INFO: task syz-executor.0:11100 blocked for more than 430 seconds. Not tainted 6.9.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:0 pid:11100 tgid:11099 ppid:9877 flags:0x00000005 Call trace: [<8189abc0>] (__schedule) from [<80281ddc>] (__schedule_loop kernel/sched/core.c:6823 [inline]) [<8189abc0>] (__schedule) from [<80281ddc>] (rt_mutex_schedule+0x20/0x38 kernel/sched/core.c:7115) r10:853cbc00 r9:00000000 r8:00000002 r7:00000000 r6:ee7c1db0 r5:84d90000 r4:84d90000 [<80281dbc>] (rt_mutex_schedule) from [<818a123c>] (rt_mutex_slowlock_block.constprop.0+0x38/0x160 kernel/locking/rtmutex.c:1636) r5:84d90000 r4:82f91854 [<818a1204>] (rt_mutex_slowlock_block.constprop.0) from [<818a24c4>] (__rt_mutex_slowlock kernel/locking/rtmutex.c:1704 [inline]) [<818a1204>] (rt_mutex_slowlock_block.constprop.0) from [<818a24c4>] (__rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1740 [inline]) [<818a1204>] (rt_mutex_slowlock_block.constprop.0) from [<818a24c4>] (rt_mutex_slowlock.constprop.0+0xec/0x2cc kernel/locking/rtmutex.c:1778) r10:84b71900 r9:60000013 r8:00000002 r7:ee7c1db0 r6:84d90000 r5:82f91854 r4:00000000 r3:ee7c1db0 [<818a23d8>] (rt_mutex_slowlock.constprop.0) from [<818a2788>] (__rt_mutex_lock kernel/locking/rtmutex.c:1793 [inline]) [<818a23d8>] (rt_mutex_slowlock.constprop.0) from [<818a2788>] (__rt_mutex_lock_common kernel/locking/rtmutex_api.c:31 [inline]) [<818a23d8>] (rt_mutex_slowlock.constprop.0) from [<818a2788>] (rt_mutex_lock+0x44/0x48 kernel/locking/rtmutex_api.c:71) r9:00000000 r8:00000000 r7:00000000 r6:00000004 r5:00000001 r4:82f91840 [<818a2744>] (rt_mutex_lock) from [<80f72fdc>] (i2c_adapter_lock_bus+0x14/0x18 drivers/i2c/i2c-core-base.c:845) [<80f72fc8>] (i2c_adapter_lock_bus) from [<80f78598>] (i2c_lock_bus include/linux/i2c.h:792 [inline]) [<80f72fc8>] (i2c_adapter_lock_bus) from [<80f78598>] (__i2c_lock_bus_helper drivers/i2c/i2c-core.h:46 [inline]) [<80f72fc8>] (i2c_adapter_lock_bus) from [<80f78598>] (i2c_smbus_xfer+0xa4/0x12c drivers/i2c/i2c-core-smbus.c:541) [<80f784f4>] (i2c_smbus_xfer) from [<80f7a320>] (i2cdev_ioctl_smbus+0xdc/0x334 drivers/i2c/i2c-dev.c:381) r8:00000022 r7:20000000 r6:00000001 r5:856c9c00 r4:00000005 [<80f7a244>] (i2cdev_ioctl_smbus) from [<80f7a824>] (i2cdev_ioctl+0x2ac/0x390 drivers/i2c/i2c-dev.c:467) r10:84b71900 r9:84d90000 r8:00000003 r7:20000080 r6:00000720 r5:856c9c00 r4:20000080 [<80f7a578>] (i2cdev_ioctl) from [<8050fbdc>] (vfs_ioctl fs/ioctl.c:51 [inline]) [<80f7a578>] (i2cdev_ioctl) from [<8050fbdc>] (do_vfs_ioctl fs/ioctl.c:858 [inline]) [<80f7a578>] (i2cdev_ioctl) from [<8050fbdc>] (__do_sys_ioctl fs/ioctl.c:902 [inline]) [<80f7a578>] (i2cdev_ioctl) from [<8050fbdc>] (sys_ioctl+0x118/0xc24 fs/ioctl.c:890) r6:84b71901 r5:00000000 r4:00000720 [<8050fac4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xee7c1fa8 to 0xee7c1ff0) 1fa0: 00000000 00000000 00000003 00000720 20000080 00000000 1fc0: 00000000 00000000 0014c2c8 00000036 7e92132e 7e92132f 003d0f00 76b3b0fc 1fe0: 76b3af08 76b3aef8 000167f8 00050bc0 r10:00000036 r9:84d90000 r8:80200288 r7:00000036 r6:0014c2c8 r5:00000000 r4:00000000 NMI backtrace for cpu 1 CPU: 1 PID: 31 Comm: khungtaskd Not tainted 6.9.0-rc1-syzkaller #0 Hardware name: ARM-Versatile Express Call trace: [<8187943c>] (dump_backtrace) from [<81879538>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:256) r7:00000000 r6:00000013 r5:60000093 r4:81fc474c [<81879520>] (show_stack) from [<81896cf0>] (__dump_stack lib/dump_stack.c:88 [inline]) [<81879520>] (show_stack) from [<81896cf0>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:114) [<81896c80>] (dump_stack_lvl) from [<81896d14>] (dump_stack+0x18/0x1c lib/dump_stack.c:123) r5:00000001 r4:00000001 [<81896cfc>] (dump_stack) from [<81866814>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<818666b4>] (nmi_cpu_backtrace) from [<81866960>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8260c590 r5:8261a88c r4:ffffffff [<81866830>] (nmi_trigger_cpumask_backtrace) from [<802105b4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:8260c6f4 r8:00014fc0 r7:8289dfe0 r6:00007eb3 r5:854fbe04 r4:83e40824 [<8021059c>] (arch_trigger_cpumask_backtrace) from [<8034eac8>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<8021059c>] (arch_trigger_cpumask_backtrace) from [<8034eac8>] (check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]) [<8021059c>] (arch_trigger_cpumask_backtrace) from [<8034eac8>] (watchdog+0x480/0x594 kernel/hung_task.c:380) [<8034e648>] (watchdog) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:df819e58 r8:82e98380 r7:00000000 r6:8034e648 r5:82ee8c00 r4:82f421c0 [<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xdf8ddfb0 to 0xdf8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:82f421c0 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 2812 Comm: klogd Not tainted 6.9.0-rc1-syzkaller #0 Hardware name: ARM-Versatile Express PC is at 0x76e0188c LR is at 0x76e03108 pc : [<76e0188c>] lr : [<76e03108>] psr: 20000010 sp : 7efe6b9c ip : 00000000 fp : 7efe6c34 r10: 76eb0e60 r9 : 00001ffd r8 : 00000000 r7 : 7efe6ca4 r6 : 76fd95a0 r5 : 7efe6c14 r4 : 01895ff3 r3 : 000af5bc r2 : 76e95bcc r1 : 00001ffd r0 : 01895ff3 Flags: nzCv IRQs on FIQs on Mode USER_32 ISA ARM Segment user Control: 30c5387d Table: 843698c0 DAC: fffffffd Call trace: invalid frame pointer 0x7efe6c34