INFO: task kworker/u4:7:15034 blocked for more than 430 seconds. Not tainted 6.3.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:7 state:D stack:0 pid:15034 ppid:2 flags:0x00000000 Workqueue: nfc2_nci_rx_wq nci_rx_work Backtrace: [<817d231c>] (__schedule) from [<817d2f90>] (schedule+0x5c/0xac kernel/sched/core.c:6701) r10:84264605 r9:8240c498 r8:84f31860 r7:ee349d9c r6:00000002 r5:833c0b80 r4:833c0b80 [<817d2f34>] (schedule) from [<817d3520>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6760) r5:833c0b80 r4:84f3185c [<817d3508>] (schedule_preempt_disabled) from [<817d5f1c>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<817d3508>] (schedule_preempt_disabled) from [<817d5f1c>] (__mutex_lock.constprop.0+0x2f4/0xaf4 kernel/locking/mutex.c:747) [<817d5c28>] (__mutex_lock.constprop.0) from [<817d67f0>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:84264605 r9:81a4e8d4 r8:84f3185c r7:00000000 r6:00000000 r5:849ff0fc r4:84f31800 [<817d67dc>] (__mutex_lock_slowpath) from [<817d6830>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<817d67f4>] (mutex_lock) from [<81732d70>] (device_lock include/linux/device.h:832 [inline]) [<817d67f4>] (mutex_lock) from [<81732d70>] (nfc_targets_found+0x5c/0x12c net/nfc/core.c:778) [<81732d14>] (nfc_targets_found) from [<81742e48>] (nci_rf_discover_ntf_packet net/nfc/nci/ntf.c:390 [inline]) [<81732d14>] (nfc_targets_found) from [<81742e48>] (nci_ntf_packet+0x940/0xe18 net/nfc/nci/ntf.c:798) r8:00000001 r7:00000000 r6:849ff000 r5:852ac000 r4:00000103 [<81742508>] (nci_ntf_packet) from [<8173fc24>] (nci_rx_work+0x70/0xe8 net/nfc/nci/core.c:1517) r10:84264605 r9:81a4e8d4 r8:81f53d34 r7:849ff0a4 r6:849ff070 r5:849ff000 r4:852ac000 [<8173fbb4>] (nci_rx_work) from [<802634a8>] (process_one_work+0x20c/0x594 kernel/workqueue.c:2390) r9:833c0b80 r8:00000100 r7:84264600 r6:8280e800 r5:8b935500 r4:849ff070 [<8026329c>] (process_one_work) from [<80263c98>] (worker_thread+0x6c/0x4e0 kernel/workqueue.c:2537) r10:8280e800 r9:00000088 r8:82404d40 r7:8280e81c r6:8b935518 r5:8280e800 r4:8b935500 [<80263c2c>] (worker_thread) from [<8026abc0>] (kthread+0xec/0x11c kernel/kthread.c:376) r10:00000000 r9:ee341e8c r8:8b89f880 r7:8b935500 r6:80263c2c r5:833c0b80 r4:8b89f7c0 [<8026aad4>] (kthread) from [<80200100>] (ret_from_fork+0x14/0x34 arch/arm/kernel/entry-common.S:133) Exception stack(0xee349fb0 to 0xee349ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026aad4 r4:8b89f7c0 INFO: task syz-executor.1:17682 blocked for more than 430 seconds. Not tainted 6.3.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:17682 ppid:2956 flags:0x00000001 Backtrace: [<817d231c>] (__schedule) from [<817d2f90>] (schedule+0x5c/0xac kernel/sched/core.c:6701) r10:eaf31e24 r9:00000002 r8:eaf31dcc r7:82bfdc00 r6:eaf31e1c r5:eaf31e20 r4:82bfdc00 [<817d2f34>] (schedule) from [<817d9d78>] (schedule_timeout+0xd0/0x108 kernel/time/timer.c:2143) r5:eaf31e20 r4:7fffffff [<817d9ca8>] (schedule_timeout) from [<817d3c80>] (do_wait_for_common kernel/sched/completion.c:85 [inline]) [<817d9ca8>] (schedule_timeout) from [<817d3c80>] (__wait_for_common kernel/sched/completion.c:106 [inline]) [<817d9ca8>] (schedule_timeout) from [<817d3c80>] (wait_for_common kernel/sched/completion.c:117 [inline]) [<817d9ca8>] (schedule_timeout) from [<817d3c80>] (wait_for_completion+0x70/0x14c kernel/sched/completion.c:138) r6:eaf31e1c r5:eaf31e20 r4:7fffffff [<817d3c10>] (wait_for_completion) from [<80260084>] (__flush_workqueue+0x118/0x5b4 kernel/workqueue.c:2962) r10:5ac3c35a r9:8b78f810 r8:8b78f83c r7:849ff030 r6:8b78f800 r5:eaf31e10 r4:00000001 [<8025ff6c>] (__flush_workqueue) from [<8173f5e0>] (nci_close_device+0x84/0x124 net/nfc/nci/core.c:579) r10:5ac3c35a r9:7efffd08 r8:828b1cd0 r7:849ff030 r6:849ff018 r5:849ff0c4 r4:849ff000 [<8173f55c>] (nci_close_device) from [<8173fd74>] (nci_unregister_device+0x24/0x98 net/nfc/nci/core.c:1292) r7:849ff000 r6:82cdfc38 r5:000e001b r4:851b3340 [<8173fd50>] (nci_unregister_device) from [<80a52044>] (virtual_ncidev_close+0x18/0x30 drivers/nfc/virtual_ncidev.c:163) r9:7efffd08 r8:828b1cd0 r7:83928650 r6:82cdfc38 r5:000e001b r4:851b3340 [<80a5202c>] (virtual_ncidev_close) from [<804be7a0>] (__fput+0x84/0x264 fs/file_table.c:321) r5:000e001b r4:84b98240 [<804be71c>] (__fput) from [<804be9fc>] (____fput+0x10/0x14 fs/file_table.c:349) r9:7efffd08 r8:82bfe434 r7:8264e5e0 r6:82bfdc00 r5:82bfe404 r4:00000000 [<804be9ec>] (____fput) from [<80267250>] (task_work_run+0x8c/0xb4 kernel/task_work.c:179) [<802671c4>] (task_work_run) from [<8020bfd0>] (resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]) [<802671c4>] (task_work_run) from [<8020bfd0>] (do_work_pending+0x424/0x528 arch/arm/kernel/signal.c:630) r9:7efffd08 r8:80200288 r7:fffffe30 r6:80200288 r5:eaf31fb0 r4:82bfdc00 [<8020bbac>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x20) Exception stack(0xeaf31fb0 to 0xeaf31ff8) 1fa0: 00000000 00000002 00000000 00000003 1fc0: 00000004 013fd4c0 00000000 00000006 00140000 000003e8 0014c3a0 00000000 1fe0: 2c560000 7e8fb3f8 0002a448 0002a904 80000010 00000003 r10:00000006 r9:82bfdc00 r8:80200288 r7:00000006 r6:00000000 r5:013fd4c0 r4:00000004 INFO: task syz-executor.1:17683 blocked for more than 430 seconds. Not tainted 6.3.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:17683 ppid:2956 flags:0x00000001 Backtrace: [<817d231c>] (__schedule) from [<817d2f90>] (schedule+0x5c/0xac kernel/sched/core.c:6701) r10:849ff000 r9:8240c498 r8:849ff0c8 r7:eaf39aa4 r6:00000002 r5:82bfa280 r4:82bfa280 [<817d2f34>] (schedule) from [<817d3520>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6760) r5:82bfa280 r4:849ff0c4 [<817d3508>] (schedule_preempt_disabled) from [<817d5f1c>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<817d3508>] (schedule_preempt_disabled) from [<817d5f1c>] (__mutex_lock.constprop.0+0x2f4/0xaf4 kernel/locking/mutex.c:747) [<817d5c28>] (__mutex_lock.constprop.0) from [<817d67f0>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:849ff000 r9:00000001 r8:849ff0c4 r7:00000000 r6:00000064 r5:eaf39b0f r4:849ff000 [<817d67dc>] (__mutex_lock_slowpath) from [<817d6830>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<817d67f4>] (mutex_lock) from [<81741274>] (nci_request net/nfc/nci/core.c:149 [inline]) [<817d67f4>] (mutex_lock) from [<81741274>] (nci_start_poll+0x94/0x374 net/nfc/nci/core.c:854) [<817411e0>] (nci_start_poll) from [<81733cbc>] (nfc_start_poll+0x74/0xd8 net/nfc/core.c:225) r10:82713300 r9:eaf39c4c r8:00000000 r7:84f3185c r6:00000064 r5:00000000 r4:84f31800 [<81733c48>] (nfc_start_poll) from [<81734f78>] (nfc_genl_start_poll+0x70/0xf8 net/nfc/netlink.c:828) r7:84f31a10 r6:eaf39bec r5:00000064 r4:84f31800 [<81734f08>] (nfc_genl_start_poll) from [<814019c8>] (genl_family_rcv_msg_doit net/netlink/genetlink.c:968 [inline]) [<81734f08>] (nfc_genl_start_poll) from [<814019c8>] (genl_family_rcv_msg net/netlink/genetlink.c:1048 [inline]) [<81734f08>] (nfc_genl_start_poll) from [<814019c8>] (genl_rcv_msg+0x27c/0x3e0 net/netlink/genetlink.c:1065) r9:eaf39c4c r8:852f6300 r7:00000000 r6:852ac0c0 r5:81f640bc r4:8482e914 [<8140174c>] (genl_rcv_msg) from [<814008a8>] (netlink_rcv_skb+0xc4/0x128 net/netlink/af_netlink.c:2577) r10:84f33574 r9:00000000 r8:82410a10 r7:00000024 r6:8482e900 r5:8140174c r4:852ac0c0 [<814007e4>] (netlink_rcv_skb) from [<81401390>] (genl_rcv+0x2c/0x3c net/netlink/genetlink.c:1076) r7:852ac0c0 r6:84f33400 r5:825c674c r4:852ac0c0 [<81401364>] (genl_rcv) from [<813ffd3c>] (netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline]) [<81401364>] (genl_rcv) from [<813ffd3c>] (netlink_unicast+0x254/0x388 net/netlink/af_netlink.c:1365) r5:82938864 r4:82938800 [<813ffae8>] (netlink_unicast) from [<81400084>] (netlink_sendmsg+0x214/0x4a8 net/netlink/af_netlink.c:1942) r10:00000000 r9:00000000 r8:84f33400 r7:00000024 r6:852ac0c0 r5:eaf39f38 r4:00000024 [<813ffe70>] (netlink_sendmsg) from [<812f45d4>] (sock_sendmsg_nosec net/socket.c:724 [inline]) [<813ffe70>] (netlink_sendmsg) from [<812f45d4>] (sock_sendmsg+0x44/0x78 net/socket.c:747) r10:eaf39ddc r9:00000000 r8:00000000 r7:00000000 r6:85f9db80 r5:eaf39f38 r4:00000000 [<812f4590>] (sock_sendmsg) from [<812f50e8>] (____sys_sendmsg+0x210/0x2bc net/socket.c:2501) r7:00000000 r6:85f9db80 r5:00000000 r4:eaf39f38 [<812f4ed8>] (____sys_sendmsg) from [<812f6d18>] (___sys_sendmsg+0x74/0xac net/socket.c:2555) r10:00000128 r9:82bfa280 r8:00000000 r7:00000000 r6:85f9db80 r5:eaf39f38 r4:00000000 [<812f6ca4>] (___sys_sendmsg) from [<812f716c>] (__sys_sendmsg net/socket.c:2584 [inline]) [<812f6ca4>] (___sys_sendmsg) from [<812f716c>] (__do_sys_sendmsg net/socket.c:2593 [inline]) [<812f6ca4>] (___sys_sendmsg) from [<812f716c>] (sys_sendmsg+0x58/0xa0 net/socket.c:2591) r8:80200288 r7:00000128 r6:00000000 r5:20000440 r4:85f9db80 [<812f7114>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xeaf39fa8 to 0xeaf39ff0) 9fa0: 00000000 00000000 00000005 20000440 00000000 00000000 9fc0: 00000000 00000000 0014c2b8 00000128 7e8fb3c2 76b626d0 7e8fb534 76b6220c 9fe0: 76b62020 76b62010 00017004 0004dfb0 r6:0014c2b8 r5:00000000 r4:00000000 INFO: task syz-executor.1:17693 blocked for more than 430 seconds. Not tainted 6.3.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:17693 ppid:2956 flags:0x00000001 Backtrace: [<817d231c>] (__schedule) from [<817d2f90>] (schedule+0x5c/0xac kernel/sched/core.c:6701) r10:84f33574 r9:8240c498 r8:825c673c r7:eafe5b3c r6:00000002 r5:82a95080 r4:82a95080 [<817d2f34>] (schedule) from [<817d3520>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6760) r5:82a95080 r4:825c6738 [<817d3508>] (schedule_preempt_disabled) from [<817d5f1c>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<817d3508>] (schedule_preempt_disabled) from [<817d5f1c>] (__mutex_lock.constprop.0+0x2f4/0xaf4 kernel/locking/mutex.c:747) [<817d5c28>] (__mutex_lock.constprop.0) from [<817d67f0>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:84f33574 r9:eafe5c4c r8:82410a10 r7:0000002c r6:852ac240 r5:81f640bc r4:8482f200 [<817d67dc>] (__mutex_lock_slowpath) from [<817d6830>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<817d67f4>] (mutex_lock) from [<81401a08>] (genl_lock net/netlink/genetlink.c:33 [inline]) [<817d67f4>] (mutex_lock) from [<81401a08>] (genl_rcv_msg+0x2bc/0x3e0 net/netlink/genetlink.c:1063) [<8140174c>] (genl_rcv_msg) from [<814008a8>] (netlink_rcv_skb+0xc4/0x128 net/netlink/af_netlink.c:2577) r10:84f33574 r9:00000000 r8:82410a10 r7:0000002c r6:8482f200 r5:8140174c r4:852ac240 [<814007e4>] (netlink_rcv_skb) from [<81401390>] (genl_rcv+0x2c/0x3c net/netlink/genetlink.c:1076) r7:852ac240 r6:84f33400 r5:825c674c r4:852ac240 [<81401364>] (genl_rcv) from [<813ffd3c>] (netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline]) [<81401364>] (genl_rcv) from [<813ffd3c>] (netlink_unicast+0x254/0x388 net/netlink/af_netlink.c:1365) r5:82938864 r4:82938800 [<813ffae8>] (netlink_unicast) from [<81400084>] (netlink_sendmsg+0x214/0x4a8 net/netlink/af_netlink.c:1942) r10:00000000 r9:00000000 r8:84f33400 r7:0000002c r6:852ac240 r5:eafe5f38 r4:0000002c [<813ffe70>] (netlink_sendmsg) from [<812f45d4>] (sock_sendmsg_nosec net/socket.c:724 [inline]) [<813ffe70>] (netlink_sendmsg) from [<812f45d4>] (sock_sendmsg+0x44/0x78 net/socket.c:747) r10:eafe5ddc r9:00000000 r8:00000000 r7:00000000 r6:85f9db80 r5:eafe5f38 r4:00000000 [<812f4590>] (sock_sendmsg) from [<812f50e8>] (____sys_sendmsg+0x210/0x2bc net/socket.c:2501) r7:00000000 r6:85f9db80 r5:00000000 r4:eafe5f38 [<812f4ed8>] (____sys_sendmsg) from [<812f6d18>] (___sys_sendmsg+0x74/0xac net/socket.c:2555) r10:00000128 r9:82a95080 r8:00000000 r7:00000000 r6:85f9db80 r5:eafe5f38 r4:00000000 [<812f6ca4>] (___sys_sendmsg) from [<812f716c>] (__sys_sendmsg net/socket.c:2584 [inline]) [<812f6ca4>] (___sys_sendmsg) from [<812f716c>] (__do_sys_sendmsg net/socket.c:2593 [inline]) [<812f6ca4>] (___sys_sendmsg) from [<812f716c>] (sys_sendmsg+0x58/0xa0 net/socket.c:2591) r8:80200288 r7:00000128 r6:00000000 r5:20000780 r4:85f9db80 [<812f7114>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xeafe5fa8 to 0xeafe5ff0) 5fa0: 00000000 00000000 00000005 20000780 00000000 00000000 5fc0: 00000000 00000000 0014c348 00000128 7e8fb3c2 76b416d0 7e8fb534 76b4120c 5fe0: 76b41020 76b41010 00017004 0004dfb0 r6:0014c348 r5:00000000 r4:00000000 NMI backtrace for cpu 0 CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.3.0-rc7-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<817b2528>] (dump_backtrace) from [<817b261c>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:256) r7:00000000 r6:00000113 r5:60000193 r4:81d901d4 [<817b2604>] (show_stack) from [<817cec84>] (__dump_stack lib/dump_stack.c:88 [inline]) [<817b2604>] (show_stack) from [<817cec84>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<817cec3c>] (dump_stack_lvl) from [<817ceca8>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:00000000 r4:00000001 [<817cec90>] (dump_stack) from [<8179ffc4>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<8179fe64>] (nmi_cpu_backtrace) from [<817a0114>] (nmi_trigger_cpumask_backtrace+0x134/0x1dc lib/nmi_backtrace.c:62) r7:8240c498 r6:00000000 r5:8241a844 r4:00000000 [<8179ffe0>] (nmi_trigger_cpumask_backtrace) from [<80210d80>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:854) r9:000abb80 r8:82404d40 r7:00007f52 r6:82693168 r5:8240c604 r4:8404bc64 [<80210d68>] (arch_trigger_cpumask_backtrace) from [<803330b4>] (trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]) [<80210d68>] (arch_trigger_cpumask_backtrace) from [<803330b4>] (check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]) [<80210d68>] (arch_trigger_cpumask_backtrace) from [<803330b4>] (watchdog+0x498/0x59c kernel/hung_task.c:379) [<80332c1c>] (watchdog) from [<8026abc0>] (kthread+0xec/0x11c kernel/kthread.c:376) r10:00000000 r9:df819e4c r8:82aa1f00 r7:00000000 r6:80332c1c r5:828fb980 r4:82a39d00 [<8026aad4>] (kthread) from [<80200100>] (ret_from_fork+0x14/0x34 arch/arm/kernel/entry-common.S:133) Exception stack(0xdf8cdfb0 to 0xdf8cdff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026aad4 r4:82a39d00 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 20308 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller #0 Hardware name: ARM-Versatile Express PC is at 0x1711c LR is at 0x1711c pc : [<0001711c>] lr : [<0001711c>] psr: 20000010 sp : 200007b0 ip : 200007b0 fp : 76bff20c r10: 7ebd4534 r9 : 76bff6d0 r8 : 7ebd43c2 r7 : 00000000 r6 : 00001b25 r5 : 9b0a3472 r4 : 00000000 r3 : 00000000 r2 : 000001b8 r1 : 00000026 r0 : ffffffff Flags: nzCv IRQs on FIQs on Mode USER_32 ISA ARM Segment none Control: 30c5387d Table: 853712c0 DAC: 00000000 Backtrace: invalid frame pointer 0x76bff20c