/maple_tree.c:6265) r10:82912040 r9:84d91530 r8:ee7c1e28 r7:ee7c1e28 r6:00000001 r5:00000000 r4:00000002 [<8184eb90>] (mas_erase) from [<8184f0f8>] (mtree_erase+0x68/0x174 lib/maple_tree.c:6593) r10:848c0e10 r9:84d91530 r8:ee7c1f44 r7:ee7c1e28 r6:85dfb000 r5:84000834 r4:848c0e10 [<8184f090>] (mtree_erase) from [<8052c19c>] (simple_offset_remove+0x20/0x2c fs/libfs.c:312) r8:ee7c1f44 r7:84d914a8 r6:84000878 r5:848c0e10 r4:848c0e10 [<8052c17c>] (simple_offset_remove) from [<804530b0>] (shmem_unlink+0x54/0x11c mm/shmem.c:3397) r5:848c0e10 r4:84000878 [<8045305c>] (shmem_unlink) from [<8050472c>] (vfs_unlink+0x128/0x2d8 fs/namei.c:4338) r9:84d91530 r8:ee7c1f44 r7:84d914a8 r6:84000878 r5:00000000 r4:848c0e10 [<80504604>] (vfs_unlink) from [<8050a4ec>] (do_unlinkat+0x270/0x2d8 fs/namei.c:4402) r9:84d914a8 r8:00000000 r7:ffffff9c r6:835b9000 r5:00000000 r4:00000000 [<8050a27c>] (do_unlinkat) from [<8050a5d4>] (__do_sys_unlink fs/namei.c:4450 [inline]) [<8050a27c>] (do_unlinkat) from [<8050a5d4>] (sys_unlink+0x24/0x28 fs/namei.c:4448) r10:0000000a r9:85dfb000 r8:80200288 r7:0000000a r6:00000008 r5:00000008 r4:7eb64ea2 [<8050a5b0>] (sys_unlink) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xee7c1fa8 to 0xee7c1ff0) 1fa0: 7eb64ea2 00000008 7eb64ea2 773598fa 33428f00 00008000 1fc0: 7eb64ea2 00000008 00000008 0000000a 76f6794c 004705d4 76fabd00 76fac010 1fe0: 76f67ae8 7eb64b6c 76f2cbf0 76decb4c