INFO: task syz-executor.0:30979 blocked for more than 430 seconds. Not tainted 6.3.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:0 pid:30979 ppid:30911 flags:0x00000001 Backtrace: [<817d17f4>] (__schedule) from [<817d2468>] (schedule+0x5c/0xac kernel/sched/core.c:6701) r10:85944500 r9:00000000 r8:00000002 r7:00000000 r6:eb869df8 r5:85941700 r4:85941700 [<817d240c>] (schedule) from [<817d761c>] (rt_mutex_slowlock_block.constprop.0+0x38/0x164 kernel/locking/rtmutex.c:1558) r5:85941700 r4:82b29054 [<817d75e4>] (rt_mutex_slowlock_block.constprop.0) from [<817d87e4>] (__rt_mutex_slowlock.constprop.0+0x78/0x258 kernel/locking/rtmutex.c:1626) r10:00000004 r9:85941700 r8:eb869df8 r7:00000002 r6:82b29054 r5:00000000 r4:85941700 r3:eb869df8 [<817d876c>] (__rt_mutex_slowlock.constprop.0) from [<817d8a70>] (__rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1662 [inline]) [<817d876c>] (__rt_mutex_slowlock.constprop.0) from [<817d8a70>] (rt_mutex_slowlock kernel/locking/rtmutex.c:1691 [inline]) [<817d876c>] (__rt_mutex_slowlock.constprop.0) from [<817d8a70>] (__rt_mutex_lock kernel/locking/rtmutex.c:1703 [inline]) [<817d876c>] (__rt_mutex_slowlock.constprop.0) from [<817d8a70>] (__rt_mutex_lock_common kernel/locking/rtmutex_api.c:31 [inline]) [<817d876c>] (__rt_mutex_slowlock.constprop.0) from [<817d8a70>] (rt_mutex_lock+0xac/0xc4 kernel/locking/rtmutex_api.c:71) r9:85941700 r8:00000000 r7:84f6a800 r6:a0000013 r5:82b29054 r4:00000000 [<817d89c4>] (rt_mutex_lock) from [<80f0a37c>] (i2c_adapter_lock_bus+0x14/0x18 drivers/i2c/i2c-core-base.c:823) r6:eb869e90 r5:00000001 r4:82b29040 [<80f0a368>] (i2c_adapter_lock_bus) from [<80f0c0d0>] (i2c_lock_bus include/linux/i2c.h:797 [inline]) [<80f0a368>] (i2c_adapter_lock_bus) from [<80f0c0d0>] (__i2c_lock_bus_helper drivers/i2c/i2c-core.h:44 [inline]) [<80f0a368>] (i2c_adapter_lock_bus) from [<80f0c0d0>] (i2c_transfer+0x94/0x134 drivers/i2c/i2c-core-base.c:2260) [<80f0c03c>] (i2c_transfer) from [<80f0c1c8>] (i2c_transfer_buffer_flags+0x58/0x8c drivers/i2c/i2c-core-base.c:2292) r6:84023f00 r5:00000010 r4:00000000 [<80f0c170>] (i2c_transfer_buffer_flags) from [<80f10d30>] (i2c_master_send include/linux/i2c.h:110 [inline]) [<80f0c170>] (i2c_transfer_buffer_flags) from [<80f10d30>] (i2cdev_write+0x50/0x90 drivers/i2c/i2c-dev.c:175) r4:00000000 [<80f10ce0>] (i2cdev_write) from [<804bc9e8>] (vfs_write+0xb0/0x3bc fs/read_write.c:582) r7:eb869f68 r6:00000000 r5:84023f00 r4:80f10ce0 [<804bc938>] (vfs_write) from [<804bce5c>] (ksys_write+0x68/0xec fs/read_write.c:637) r10:00000004 r9:85941700 r8:80200288 r7:00000000 r6:00000000 r5:84023f00 r4:84023f01 [<804bcdf4>] (ksys_write) from [<804bcef0>] (__do_sys_write fs/read_write.c:649 [inline]) [<804bcdf4>] (ksys_write) from [<804bcef0>] (sys_write+0x10/0x14 fs/read_write.c:646) r7:00000004 r6:0014c2b8 r5:00000000 r4:00000000 [<804bcee0>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xeb869fa8 to 0xeb869ff0) 9fa0: 00000000 00000000 00000004 00000000 00000000 00000000 9fc0: 00000000 00000000 0014c2b8 00000004 7ebbc3c2 76b196d0 7ebbc534 76b1920c 9fe0: 76b19020 76b19010 00017004 0004dfb0 INFO: task syz-executor.0:30982 blocked for more than 430 seconds. Not tainted 6.3.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:0 pid:30982 ppid:30911 flags:0x00000001 Backtrace: [<817d17f4>] (__schedule) from [<817d2468>] (schedule+0x5c/0xac kernel/sched/core.c:6701) r10:00000004 r9:00000000 r8:00000002 r7:00000000 r6:eb875df8 r5:828f7300 r4:828f7300 [<817d240c>] (schedule) from [<817d761c>] (rt_mutex_slowlock_block.constprop.0+0x38/0x164 kernel/locking/rtmutex.c:1558) r5:828f7300 r4:82b29054 [<817d75e4>] (rt_mutex_slowlock_block.constprop.0) from [<817d87e4>] (__rt_mutex_slowlock.constprop.0+0x78/0x258 kernel/locking/rtmutex.c:1626) r10:00000004 r9:828f7300 r8:eb875df8 r7:00000002 r6:82b29054 r5:00000000 r4:828f7300 r3:eb875df8 [<817d876c>] (__rt_mutex_slowlock.constprop.0) from [<817d8a70>] (__rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1662 [inline]) [<817d876c>] (__rt_mutex_slowlock.constprop.0) from [<817d8a70>] (rt_mutex_slowlock kernel/locking/rtmutex.c:1691 [inline]) [<817d876c>] (__rt_mutex_slowlock.constprop.0) from [<817d8a70>] (__rt_mutex_lock kernel/locking/rtmutex.c:1703 [inline]) [<817d876c>] (__rt_mutex_slowlock.constprop.0) from [<817d8a70>] (__rt_mutex_lock_common kernel/locking/rtmutex_api.c:31 [inline]) [<817d876c>] (__rt_mutex_slowlock.constprop.0) from [<817d8a70>] (rt_mutex_lock+0xac/0xc4 kernel/locking/rtmutex_api.c:71) r9:828f7300 r8:00000000 r7:84f6a800 r6:a0000013 r5:82b29054 r4:00000000 [<817d89c4>] (rt_mutex_lock) from [<80f0a37c>] (i2c_adapter_lock_bus+0x14/0x18 drivers/i2c/i2c-core-base.c:823) r6:eb875e90 r5:00000001 r4:82b29040 [<80f0a368>] (i2c_adapter_lock_bus) from [<80f0c0d0>] (i2c_lock_bus include/linux/i2c.h:797 [inline]) [<80f0a368>] (i2c_adapter_lock_bus) from [<80f0c0d0>] (__i2c_lock_bus_helper drivers/i2c/i2c-core.h:44 [inline]) [<80f0a368>] (i2c_adapter_lock_bus) from [<80f0c0d0>] (i2c_transfer+0x94/0x134 drivers/i2c/i2c-core-base.c:2260) [<80f0c03c>] (i2c_transfer) from [<80f0c1c8>] (i2c_transfer_buffer_flags+0x58/0x8c drivers/i2c/i2c-core-base.c:2292) r6:84023f00 r5:00000010 r4:00000000 [<80f0c170>] (i2c_transfer_buffer_flags) from [<80f10d30>] (i2c_master_send include/linux/i2c.h:110 [inline]) [<80f0c170>] (i2c_transfer_buffer_flags) from [<80f10d30>] (i2cdev_write+0x50/0x90 drivers/i2c/i2c-dev.c:175) r4:00000000 [<80f10ce0>] (i2cdev_write) from [<804bc9e8>] (vfs_write+0xb0/0x3bc fs/read_write.c:582) r7:eb875f68 r6:00000000 r5:84023f00 r4:80f10ce0 [<804bc938>] (vfs_write) from [<804bce5c>] (ksys_write+0x68/0xec fs/read_write.c:637) r10:00000004 r9:828f7300 r8:80200288 r7:00000000 r6:00000000 r5:84023f00 r4:84023f01 [<804bcdf4>] (ksys_write) from [<804bcef0>] (__do_sys_write fs/read_write.c:649 [inline]) [<804bcdf4>] (ksys_write) from [<804bcef0>] (sys_write+0x10/0x14 fs/read_write.c:646) r7:00000004 r6:0014c468 r5:00000000 r4:00000000 [<804bcee0>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xeb875fa8 to 0xeb875ff0) 5fa0: 00000000 00000000 00000004 00000000 00000000 00000000 5fc0: 00000000 00000000 0014c468 00000004 7ebbc3c2 76ab66d0 7ebbc534 76ab620c 5fe0: 76ab6020 76ab6010 00017004 0004dfb0 NMI backtrace for cpu 0 CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.3.0-rc6-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<817b1a00>] (dump_backtrace) from [<817b1af4>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:256) r7:00000000 r6:00000013 r5:60000093 r4:81d8fff4 [<817b1adc>] (show_stack) from [<817ce15c>] (__dump_stack lib/dump_stack.c:88 [inline]) [<817b1adc>] (show_stack) from [<817ce15c>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<817ce114>] (dump_stack_lvl) from [<817ce180>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:00000000 r4:00000001 [<817ce168>] (dump_stack) from [<8179f450>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<8179f2f0>] (nmi_cpu_backtrace) from [<8179f5a0>] (nmi_trigger_cpumask_backtrace+0x134/0x1dc lib/nmi_backtrace.c:62) r7:8240c498 r6:00000000 r5:8241a844 r4:00000000 [<8179f46c>] (nmi_trigger_cpumask_backtrace) from [<80210d80>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:854) r9:0005fa40 r8:82404d40 r7:00007f44 r6:82693168 r5:8240c604 r4:87877c64 [<80210d68>] (arch_trigger_cpumask_backtrace) from [<80332d7c>] (trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]) [<80210d68>] (arch_trigger_cpumask_backtrace) from [<80332d7c>] (check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]) [<80210d68>] (arch_trigger_cpumask_backtrace) from [<80332d7c>] (watchdog+0x498/0x59c kernel/hung_task.c:379) [<803328e4>] (watchdog) from [<8026aa94>] (kthread+0xec/0x11c kernel/kthread.c:376) r10:00000000 r9:df819e4c r8:82aa1f00 r7:00000000 r6:803328e4 r5:828fb980 r4:82a39d00 [<8026a9a8>] (kthread) from [<80200100>] (ret_from_fork+0x14/0x34 arch/arm/kernel/entry-common.S:133) Exception stack(0xdf8cdfb0 to 0xdf8cdff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026a9a8 r4:82a39d00 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 2740 Comm: klogd Not tainted 6.3.0-rc6-syzkaller #0 Hardware name: ARM-Versatile Express PC is at __get_obj_cgroup_from_memcg+0xb4/0xd0 mm/memcontrol.c:3009 LR is at get_obj_cgroup_from_current+0x11c/0x1c8 mm/memcontrol.c:3034 pc : [<8049b220>] lr : [<804a269c>] psr: 60070013 sp : ebd6dc30 ip : ebd6dc58 fp : ebd6dc54 r10: ffffffff r9 : 00482cc0 r8 : 8240cac8 r7 : 8240c9ac r6 : 00482cc0 r5 : 00000000 r4 : 82819800 r3 : 82819800 r2 : 00000000 r1 : 00000000 r0 : 82819800 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 8421e400 DAC: 00000000 Backtrace: [<8049b16c>] (__get_obj_cgroup_from_memcg) from [<804a269c>] (get_obj_cgroup_from_current+0x11c/0x1c8 mm/memcontrol.c:3034) r9:00482cc0 r8:00000200 r7:8240c9ac r6:00482cc0 r5:00000000 r4:82819800 [<804a2580>] (get_obj_cgroup_from_current) from [<80494640>] (memcg_slab_pre_alloc_hook mm/slab.h:503 [inline]) [<804a2580>] (get_obj_cgroup_from_current) from [<80494640>] (slab_pre_alloc_hook mm/slab.h:733 [inline]) [<804a2580>] (get_obj_cgroup_from_current) from [<80494640>] (slab_alloc_node mm/slub.c:3434 [inline]) [<804a2580>] (get_obj_cgroup_from_current) from [<80494640>] (__kmem_cache_alloc_node+0x6c/0x304 mm/slub.c:3491) r5:82802240 r4:82802240 [<804945d4>] (__kmem_cache_alloc_node) from [<80436adc>] (__do_kmalloc_node mm/slab_common.c:966 [inline]) [<804945d4>] (__kmem_cache_alloc_node) from [<80436adc>] (__kmalloc_node_track_caller+0x4c/0x26c mm/slab_common.c:987) r10:00482cc0 r9:813007dc r8:ffffffff r7:00482cc0 r6:ebd6dd3b r5:82802240 r4:00000200 [<80436a90>] (__kmalloc_node_track_caller) from [<812ff274>] (kmalloc_reserve+0x68/0xfc net/core/skbuff.c:537) r10:00482cc0 r9:00000200 r8:813007dc r7:ffffffff r6:ebd6dd3b r5:ebd6dd34 r4:00400cc0 [<812ff20c>] (kmalloc_reserve) from [<813007dc>] (__alloc_skb+0x88/0x150 net/core/skbuff.c:606) r10:7fffffff r9:ebd6de18 r8:00400cc0 r7:828a8540 r6:00000000 r5:ffffffff r4:84a8eb40 r3:ebd6dd3b [<81300754>] (__alloc_skb) from [<81306b8c>] (alloc_skb include/linux/skbuff.h:1277 [inline]) [<81300754>] (__alloc_skb) from [<81306b8c>] (alloc_skb_with_frags+0x44/0x1a4 net/core/skbuff.c:6318) r8:00000000 r7:00000080 r6:00000003 r5:00000000 r4:00000fff [<81306b48>] (alloc_skb_with_frags) from [<812fa698>] (sock_alloc_send_pskb+0x21c/0x238 net/core/sock.c:2734) r10:7fffffff r9:ebd6de18 r8:00000000 r7:00000080 r6:8029a914 r5:840bd080 r4:831f3c00 [<812fa47c>] (sock_alloc_send_pskb) from [<815872ac>] (unix_dgram_sendmsg+0x138/0x884 net/unix/af_unix.c:1944) r10:00000000 r9:831f3c00 r8:831f1200 r7:00000080 r6:00000000 r5:82c45680 r4:ebd6dea0 [<81587174>] (unix_dgram_sendmsg) from [<812f3c54>] (sock_sendmsg_nosec net/socket.c:724 [inline]) [<81587174>] (unix_dgram_sendmsg) from [<812f3c54>] (sock_sendmsg+0x44/0x78 net/socket.c:747) r10:00000121 r9:840bd080 r8:80200288 r7:00004000 r6:82c45680 r5:ebd6dea0 r4:00000000 [<812f3c10>] (sock_sendmsg) from [<812f5aa4>] (__sys_sendto+0xd0/0x11c net/socket.c:2142) r7:00004000 r6:00000000 r5:82c45680 r4:00000000 [<812f59d4>] (__sys_sendto) from [<812f5b34>] (__do_sys_send net/socket.c:2164 [inline]) [<812f59d4>] (__sys_sendto) from [<812f5b34>] (sys_send+0x20/0x28 net/socket.c:2161) r7:00000121 r6:00000001 r5:76f4a080 r4:0180d190 [<812f5b14>] (sys_send) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xebd6dfa8 to 0xebd6dff0) dfa0: 0180d190 76f4a080 00000003 01814290 00000080 00004000 dfc0: 0180d190 76f4a080 00000001 00000121 7ed14cb0 00000000 76f4a080 00000000 dfe0: 00000000 7ed14be8 76e7bb88 76e80e78