INFO: task kworker/u4:3:20736 blocked for more than 430 seconds. Not tainted 6.8.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:3 state:D stack:0 pid:20736 tgid:20736 ppid:2 flags:0x00000000 Workqueue: nfc2_nci_rx_wq nci_rx_work Backtrace: [<818597ac>] (__schedule) from [<8185a3e4>] (__schedule_loop kernel/sched/core.c:6802 [inline]) [<818597ac>] (__schedule) from [<8185a3e4>] (schedule+0x2c/0xb8 kernel/sched/core.c:6817) r10:856e6a05 r9:00000000 r8:854eb460 r7:00000002 r6:dfa7ddac r5:84efb000 r4:84efb000 [<8185a3b8>] (schedule) from [<8185a9b0>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6874) r5:84efb000 r4:854eb45c [<8185a998>] (schedule_preempt_disabled) from [<8185d298>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<8185a998>] (schedule_preempt_disabled) from [<8185d298>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<8185cfb0>] (__mutex_lock.constprop.0) from [<8185db64>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:856e6a05 r9:84efb000 r8:00000001 r7:854eb45c r6:00000000 r5:8530e8fc r4:854eb400 [<8185db50>] (__mutex_lock_slowpath) from [<8185dba4>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<8185db68>] (mutex_lock) from [<817ad800>] (device_lock include/linux/device.h:990 [inline]) [<8185db68>] (mutex_lock) from [<817ad800>] (nfc_targets_found+0x5c/0x124 net/nfc/core.c:778) [<817ad7a4>] (nfc_targets_found) from [<817bdcfc>] (nci_rf_discover_ntf_packet net/nfc/nci/ntf.c:390 [inline]) [<817ad7a4>] (nfc_targets_found) from [<817bdcfc>] (nci_ntf_packet+0xa3c/0xe88 net/nfc/nci/ntf.c:798) r8:00000001 r7:00000000 r6:8530e800 r5:97ca9600 r4:00000103 [<817bd2c0>] (nci_ntf_packet) from [<817baa44>] (nci_rx_work+0x64/0xe4 net/nfc/nci/core.c:1526) r10:856e6a05 r9:84efb000 r8:00000100 r7:8530e8a4 r6:8530e870 r5:8530e800 r4:97ca9600 [<817ba9e0>] (nci_rx_work) from [<80267028>] (process_one_work+0x19c/0x4a4 kernel/workqueue.c:2633) r7:82c0e400 r6:856e6a00 r5:8530e870 r4:83516e00 [<80266e8c>] (process_one_work) from [<80267570>] (process_scheduled_works kernel/workqueue.c:2706 [inline]) [<80266e8c>] (process_one_work) from [<80267570>] (worker_thread+0x240/0x48c kernel/workqueue.c:2787) r10:61c88647 r9:84efb000 r8:82c0e420 r7:82604d40 r6:82c0e400 r5:83516e2c r4:83516e00 [<80267330>] (worker_thread) from [<8026e84c>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:e4c69e90 r8:84c6a240 r7:83516e00 r6:80267330 r5:84efb000 r4:8b2876c0 [<8026e748>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xdfa7dfb0 to 0xdfa7dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e748 r4:8b2876c0 INFO: task syz-executor.1:9945 blocked for more than 430 seconds. Not tainted 6.8.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:9945 tgid:9945 ppid:17775 flags:0x00000005 Backtrace: [<818597ac>] (__schedule) from [<8185a3e4>] (__schedule_loop kernel/sched/core.c:6802 [inline]) [<818597ac>] (__schedule) from [<8185a3e4>] (schedule+0x2c/0xb8 kernel/sched/core.c:6817) r10:e0899eac r9:00000002 r8:e0899e54 r7:84282400 r6:e0899ea4 r5:00000000 r4:84282400 [<8185a3b8>] (schedule) from [<8186198c>] (schedule_timeout+0xe4/0x114 kernel/time/timer.c:2159) r5:00000000 r4:7fffffff [<818618a8>] (schedule_timeout) from [<8185b2e8>] (do_wait_for_common kernel/sched/completion.c:95 [inline]) [<818618a8>] (schedule_timeout) from [<8185b2e8>] (__wait_for_common kernel/sched/completion.c:116 [inline]) [<818618a8>] (schedule_timeout) from [<8185b2e8>] (wait_for_common kernel/sched/completion.c:127 [inline]) [<818618a8>] (schedule_timeout) from [<8185b2e8>] (wait_for_completion+0x6c/0x144 kernel/sched/completion.c:148) r7:84282400 r6:e0899ea4 r5:e0899ea8 r4:7fffffff [<8185b27c>] (wait_for_completion) from [<8026375c>] (__flush_workqueue+0x118/0x5d0 kernel/workqueue.c:3198) r10:00000006 r9:84f7e210 r8:84f7e23c r7:8530e830 r6:84f7e200 r5:e0899e98 r4:00000001 [<80263644>] (__flush_workqueue) from [<817ba32c>] (nci_close_device+0x8c/0x130 net/nfc/nci/core.c:579) r10:00000006 r9:84282400 r8:84ebc190 r7:8530e830 r6:8530e818 r5:8530e8c4 r4:8530e800 [<817ba2a0>] (nci_close_device) from [<817baae8>] (nci_unregister_device+0x24/0x98 net/nfc/nci/core.c:1301) r7:8530e800 r6:830333f0 r5:000e001b r4:9712f200 [<817baac4>] (nci_unregister_device) from [<80a85030>] (virtual_ncidev_close+0x18/0x30 drivers/nfc/virtual_ncidev.c:168) r9:84282400 r8:84ebc190 r7:83aaf098 r6:830333f0 r5:000e001b r4:9712f200 [<80a85018>] (virtual_ncidev_close) from [<804eb3c8>] (__fput+0x84/0x2d4 fs/file_table.c:376) r5:000e001b r4:84eb3480 [<804eb344>] (__fput) from [<804eb6d4>] (__fput_sync+0x3c/0x40 fs/file_table.c:461) r9:84282400 r8:80200288 r7:00000006 r6:00000000 r5:84eb3480 r4:00000000 [<804eb698>] (__fput_sync) from [<804e6d9c>] (__do_sys_close fs/open.c:1554 [inline]) [<804eb698>] (__fput_sync) from [<804e6d9c>] (sys_close+0x30/0x64 fs/open.c:1539) [<804e6d6c>] (sys_close) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xe0899fa8 to 0xe0899ff0) 9fa0: 00000003 00000004 00000003 00000002 00000000 00000000 9fc0: 00000003 00000004 00000000 00000006 0014d490 00140000 00140000 0014d490 9fe0: 32a60000 7ea863e0 00091154 0004f5cc r5:00000004 r4:00000003 INFO: task syz-executor.1:9948 blocked for more than 430 seconds. Not tainted 6.8.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:9948 tgid:9945 ppid:17775 flags:0x00000005 Backtrace: [<818597ac>] (__schedule) from [<8185a3e4>] (__schedule_loop kernel/sched/core.c:6802 [inline]) [<818597ac>] (__schedule) from [<8185a3e4>] (schedule+0x2c/0xb8 kernel/sched/core.c:6817) r10:00000000 r9:00000000 r8:827c45b0 r7:00000002 r6:e010db2c r5:84285400 r4:84285400 [<8185a3b8>] (schedule) from [<8185a9b0>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6874) r5:84285400 r4:827c45ac [<8185a998>] (schedule_preempt_disabled) from [<8185d298>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<8185a998>] (schedule_preempt_disabled) from [<8185d298>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<8185cfb0>] (__mutex_lock.constprop.0) from [<8185db64>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:00000000 r9:e010dc4c r8:00000000 r7:0000002c r6:97ca93c0 r5:8b393b00 r4:821954c0 [<8185db50>] (__mutex_lock_slowpath) from [<8185dba4>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<8185db68>] (mutex_lock) from [<81466004>] (genl_lock net/netlink/genetlink.c:33 [inline]) [<8185db68>] (mutex_lock) from [<81466004>] (genl_op_lock net/netlink/genetlink.c:58 [inline]) [<8185db68>] (mutex_lock) from [<81466004>] (genl_op_lock net/netlink/genetlink.c:55 [inline]) [<8185db68>] (mutex_lock) from [<81466004>] (genl_rcv_msg+0x308/0x3d4 net/netlink/genetlink.c:1207) [<81465cfc>] (genl_rcv_msg) from [<814645b8>] (netlink_rcv_skb+0xc0/0x120 net/netlink/af_netlink.c:2543) r10:00000000 r9:854ed97c r8:828f71c0 r7:0000002c r6:8b393b00 r5:81465cfc r4:97ca93c0 [<814644f8>] (netlink_rcv_skb) from [<814656e0>] (genl_rcv+0x2c/0x3c net/netlink/genetlink.c:1217) r7:97ca93c0 r6:82f23500 r5:827c45c0 r4:97ca93c0 [<814656b4>] (genl_rcv) from [<81463af0>] (netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]) [<814656b4>] (genl_rcv) from [<81463af0>] (netlink_unicast+0x194/0x290 net/netlink/af_netlink.c:1367) r5:0000002c r4:82e08400 [<8146395c>] (netlink_unicast) from [<81463dc8>] (netlink_sendmsg+0x1dc/0x434 net/netlink/af_netlink.c:1908) r9:00000000 r8:00000000 r7:854ed800 r6:0000002c r5:97ca93c0 r4:e010df38 [<81463bec>] (netlink_sendmsg) from [<8134cb30>] (sock_sendmsg_nosec net/socket.c:730 [inline]) [<81463bec>] (netlink_sendmsg) from [<8134cb30>] (__sock_sendmsg+0x44/0x78 net/socket.c:745) r10:00000000 r9:e010ddd4 r8:e010ddd4 r7:00000000 r6:8333e500 r5:e010df38 r4:00000000 [<8134caec>] (__sock_sendmsg) from [<8134d9dc>] (____sys_sendmsg+0x22c/0x2a8 net/socket.c:2584) r7:00000000 r6:00000000 r5:8333e500 r4:e010df38 [<8134d7b0>] (____sys_sendmsg) from [<8134f738>] (___sys_sendmsg+0x9c/0xd0 net/socket.c:2638) r10:e010de34 r9:20000780 r8:00000000 r7:00000000 r6:8333e500 r5:e010df38 r4:00000000 [<8134f69c>] (___sys_sendmsg) from [<8134fc34>] (__sys_sendmsg net/socket.c:2667 [inline]) [<8134f69c>] (___sys_sendmsg) from [<8134fc34>] (__do_sys_sendmsg net/socket.c:2676 [inline]) [<8134f69c>] (___sys_sendmsg) from [<8134fc34>] (sys_sendmsg+0x78/0xbc net/socket.c:2674) r10:00000128 r9:84285400 r8:80200288 r7:00000000 r6:20000780 r5:8333e500 r4:00000000 [<8134fbbc>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xe010dfa8 to 0xe010dff0) dfa0: 00000000 00000000 00000005 20000780 00000000 00000000 dfc0: 00000000 00000000 0014c2c8 00000128 7ea8632e 7ea8632f 003d0f00 76bc80fc dfe0: 76bc7f08 76bc7ef8 000167f8 00050bc0 r7:00000128 r6:0014c2c8 r5:00000000 r4:00000000 INFO: task syz-executor.1:9955 blocked for more than 430 seconds. Not tainted 6.8.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:9955 tgid:9945 ppid:17775 flags:0x00000005 Backtrace: [<818597ac>] (__schedule) from [<8185a3e4>] (__schedule_loop kernel/sched/core.c:6802 [inline]) [<818597ac>] (__schedule) from [<8185a3e4>] (schedule+0x2c/0xb8 kernel/sched/core.c:6817) r10:8530e8c4 r9:00000000 r8:8530e8c8 r7:00000002 r6:e0849a8c r5:84283000 r4:84283000 [<8185a3b8>] (schedule) from [<8185a9b0>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6874) r5:84283000 r4:8530e8c4 [<8185a998>] (schedule_preempt_disabled) from [<8185d298>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<8185a998>] (schedule_preempt_disabled) from [<8185d298>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<8185cfb0>] (__mutex_lock.constprop.0) from [<8185db64>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8530e8c4 r9:00000001 r8:8530e8c4 r7:00000000 r6:8530e800 r5:00000022 r4:8530e800 [<8185db50>] (__mutex_lock_slowpath) from [<8185dba4>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<8185db68>] (mutex_lock) from [<817bc058>] (nci_request net/nfc/nci/core.c:149 [inline]) [<8185db68>] (mutex_lock) from [<817bc058>] (nci_start_poll+0x9c/0x394 net/nfc/nci/core.c:854) [<817bbfbc>] (nci_start_poll) from [<817ae73c>] (nfc_start_poll+0x74/0xd8 net/nfc/core.c:225) r10:828f71c0 r9:e0849c4c r8:00000000 r7:854eb45c r6:00000022 r5:00000000 r4:854eb400 [<817ae6c8>] (nfc_start_poll) from [<817afa08>] (nfc_genl_start_poll+0x70/0xfc net/nfc/netlink.c:828) r7:854eb610 r6:e0849bec r5:00000022 r4:854eb400 [<817af998>] (nfc_genl_start_poll) from [<81465f7c>] (genl_family_rcv_msg_doit net/netlink/genetlink.c:1113 [inline]) [<817af998>] (nfc_genl_start_poll) from [<81465f7c>] (genl_family_rcv_msg net/netlink/genetlink.c:1193 [inline]) [<817af998>] (nfc_genl_start_poll) from [<81465f7c>] (genl_rcv_msg+0x280/0x3d4 net/netlink/genetlink.c:1208) r9:e0849c4c r8:97109c00 r7:00000000 r6:970f1600 r5:8b347d50 r4:821954c0 [<81465cfc>] (genl_rcv_msg) from [<814645b8>] (netlink_rcv_skb+0xc0/0x120 net/netlink/af_netlink.c:2543) r10:00000000 r9:854ed97c r8:828f71c0 r7:00000024 r6:8b347d40 r5:81465cfc r4:970f1600 [<814644f8>] (netlink_rcv_skb) from [<814656e0>] (genl_rcv+0x2c/0x3c net/netlink/genetlink.c:1217) r7:970f1600 r6:82f23500 r5:827c45c0 r4:970f1600 [<814656b4>] (genl_rcv) from [<81463af0>] (netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]) [<814656b4>] (genl_rcv) from [<81463af0>] (netlink_unicast+0x194/0x290 net/netlink/af_netlink.c:1367) r5:00000024 r4:82e08400 [<8146395c>] (netlink_unicast) from [<81463dc8>] (netlink_sendmsg+0x1dc/0x434 net/netlink/af_netlink.c:1908) r9:00000000 r8:00000000 r7:854ed800 r6:00000024 r5:970f1600 r4:e0849f38 [<81463bec>] (netlink_sendmsg) from [<8134cb30>] (sock_sendmsg_nosec net/socket.c:730 [inline]) [<81463bec>] (netlink_sendmsg) from [<8134cb30>] (__sock_sendmsg+0x44/0x78 net/socket.c:745) r10:00080000 r9:e0849dd4 r8:e0849dd4 r7:00000000 r6:8333e500 r5:e0849f38 r4:00000000 [<8134caec>] (__sock_sendmsg) from [<8134d9dc>] (____sys_sendmsg+0x22c/0x2a8 net/socket.c:2584) r7:00000000 r6:00000000 r5:8333e500 r4:e0849f38 [<8134d7b0>] (____sys_sendmsg) from [<8134f738>] (___sys_sendmsg+0x9c/0xd0 net/socket.c:2638) r10:e0849e34 r9:20000440 r8:00080000 r7:00000000 r6:8333e500 r5:e0849f38 r4:00000000 [<8134f69c>] (___sys_sendmsg) from [<8134fc34>] (__sys_sendmsg net/socket.c:2667 [inline]) [<8134f69c>] (___sys_sendmsg) from [<8134fc34>] (__do_sys_sendmsg net/socket.c:2676 [inline]) [<8134f69c>] (___sys_sendmsg) from [<8134fc34>] (sys_sendmsg+0x78/0xbc net/socket.c:2674) r10:00000128 r9:84283000 r8:80200288 r7:00080000 r6:20000440 r5:8333e500 r4:00000000 [<8134fbbc>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xe0849fa8 to 0xe0849ff0) 9fa0: 00000000 00000000 00000005 20000440 00080000 00000000 9fc0: 00000000 00000000 0014c358 00000128 7ea8632e 7ea8632f 003d0f00 76ba70fc 9fe0: 76ba6f08 76ba6ef8 000167f8 00050bc0 r7:00000128 r6:0014c358 r5:00000000 r4:00000000 NMI backtrace for cpu 1 CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.8.0-rc7-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<818382cc>] (dump_backtrace) from [<818383c8>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:256) r7:00000000 r6:00000013 r5:60000093 r4:81fbd658 [<818383b0>] (show_stack) from [<818558e4>] (__dump_stack lib/dump_stack.c:88 [inline]) [<818383b0>] (show_stack) from [<818558e4>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<8185589c>] (dump_stack_lvl) from [<81855908>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:00000001 r4:00000001 [<818558f0>] (dump_stack) from [<818256f8>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81825598>] (nmi_cpu_backtrace) from [<81825844>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8260c494 r5:8261a7d8 r4:ffffffff [<81825714>] (nmi_trigger_cpumask_backtrace) from [<80210574>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:00000001 r8:82895eb8 r7:8260c5ec r6:00007f24 r5:8261adc8 r4:82f9572c [<8021055c>] (arch_trigger_cpumask_backtrace) from [<80347ebc>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<8021055c>] (arch_trigger_cpumask_backtrace) from [<80347ebc>] (check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]) [<8021055c>] (arch_trigger_cpumask_backtrace) from [<80347ebc>] (watchdog+0x48c/0x59c kernel/hung_task.c:379) [<80347a30>] (watchdog) from [<8026e84c>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:df819e58 r8:82e9f3c0 r7:00000000 r6:80347a30 r5:82ee8c00 r4:82f45ac0 [<8026e748>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e748 r4:82f45ac0 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 2795 Comm: klogd Not tainted 6.8.0-rc7-syzkaller #0 Hardware name: ARM-Versatile Express PC is at 0x76d72a60 LR is at 0x76d725f4 pc : [<76d72a60>] lr : [<76d725f4>] psr: 80000010 sp : 7eb48b18 ip : 0000006e fp : 7eb48c34 r10: 00000001 r9 : 7eb48b63 r8 : 0000005f r7 : 00000005 r6 : 00000001 r5 : 00000000 r4 : 0140cb70 r3 : 00000031 r2 : 80000000 r1 : 7eb48b64 r0 : 0140cb70 Flags: Nzcv IRQs on FIQs on Mode USER_32 ISA ARM Segment user Control: 30c5387d Table: 84292380 DAC: fffffffd Backtrace: invalid frame pointer 0x7eb48c34