syzbot

watchdog: BUG: soft lockup - CPU#0 stuck for 430s! [swapper/0:0]
Modules linked in:
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT 
Hardware name: ARM-Versatile Express
PC is at __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline]
PC is at _raw_spin_unlock_irq+0x28/0x54 kernel/locking/spinlock.c:202
LR is at __run_timer_base kernel/time/timer.c:2386 [inline]
LR is at __run_timer_base kernel/time/timer.c:2377 [inline]
LR is at timer_expire_remote+0x60/0x6c kernel/time/timer.c:2136
pc : [<81abbd3c>]    lr : [<80328a30>]    psr: 60000113
sp : 82801bc0  ip : 82801bd0  fp : 82801bcc
r10: 00000001  r9 : 8280c9a4  r8 : 00000001
r7 : ddddb488  r6 : 82801cb8  r5 : 830bf3b0  r4 : dddd9f00
r3 : 00004018  r2 : 00000000  r1 : 00000000  r0 : dddd9f00
Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
Control: 30c5387d  Table: 85d9a740  DAC: fffffffd
Call trace: 
[<81abbd14>] (_raw_spin_unlock_irq) from [<80328a30>] (__run_timer_base kernel/time/timer.c:2386 [inline])
[<81abbd14>] (_raw_spin_unlock_irq) from [<80328a30>] (__run_timer_base kernel/time/timer.c:2377 [inline])
[<81abbd14>] (_raw_spin_unlock_irq) from [<80328a30>] (timer_expire_remote+0x60/0x6c kernel/time/timer.c:2136)
[<803289d0>] (timer_expire_remote) from [<8034706c>] (tmigr_handle_remote_cpu kernel/time/timer_migration.c:983 [inline])
[<803289d0>] (timer_expire_remote) from [<8034706c>] (tmigr_handle_remote_up+0x3e0/0x4b0 kernel/time/timer_migration.c:1074)
 r4:830bf380
[<80346c8c>] (tmigr_handle_remote_up) from [<803451a4>] (__walk_groups_from+0x3c/0xe4 kernel/time/timer_migration.c:566)
 r10:8281b500 r9:8280c820 r8:80346c8c r7:82801cb8 r6:830bf380 r5:00000002
 r4:830bf380
[<80345168>] (__walk_groups_from) from [<8034753c>] (__walk_groups kernel/time/timer_migration.c:583 [inline])
[<80345168>] (__walk_groups_from) from [<8034753c>] (tmigr_handle_remote+0xe8/0x108 kernel/time/timer_migration.c:1133)
 r9:82804d80 r8:00000102 r7:00000001 r6:00000082 r5:00000002 r4:dddc7488
[<80347454>] (tmigr_handle_remote) from [<80327700>] (run_timer_softirq+0x30/0x34 kernel/time/timer.c:2408)
 r4:82804084
[<803276d0>] (run_timer_softirq) from [<8025b65c>] (handle_softirqs+0x140/0x458 kernel/softirq.c:622)
[<8025b51c>] (handle_softirqs) from [<8025bad0>] (__do_softirq kernel/softirq.c:656 [inline])
[<8025b51c>] (handle_softirqs) from [<8025bad0>] (invoke_softirq kernel/softirq.c:496 [inline])
[<8025b51c>] (handle_softirqs) from [<8025bad0>] (__irq_exit_rcu+0x110/0x1d0 kernel/softirq.c:723)
 r10:00000000 r9:8281b500 r8:00000000 r7:82801dd8 r6:82443f98 r5:8247f0cc
 r4:8281b500
[<8025b9c0>] (__irq_exit_rcu) from [<8025be48>] (irq_exit+0x10/0x18 kernel/softirq.c:751)
 r5:8247f0cc r4:826c3a9c
[<8025be38>] (irq_exit) from [<81aad964>] (generic_handle_arch_irq+0x7c/0x80 kernel/irq/handle.c:295)
[<81aad8e8>] (generic_handle_arch_irq) from [<80200bdc>] (__irq_svc+0x7c/0xbc arch/arm/kernel/entry-armv.S:228)
Exception stack(0x82801dd8 to 0x82801e20)
1dc0:                                                       00000001 00000000
1de0: 00002f92 00002f90 83f7d168 00000004 00000001 83f7d168 83e88288 83f7d040
1e00: 00000000 82801e3c 82801e28 82801e28 81abbecc 81abbef4 80000013 ffffffff
 r9:8281b500 r8:83e88288 r7:82801e0c r6:ffffffff r5:80000013 r4:81abbef4
[<81abbeb4>] (_raw_spin_lock) from [<809c7a2c>] (class_raw_spinlock_constructor include/linux/spinlock.h:535 [inline])
[<81abbeb4>] (_raw_spin_lock) from [<809c7a2c>] (gpio_mmio_set+0x44/0x80 drivers/gpio/gpio-mmio.c:234)
 r5:00000004 r4:83f7d040
[<809c79e8>] (gpio_mmio_set) from [<809b81e8>] (gpiochip_set+0x1c/0x44 drivers/gpio/gpiolib.c:2919)
 r7:00000001 r6:00000000 r5:00000002 r4:838a77a8
[<809b81cc>] (gpiochip_set) from [<809baab0>] (gpiod_set_raw_value_commit+0x78/0x218 drivers/gpio/gpiolib.c:3662)
[<809baa38>] (gpiod_set_raw_value_commit) from [<809bc350>] (gpiod_set_value_nocheck+0x44/0x58 drivers/gpio/gpiolib.c:3881)
 r10:00000000 r9:00000000 r8:00000001 r7:dddce4c0 r6:83e1ccd8 r5:00000001
 r4:838a77a8
[<809bc30c>] (gpiod_set_value_nocheck) from [<809bc3a0>] (gpiod_set_value+0x3c/0x88 drivers/gpio/gpiolib.c:3903)
[<809bc364>] (gpiod_set_value) from [<809ccb3c>] (gpio_led_set+0x5c/0x60 drivers/leds/leds-gpio.c:57)
 r5:000000ff r4:832f6a24
[<809ccae0>] (gpio_led_set) from [<809ca464>] (__led_set_brightness drivers/leds/led-core.c:52 [inline])
[<809ccae0>] (gpio_led_set) from [<809ca464>] (led_set_brightness_nopm drivers/leds/led-core.c:335 [inline])
[<809ccae0>] (gpio_led_set) from [<809ca464>] (led_set_brightness_nosleep drivers/leds/led-core.c:369 [inline])
[<809ccae0>] (gpio_led_set) from [<809ca464>] (led_set_brightness+0x84/0x90 drivers/leds/led-core.c:328)
 r5:000000ff r4:832f6a24
[<809ca3e0>] (led_set_brightness) from [<809cbfe4>] (led_trigger_event drivers/leds/led-triggers.c:420 [inline])
[<809ca3e0>] (led_set_brightness) from [<809cbfe4>] (led_trigger_event+0x40/0x58 drivers/leds/led-triggers.c:408)
 r5:000000ff r4:832f6a24
[<809cbfa4>] (led_trigger_event) from [<809cd640>] (ledtrig_cpu+0xac/0xf4 drivers/leds/trigger/ledtrig-cpu.c:86)
 r7:dddce4c0 r6:00000002 r5:82b15cd8 r4:000001fd
[<809cd594>] (ledtrig_cpu) from [<80227a38>] (arch_cpu_idle_exit+0x14/0x18 arch/arm/kernel/process.c:98)
 r9:00000000 r8:00000000 r7:8280c710 r6:8281b500 r5:8280c6d0 r4:00000000
[<80227a24>] (arch_cpu_idle_exit) from [<802b168c>] (do_idle+0x5c/0x2d8 kernel/sched/idle.c:334)
[<802b1630>] (do_idle) from [<802b1c38>] (cpu_startup_entry+0x30/0x34 kernel/sched/idle.c:430)
 r10:8281aff4 r9:8280c680 r8:823bec64 r7:00000000 r6:deffc06c r5:828222e8
 r4:000000ed
[<802b1c08>] (cpu_startup_entry) from [<81aaf37c>] (kernel_init+0x0/0x138 init/main.c:757)
[<81aaf29c>] (rest_init) from [<8260145c>] (start_kernel+0x844/0x860 init/main.c:1206)
[<82600c18>] (start_kernel) from [<00000000>] (0x0)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT 
Hardware name: ARM-Versatile Express
PC is at arch_spin_lock arch/arm/include/asm/spinlock.h:74 [inline]
PC is at do_raw_spin_lock include/linux/spinlock.h:187 [inline]
PC is at __raw_spin_lock include/linux/spinlock_api_smp.h:134 [inline]
PC is at _raw_spin_lock+0x40/0x58 kernel/locking/spinlock.c:154
LR is at __raw_spin_lock include/linux/spinlock_api_smp.h:132 [inline]
LR is at _raw_spin_lock+0x18/0x58 kernel/locking/spinlock.c:154
pc : [<81abbef4>]    lr : [<81abbecc>]    psr: 80000113
sp : df805d68  ip : df805d68  fp : df805d7c
r10: 81c05450  r9 : 83f7d040  r8 : 83e88288
r7 : 83f7d168  r6 : 00000001  r5 : 00000001  r4 : 83f7d168
r3 : 00002f90  r2 : 00002f91  r1 : 00000000  r0 : 00000001
Flags: Nzcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none
Control: 30c5387d  Table: 850d8300  DAC: 00000000
Call trace: frame pointer underflow
[<81abbeb4>] (_raw_spin_lock) from [<809c7a2c>] (class_raw_spinlock_constructor include/linux/spinlock.h:535 [inline])
[<81abbeb4>] (_raw_spin_lock) from [<809c7a2c>] (gpio_mmio_set+0x44/0x80 drivers/gpio/gpio-mmio.c:234)
 r5:00000001 r4:83f7d040
[<809c79e8>] (gpio_mmio_set) from [<809b81e8>] (gpiochip_set+0x1c/0x44 drivers/gpio/gpiolib.c:2919)
 r7:00000001 r6:00000000 r5:00000000 r4:838a7780
[<809b81cc>] (gpiochip_set) from [<809baab0>] (gpiod_set_raw_value_commit+0x78/0x218 drivers/gpio/gpiolib.c:3662)
[<809baa38>] (gpiod_set_raw_value_commit) from [<809bc350>] (gpiod_set_value_nocheck+0x44/0x58 drivers/gpio/gpiolib.c:3881)
 r10:81c05450 r9:df805ebc r8:00000102 r7:ffffaf52 r6:00000007 r5:00000001
 r4:838a7780
[<809bc30c>] (gpiod_set_value_nocheck) from [<809bc3a0>] (gpiod_set_value+0x3c/0x88 drivers/gpio/gpiolib.c:3903)
[<809bc364>] (gpiod_set_value) from [<809ccb3c>] (gpio_led_set+0x5c/0x60 drivers/leds/leds-gpio.c:57)
 r5:832f6844 r4:832f6844
[<809ccae0>] (gpio_led_set) from [<809ca3d4>] (__led_set_brightness drivers/leds/led-core.c:52 [inline])
[<809ccae0>] (gpio_led_set) from [<809ca3d4>] (led_set_brightness_nopm drivers/leds/led-core.c:335 [inline])
[<809ccae0>] (gpio_led_set) from [<809ca3d4>] (led_set_brightness_nosleep+0x38/0x44 drivers/leds/led-core.c:369)
 r5:832f6844 r4:84fb094c
[<809ca39c>] (led_set_brightness_nosleep) from [<809cd438>] (led_heartbeat_function+0x84/0x144 drivers/leds/trigger/ledtrig-heartbeat.c:90)
[<809cd3b4>] (led_heartbeat_function) from [<80327070>] (call_timer_fn+0x30/0x220 kernel/time/timer.c:1748)
 r7:ffffaf52 r6:809cd3b4 r5:84fb094c r4:83216000
[<80327040>] (call_timer_fn) from [<80327524>] (expire_timers kernel/time/timer.c:1799 [inline])
[<80327040>] (call_timer_fn) from [<80327524>] (__run_timers+0x2c4/0x3f8 kernel/time/timer.c:2373)
 r9:df805ebc r8:ffffaf52 r7:00000000 r6:809cd3b4 r5:dddd9f00 r4:84fb094c
[<80327260>] (__run_timers) from [<803276c0>] (__run_timer_base kernel/time/timer.c:2385 [inline])
[<80327260>] (__run_timers) from [<803276c0>] (__run_timer_base kernel/time/timer.c:2377 [inline])
[<80327260>] (__run_timers) from [<803276c0>] (run_timer_base+0x68/0x78 kernel/time/timer.c:2394)
 r10:83216000 r9:82804d80 r8:00000102 r7:00000001 r6:00000082 r5:00000002
 r4:dddd9f00
[<80327658>] (run_timer_base) from [<803276ec>] (run_timer_softirq+0x1c/0x34 kernel/time/timer.c:2404)
 r4:82804084
[<803276d0>] (run_timer_softirq) from [<8025b65c>] (handle_softirqs+0x140/0x458 kernel/softirq.c:622)
[<8025b51c>] (handle_softirqs) from [<8025bad0>] (__do_softirq kernel/softirq.c:656 [inline])
[<8025b51c>] (handle_softirqs) from [<8025bad0>] (invoke_softirq kernel/softirq.c:496 [inline])
[<8025b51c>] (handle_softirqs) from [<8025bad0>] (__irq_exit_rcu+0x110/0x1d0 kernel/softirq.c:723)
 r10:00000000 r9:83216000 r8:00000000 r7:df865e08 r6:82443f98 r5:8247f0cc
 r4:83216000
[<8025b9c0>] (__irq_exit_rcu) from [<8025be48>] (irq_exit+0x10/0x18 kernel/softirq.c:751)
 r5:8247f0cc r4:826c3a9c
[<8025be38>] (irq_exit) from [<81aad964>] (generic_handle_arch_irq+0x7c/0x80 kernel/irq/handle.c:295)
[<81aad8e8>] (generic_handle_arch_irq) from [<81a7d904>] (call_with_stack+0x1c/0x20 arch/arm/lib/call_with_stack.S:40)
 r9:83216000 r8:83e88288 r7:df865e3c r6:ffffffff r5:60000013 r4:809c822c
[<81a7d8e8>] (call_with_stack) from [<80200bec>] (__irq_svc+0x8c/0xbc arch/arm/kernel/entry-armv.S:228)
Exception stack(0xdf865e08 to 0xdf865e50)
5e00:                   e01c2008 00000008 00002f90 00000000 e01c2008 00000008
5e20: 00000001 83f7d168 83e88288 83f7d040 00000000 df865e6c df865e58 df865e58
5e40: 809c8228 809c822c 60000013 ffffffff
[<809c820c>] (gpio_mmio_write32) from [<809c7a4c>] (gpio_mmio_set+0x64/0x80 drivers/gpio/gpio-mmio.c:241)
 r5:00000008 r4:83f7d040
[<809c79e8>] (gpio_mmio_set) from [<809b81e8>] (gpiochip_set+0x1c/0x44 drivers/gpio/gpiolib.c:2919)
 r7:00000001 r6:00000000 r5:00000003 r4:838a77bc
[<809b81cc>] (gpiochip_set) from [<809baab0>] (gpiod_set_raw_value_commit+0x78/0x218 drivers/gpio/gpiolib.c:3662)
[<809baa38>] (gpiod_set_raw_value_commit) from [<809bc350>] (gpiod_set_value_nocheck+0x44/0x58 drivers/gpio/gpiolib.c:3881)
 r10:00000000 r9:00000000 r8:00000001 r7:ddde24c0 r6:83e1cd18 r5:00000001
 r4:838a77bc
[<809bc30c>] (gpiod_set_value_nocheck) from [<809bc3a0>] (gpiod_set_value+0x3c/0x88 drivers/gpio/gpiolib.c:3903)
[<809bc364>] (gpiod_set_value) from [<809ccb3c>] (gpio_led_set+0x5c/0x60 drivers/leds/leds-gpio.c:57)
 r5:000000ff r4:832f6b14
[<809ccae0>] (gpio_led_set) from [<809ca464>] (__led_set_brightness drivers/leds/led-core.c:52 [inline])
[<809ccae0>] (gpio_led_set) from [<809ca464>] (led_set_brightness_nopm drivers/leds/led-core.c:335 [inline])
[<809ccae0>] (gpio_led_set) from [<809ca464>] (led_set_brightness_nosleep drivers/leds/led-core.c:369 [inline])
[<809ccae0>] (gpio_led_set) from [<809ca464>] (led_set_brightness+0x84/0x90 drivers/leds/led-core.c:328)
 r5:000000ff r4:832f6b14
[<809ca3e0>] (led_set_brightness) from [<809cbfe4>] (led_trigger_event drivers/leds/led-triggers.c:420 [inline])
[<809ca3e0>] (led_set_brightness) from [<809cbfe4>] (led_trigger_event+0x40/0x58 drivers/leds/led-triggers.c:408)
 r5:000000ff r4:832f6b14
[<809cbfa4>] (led_trigger_event) from [<809cd640>] (ledtrig_cpu+0xac/0xf4 drivers/leds/trigger/ledtrig-cpu.c:86)
 r7:ddde24c0 r6:00000002 r5:82b15cd8 r4:000000fe
[<809cd594>] (ledtrig_cpu) from [<80227a38>] (arch_cpu_idle_exit+0x14/0x18 arch/arm/kernel/process.c:98)
 r9:00000000 r8:00000001 r7:8280c710 r6:83216000 r5:8280c6d0 r4:00000001
[<80227a24>] (arch_cpu_idle_exit) from [<802b168c>] (do_idle+0x5c/0x2d8 kernel/sched/idle.c:334)
[<802b1630>] (do_idle) from [<802b1c38>] (cpu_startup_entry+0x30/0x34 kernel/sched/idle.c:430)
 r10:00000000 r9:414fc0f0 r8:80003000 r7:82a7b4a4 r6:83216000 r5:00000001
 r4:00000092
[<802b1c08>] (cpu_startup_entry) from [<8022f360>] (secondary_start_kernel+0x128/0x194 arch/arm/kernel/smp.c:478)
[<8022f238>] (secondary_start_kernel) from [<80220094>] (__enable_mmu+0x0/0xc arch/arm/kernel/head.S:446)
 r7:82a7b4a4 r6:30c0387d r5:00000000 r4:830b7bc0