INFO: task syz-executor.1:24564 blocked for more than 430 seconds. Not tainted 6.8.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:24564 tgid:24563 ppid:24100 flags:0x00000005 Backtrace: [<81884e90>] (__schedule) from [<80281924>] (__schedule_loop kernel/sched/core.c:6813 [inline]) [<81884e90>] (__schedule) from [<80281924>] (rt_mutex_schedule+0x20/0x38 kernel/sched/core.c:7105) r10:85343000 r9:00000000 r8:00000002 r7:00000000 r6:ebd49df0 r5:8532ec00 r4:8532ec00 [<80281904>] (rt_mutex_schedule) from [<8188b50c>] (rt_mutex_slowlock_block.constprop.0+0x38/0x160 kernel/locking/rtmutex.c:1636) r5:8532ec00 r4:82fa6454 [<8188b4d4>] (rt_mutex_slowlock_block.constprop.0) from [<8188c794>] (__rt_mutex_slowlock kernel/locking/rtmutex.c:1704 [inline]) [<8188b4d4>] (rt_mutex_slowlock_block.constprop.0) from [<8188c794>] (__rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1740 [inline]) [<8188b4d4>] (rt_mutex_slowlock_block.constprop.0) from [<8188c794>] (rt_mutex_slowlock.constprop.0+0xec/0x2cc kernel/locking/rtmutex.c:1778) r10:00000004 r9:60000013 r8:00000002 r7:ebd49df0 r6:8532ec00 r5:82fa6454 r4:00000000 r3:ebd49df0 [<8188c6a8>] (rt_mutex_slowlock.constprop.0) from [<8188ca58>] (__rt_mutex_lock kernel/locking/rtmutex.c:1793 [inline]) [<8188c6a8>] (rt_mutex_slowlock.constprop.0) from [<8188ca58>] (__rt_mutex_lock_common kernel/locking/rtmutex_api.c:31 [inline]) [<8188c6a8>] (rt_mutex_slowlock.constprop.0) from [<8188ca58>] (rt_mutex_lock+0x44/0x48 kernel/locking/rtmutex_api.c:71) r9:854ade0c r8:854ade00 r7:854ad940 r6:854ad940 r5:00000004 r4:82fa6440 [<8188ca14>] (rt_mutex_lock) from [<80f66934>] (i2c_adapter_lock_bus+0x14/0x18 drivers/i2c/i2c-core-base.c:845) [<80f66920>] (i2c_adapter_lock_bus) from [<80f684e0>] (i2c_lock_bus include/linux/i2c.h:792 [inline]) [<80f66920>] (i2c_adapter_lock_bus) from [<80f684e0>] (__i2c_lock_bus_helper drivers/i2c/i2c-core.h:46 [inline]) [<80f66920>] (i2c_adapter_lock_bus) from [<80f684e0>] (i2c_transfer+0x54/0x140 drivers/i2c/i2c-core-base.c:2297) [<80f6848c>] (i2c_transfer) from [<80f6d780>] (i2cdev_ioctl_rdwr+0x1e8/0x224 drivers/i2c/i2c-dev.c:297) r6:00000004 r5:854ad940 r4:854ad970 [<80f6d598>] (i2cdev_ioctl_rdwr) from [<80f6e1a4>] (i2cdev_ioctl+0x2d4/0x390 drivers/i2c/i2c-dev.c:458) r10:84574300 r9:8532ec00 r8:00000004 r7:20000300 r6:00000707 r5:84e07400 r4:20000300 [<80f6ded0>] (i2cdev_ioctl) from [<8050d3e8>] (vfs_ioctl fs/ioctl.c:51 [inline]) [<80f6ded0>] (i2cdev_ioctl) from [<8050d3e8>] (do_vfs_ioctl fs/ioctl.c:858 [inline]) [<80f6ded0>] (i2cdev_ioctl) from [<8050d3e8>] (__do_sys_ioctl fs/ioctl.c:902 [inline]) [<80f6ded0>] (i2cdev_ioctl) from [<8050d3e8>] (sys_ioctl+0x118/0xc24 fs/ioctl.c:890) r6:84574301 r5:00000000 r4:00000707 [<8050d2d0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xebd49fa8 to 0xebd49ff0) 9fa0: 00000000 00000000 00000004 00000707 20000300 00000000 9fc0: 00000000 00000000 0014c2c8 00000036 7efcf32e 7efcf32f 003d0f00 76bc30fc 9fe0: 76bc2f08 76bc2ef8 000167f8 00050bc0 r10:00000036 r9:8532ec00 r8:80200288 r7:00000036 r6:0014c2c8 r5:00000000 r4:00000000 NMI backtrace for cpu 0 CPU: 0 PID: 31 Comm: khungtaskd Not tainted 6.8.0-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<81863744>] (dump_backtrace) from [<81863840>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:256) r7:00000000 r6:00000013 r5:60000093 r4:81fc108c [<81863828>] (show_stack) from [<81880fc4>] (__dump_stack lib/dump_stack.c:88 [inline]) [<81863828>] (show_stack) from [<81880fc4>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:114) [<81880f54>] (dump_stack_lvl) from [<81880fe8>] (dump_stack+0x18/0x1c lib/dump_stack.c:123) r5:00000000 r4:00000001 [<81880fd0>] (dump_stack) from [<81850b1c>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<818509bc>] (nmi_cpu_backtrace) from [<81850c68>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000000 r6:8260c590 r5:8261a88c r4:ffffffff [<81850b38>] (nmi_trigger_cpumask_backtrace) from [<80210574>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:8260c6f4 r8:00028740 r7:8289cfe0 r6:00007f1d r5:83fee204 r4:835eda24 [<8021055c>] (arch_trigger_cpumask_backtrace) from [<8034df68>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<8021055c>] (arch_trigger_cpumask_backtrace) from [<8034df68>] (check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]) [<8021055c>] (arch_trigger_cpumask_backtrace) from [<8034df68>] (watchdog+0x480/0x594 kernel/hung_task.c:380) [<8034dae8>] (watchdog) from [<8026fd30>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:df819e58 r8:82f20c00 r7:00000000 r6:8034dae8 r5:82e58c00 r4:82ec6940 [<8026fc2c>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xdf8ddfb0 to 0xdf8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fc2c r4:82ec6940 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 24034 Comm: syz-executor.1 Not tainted 6.8.0-syzkaller #0 Hardware name: ARM-Versatile Express PC is at sclhi+0x64/0xa8 drivers/i2c/algos/i2c-algo-bit.c:86 LR is at sclhi+0x64/0xa8 drivers/i2c/algos/i2c-algo-bit.c:86 pc : [<80f6ed0c>] lr : [<80f6ed0c>] psr: 20000013 sp : ead49d68 ip : ead49d68 fp : ead49d8c r10: 00000106 r9 : 8219bf8c r8 : 000000f6 r7 : 000000f6 r6 : 00028731 r5 : 82604d40 r4 : 82fa66e0 r3 : df8d6000 r2 : 00000064 r1 : 00000000 r0 : 00000000 Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 82f39840 DAC: 00000000 Backtrace: [<80f6eca8>] (sclhi) from [<80f6f424>] (i2c_outb+0x58/0x118 drivers/i2c/algos/i2c-algo-bit.c:164) r6:8219bf8c r5:00000006 r4:82fa66e0 [<80f6f3cc>] (i2c_outb) from [<80f6f544>] (try_address+0x60/0x88 drivers/i2c/algos/i2c-algo-bit.c:326) r7:82fa6440 r6:7fffffff r5:82fa66e0 r4:ffffff92 [<80f6f4e4>] (try_address) from [<80f6f744>] (bit_doAddress drivers/i2c/algos/i2c-algo-bit.c:512 [inline]) [<80f6f4e4>] (try_address) from [<80f6f744>] (bit_xfer+0x1d8/0x57c drivers/i2c/algos/i2c-algo-bit.c:552) r10:82fa66e0 r9:7fffffff r8:0001b84f r7:82fa66e0 r6:00000000 r5:00000200 r4:00000000 r3:0000fffb [<80f6f56c>] (bit_xfer) from [<80f67e08>] (__i2c_transfer drivers/i2c/i2c-core-base.c:2240 [inline]) [<80f6f56c>] (bit_xfer) from [<80f67e08>] (__i2c_transfer+0x190/0x814 drivers/i2c/i2c-core-base.c:2205) r10:84d62500 r9:82604d40 r8:0001b84f r7:00000000 r6:00000004 r5:8260c540 r4:82fa6440 [<80f67c78>] (__i2c_transfer) from [<80f684f0>] (i2c_transfer+0x64/0x140 drivers/i2c/i2c-core-base.c:2301) r10:00000004 r9:84d6294c r8:84d62940 r7:84d62500 r6:84d62500 r5:00000004 r4:82fa6440 [<80f6848c>] (i2c_transfer) from [<80f6d780>] (i2cdev_ioctl_rdwr+0x1e8/0x224 drivers/i2c/i2c-dev.c:297) r6:00000004 r5:84d62500 r4:84d62530 [<80f6d598>] (i2cdev_ioctl_rdwr) from [<80f6e1a4>] (i2cdev_ioctl+0x2d4/0x390 drivers/i2c/i2c-dev.c:458) r10:851c69c0 r9:85343000 r8:00000004 r7:20000300 r6:00000707 r5:851b5000 r4:20000300 [<80f6ded0>] (i2cdev_ioctl) from [<8050d3e8>] (vfs_ioctl fs/ioctl.c:51 [inline]) [<80f6ded0>] (i2cdev_ioctl) from [<8050d3e8>] (do_vfs_ioctl fs/ioctl.c:858 [inline]) [<80f6ded0>] (i2cdev_ioctl) from [<8050d3e8>] (__do_sys_ioctl fs/ioctl.c:902 [inline]) [<80f6ded0>] (i2cdev_ioctl) from [<8050d3e8>] (sys_ioctl+0x118/0xc24 fs/ioctl.c:890) r6:851c69c1 r5:00000000 r4:00000707 [<8050d2d0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xead49fa8 to 0xead49ff0) 9fa0: 00000000 00000000 00000004 00000707 20000300 00000000 9fc0: 00000000 00000000 0014c2c8 00000036 7eb1a32e 7eb1a32f 003d0f00 76b450fc 9fe0: 76b44f08 76b44ef8 000167f8 00050bc0 r10:00000036 r9:85343000 r8:80200288 r7:00000036 r6:0014c2c8 r5:00000000 r4:00000000