INFO: task syz.4.14371:586 blocked for more than 430 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.14371 state:D stack:0 pid:586 tgid:585 ppid:31890 task_flags:0x400040 flags:0x00000001 Call trace: [<81b1b7bc>] (__schedule) from [<802966c8>] (__schedule_loop kernel/sched/core.c:7268 [inline]) [<81b1b7bc>] (__schedule) from [<802966c8>] (rt_mutex_schedule+0x20/0x38 kernel/sched/core.c:7564) r10:00000000 r9:851dbe80 r8:ecac9de0 r7:ecac9de8 r6:851dbe80 r5:851aa580 r4:851aa580 [<802966a8>] (rt_mutex_schedule) from [<81b22dbc>] (rt_mutex_slowlock_block.constprop.0+0x16c/0x1e4 kernel/locking/rtmutex.c:1662) r5:851aa580 r4:830bd054 [<81b22c50>] (rt_mutex_slowlock_block.constprop.0) from [<81b241f4>] (__rt_mutex_slowlock kernel/locking/rtmutex.c:1739 [inline]) [<81b22c50>] (rt_mutex_slowlock_block.constprop.0) from [<81b241f4>] (__rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1779 [inline]) [<81b22c50>] (rt_mutex_slowlock_block.constprop.0) from [<81b241f4>] (rt_mutex_slowlock.constprop.0+0xcc/0x3d0 kernel/locking/rtmutex.c:1819) r10:86cfc800 r9:60000013 r8:ecac9de8 r7:ecac9de0 r6:00000002 r5:830bd054 r4:851aa580 [<81b24128>] (rt_mutex_slowlock.constprop.0) from [<81b245dc>] (__rt_mutex_lock kernel/locking/rtmutex.c:1834 [inline]) [<81b24128>] (rt_mutex_slowlock.constprop.0) from [<81b245dc>] (__rt_mutex_lock_common kernel/locking/rtmutex_api.c:49 [inline]) [<81b24128>] (rt_mutex_slowlock.constprop.0) from [<81b245dc>] (rt_mutex_lock+0x44/0x48 kernel/locking/rtmutex_api.c:89) r10:86cfc800 r9:00000001 r8:8982f040 r7:8987e400 r6:8982f040 r5:00000001 r4:830bd040 [<81b24598>] (rt_mutex_lock) from [<81164c04>] (i2c_adapter_lock_bus+0x14/0x18 drivers/i2c/i2c-core-base.c:848) [<81164bf0>] (i2c_adapter_lock_bus) from [<81166bf8>] (i2c_lock_bus include/linux/i2c.h:809 [inline]) [<81164bf0>] (i2c_adapter_lock_bus) from [<81166bf8>] (__i2c_lock_bus_helper drivers/i2c/i2c-core.h:46 [inline]) [<81164bf0>] (i2c_adapter_lock_bus) from [<81166bf8>] (i2c_transfer+0xc8/0x108 drivers/i2c/i2c-core-base.c:2312) [<81166b30>] (i2c_transfer) from [<8116c43c>] (i2cdev_ioctl_rdwr+0x140/0x238 drivers/i2c/i2c-dev.c:306) r6:00000001 r5:0000000c r4:8982f04c [<8116c2fc>] (i2cdev_ioctl_rdwr) from [<8116ccb8>] (i2cdev_ioctl+0x28c/0x3b4 drivers/i2c/i2c-dev.c:467) r10:851aa580 r9:00000005 r8:86b66d00 r7:20000000 r6:86cfc800 r5:8982f040 r4:20000000 [<8116ca2c>] (i2cdev_ioctl) from [<805a1e5c>] (vfs_ioctl fs/ioctl.c:51 [inline]) [<8116ca2c>] (i2cdev_ioctl) from [<805a1e5c>] (do_vfs_ioctl fs/ioctl.c:551 [inline]) [<8116ca2c>] (i2cdev_ioctl) from [<805a1e5c>] (__do_sys_ioctl fs/ioctl.c:595 [inline]) [<8116ca2c>] (i2cdev_ioctl) from [<805a1e5c>] (sys_ioctl+0x244/0xb5c fs/ioctl.c:583) r7:20000000 r6:00000707 r5:86b66d01 r4:00000000 [<805a1c18>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xecac9fa8 to 0xecac9ff0) 9fa0: 00000000 00000000 00000005 00000707 20000000 00000000 9fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f480dc 9fe0: 76f47e88 76f47e78 00018ebc 00130810 r10:00000036 r9:851aa580 r8:8020029c r7:00000036 r6:00346310 r5:00000000 r4:00000000 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 29 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express Call trace: [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:60080093 r6:60080093 r5:8231eb0c r4:00000000 [<80201af0>] (show_stack) from [<8021e384>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:00080013 r5:00000001 r4:00000001 [<8021e398>] (dump_stack) from [<81b05094>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:113) [<81b04f44>] (nmi_cpu_backtrace) from [<81b051e4>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:82a0b550 r5:82a1a2b8 r4:ffffffff [<81b050b4>] (nmi_trigger_cpumask_backtrace) from [<8022f104>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:82a0b6d8 r8:00000048 r7:0000000a r6:82a03d80 r5:00007ef3 r4:00000048 [<8022f0ec>] (arch_trigger_cpumask_backtrace) from [<81b0cd30>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<8022f0ec>] (arch_trigger_cpumask_backtrace) from [<81b0cd30>] (__sys_info lib/sys_info.c:157 [inline]) [<8022f0ec>] (arch_trigger_cpumask_backtrace) from [<81b0cd30>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81b0ccc8>] (sys_info) from [<8038acd4>] (check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]) [<81b0ccc8>] (sys_info) from [<8038acd4>] (watchdog+0x3ac/0x858 kernel/hung_task.c:561) r5:00007ef3 r4:00000001 [<8038a928>] (watchdog) from [<80281550>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df819e58 r8:83113580 r7:00000000 r6:8038a928 r5:83178000 r4:838868c0 [<80281434>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281434 r4:838868c0 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 2825 Comm: pr/ttyAMA-1 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:198 LR is at spin_unlock_irqrestore include/linux/spinlock.h:408 [inline] LR is at __uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline] LR is at pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2668 pc : [<81b26078>] lr : [<80ae8f4c>] psr: 60000113 sp : eb411ec8 ip : eb411ed8 fp : eb411ed4 r10: 82b59724 r9 : 00000000 r8 : 00000000 r7 : 00000117 r6 : 82b59688 r5 : 00000000 r4 : 00000001 r3 : 000098c1 r2 : 00000000 r1 : 60000113 r0 : 850c1040 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 87183700 DAC: fffffffd Call trace: [<81b26050>] (_raw_spin_unlock_irqrestore) from [<80ae8f4c>] (spin_unlock_irqrestore include/linux/spinlock.h:408 [inline]) [<81b26050>] (_raw_spin_unlock_irqrestore) from [<80ae8f4c>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline]) [<81b26050>] (_raw_spin_unlock_irqrestore) from [<80ae8f4c>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2668) [<80ae8f2c>] (pl011_console_device_unlock) from [<802e8ae8>] (nbcon_emit_one+0x88/0x100 kernel/printk/nbcon.c:1165) [<802e8a60>] (nbcon_emit_one) from [<802e8d68>] (nbcon_kthread_func+0x208/0x2ec kernel/printk/nbcon.c:1271) r6:82cc02d4 r5:82b59688 r4:84679900 [<802e8b60>] (nbcon_kthread_func) from [<80281550>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e03d1b38 r8:8484bb80 r7:82b59688 r6:802e8b60 r5:84679900 r4:838b2840 [<80281434>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb411fb0 to 0xeb411ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281434 r4:838b2840