syzbot
INFO: task hung in i2c_transfer (5)
Status: auto-obsoleted due to no activity on 2026/08/23 14:38
Subsystems:
i2c
Labels:
prio:high
[Documentation on labels]
First crash: 405d, last: 98d
Sample crash report:
INFO: task syz.9.6342:28020 blocked for more than 430 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.9.6342 state:D stack:0 pid:28020 tgid:28019 ppid:27673 task_flags:0x400040 flags:0x00000001
Call trace:
[<81ae78ac>] (__schedule) from [<80294840>] (__schedule_loop kernel/sched/core.c:6990 [inline])
[<81ae78ac>] (__schedule) from [<80294840>] (rt_mutex_schedule+0x20/0x38 kernel/sched/core.c:7286)
r10:00000000 r9:86708c00 r8:e0301db8 r7:e0301dc0 r6:86708c00 r5:84880c00
r4:84880c00
[<80294820>] (rt_mutex_schedule) from [<81aeeaf4>] (rt_mutex_slowlock_block.constprop.0+0x16c/0x1e4 kernel/locking/rtmutex.c:1647)
r5:84880c00 r4:830b9854
[<81aee988>] (rt_mutex_slowlock_block.constprop.0) from [<81aeff14>] (__rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline])
[<81aee988>] (rt_mutex_slowlock_block.constprop.0) from [<81aeff14>] (__rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1760 [inline])
[<81aee988>] (rt_mutex_slowlock_block.constprop.0) from [<81aeff14>] (rt_mutex_slowlock.constprop.0+0xcc/0x3d0 kernel/locking/rtmutex.c:1800)
r10:81148da0 r9:60000013 r8:e0301dc0 r7:e0301db8 r6:00000002 r5:830b9854
r4:84880c00
[<81aefe48>] (rt_mutex_slowlock.constprop.0) from [<81af02fc>] (__rt_mutex_lock kernel/locking/rtmutex.c:1815 [inline])
[<81aefe48>] (rt_mutex_slowlock.constprop.0) from [<81af02fc>] (__rt_mutex_lock_common kernel/locking/rtmutex_api.c:49 [inline])
[<81aefe48>] (rt_mutex_slowlock.constprop.0) from [<81af02fc>] (rt_mutex_lock+0x44/0x48 kernel/locking/rtmutex_api.c:89)
r10:81148da0 r9:00000001 r8:85d43000 r7:85fb0400 r6:e0301e80 r5:00000001
r4:830b9840
[<81af02b8>] (rt_mutex_lock) from [<81141450>] (i2c_adapter_lock_bus+0x14/0x18 drivers/i2c/i2c-core-base.c:849)
[<8114143c>] (i2c_adapter_lock_bus) from [<81143464>] (i2c_lock_bus include/linux/i2c.h:809 [inline])
[<8114143c>] (i2c_adapter_lock_bus) from [<81143464>] (__i2c_lock_bus_helper drivers/i2c/i2c-core.h:46 [inline])
[<8114143c>] (i2c_adapter_lock_bus) from [<81143464>] (i2c_transfer+0xc8/0x108 drivers/i2c/i2c-core-base.c:2313)
[<8114339c>] (i2c_transfer) from [<81143500>] (i2c_transfer_buffer_flags+0x5c/0x8c drivers/i2c/i2c-core-base.c:2345)
r6:00000000 r5:85d43000 r4:00000700
[<811434a4>] (i2c_transfer_buffer_flags) from [<81148e08>] (i2c_master_recv include/linux/i2c.h:79 [inline])
[<811434a4>] (i2c_transfer_buffer_flags) from [<81148e08>] (i2cdev_read+0x68/0x154 drivers/i2c/i2c-dev.c:155)
r6:865259c0 r5:00000000 r4:00000700
[<81148da0>] (i2cdev_read) from [<80574f58>] (vfs_read fs/read_write.c:572 [inline])
[<81148da0>] (i2cdev_read) from [<80574f58>] (vfs_read+0xc0/0x328 fs/read_write.c:554)
r9:00000001 r8:84880c00 r7:e0301f68 r6:00000000 r5:865259c0 r4:00000700
[<80574e98>] (vfs_read) from [<80575bec>] (ksys_read+0x74/0xec fs/read_write.c:717)
r10:00000003 r9:84880c00 r8:8020029c r7:00000000 r6:00000000 r5:865259c0
r4:865259c1
[<80575b78>] (ksys_read) from [<80575c74>] (__do_sys_read fs/read_write.c:726 [inline])
[<80575b78>] (ksys_read) from [<80575c74>] (sys_read+0x10/0x14 fs/read_write.c:724)
r7:00000003 r6:00346310 r5:00000000 r4:00000000
[<80575c64>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67)
Exception stack(0xe0301fa8 to 0xe0301ff0)
1fa0: 00000000 00000000 00000004 00000000 00000700 00000000
1fc0: 00000000 00000000 00346310 00000003 003462d8 00000000 00000001 76f160dc
1fe0: 76f15e88 76f15e78 00018ba0 001302e0
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 29 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT
Tainted: [L]=SOFTLOCKUP
Hardware name: ARM-Versatile Express
Call trace:
[<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
r7:60000193 r6:60000193 r5:822a7ed4 r4:00000000
[<80201af0>] (show_stack) from [<8021e444>] (__dump_stack lib/dump_stack.c:94 [inline])
[<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120)
[<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c lib/dump_stack.c:129)
r7:00000000 r6:00000113 r5:00000000 r4:00000001
[<8021e458>] (dump_stack) from [<81ad12dc>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:113)
[<81ad118c>] (nmi_cpu_backtrace) from [<81ad142c>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62)
r7:00000000 r6:8280c550 r5:8281afb8 r4:ffffffff
[<81ad12fc>] (nmi_trigger_cpumask_backtrace) from [<8022f124>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852)
r9:8281bca0 r8:8280c6d8 r7:82804d80 r6:00007ec9 r5:82ac7834 r4:00000048
[<8022f10c>] (arch_trigger_cpumask_backtrace) from [<81ad8f1c>] (trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline])
[<8022f10c>] (arch_trigger_cpumask_backtrace) from [<81ad8f1c>] (__sys_info lib/sys_info.c:157 [inline])
[<8022f10c>] (arch_trigger_cpumask_backtrace) from [<81ad8f1c>] (sys_info+0x68/0xa8 lib/sys_info.c:165)
[<81ad8eb4>] (sys_info) from [<80384f54>] (check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline])
[<81ad8eb4>] (sys_info) from [<80384f54>] (watchdog+0x598/0x8d4 kernel/hung_task.c:515)
r5:82ac7834 r4:85ada614
[<803849bc>] (watchdog) from [<802813f4>] (kthread+0x11c/0x154 kernel/kthread.c:436)
r10:00000000 r9:df819e60 r8:83103500 r7:00000000 r6:803849bc r5:831f8000
r4:8333dc00
[<802812d8>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137)
Exception stack(0xdf8d5fb0 to 0xdf8d5ff8)
5fa0: 00000000 00000000 00000000 00000000
5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
5fe0: 00000000 00000000 00000000 00000000 00000013 00000000
r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802812d8 r4:8333dc00
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30697 Comm: syz.3.6558 Tainted: G L syzkaller #0 PREEMPT
Tainted: [L]=SOFTLOCKUP
Hardware name: ARM-Versatile Express
PC is at __wake_up+0x0/0x60 kernel/sched/wait.c:145
LR is at netlink_rcv_wake net/netlink/af_netlink.c:369 [inline]
LR is at netlink_recvmsg+0x210/0x284 net/netlink/af_netlink.c:1985
pc : [<802c19f8>] lr : [<816f5dc4>] psr: 40000113
sp : dfe31cd8 ip : dfe31c88 fp : dfe31d3c
r10: 00000000 r9 : 00000000 r8 : 83738a00
r7 : dfe31ee0 r6 : 00000002 r5 : 83336180 r4 : b4753000
r3 : 00000000 r2 : 00000001 r1 : 00000001 r0 : b475326c
Flags: nZcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none
Control: 30c5387d Table: b48edc40 DAC: 00000000
Call trace:
[<816f5bb4>] (netlink_recvmsg) from [<815c3888>] (sock_recvmsg_nosec net/socket.c:1078 [inline])
[<816f5bb4>] (netlink_recvmsg) from [<815c3888>] (____sys_recvmsg+0x160/0x184 net/socket.c:2810)
r10:dfe31d4c r9:00000002 r8:00000000 r7:816f5bb4 r6:83738a00 r5:20421a20
r4:dfe31ee0
[<815c3728>] (____sys_recvmsg) from [<815c4d60>] (___sys_recvmsg+0x88/0xbc net/socket.c:2854)
r10:ffffff81 r9:84ef6c00 r8:83738a00 r7:00000002 r6:20421a20 r5:dfe31ee0
r4:00000000
[<815c4cd8>] (___sys_recvmsg) from [<815c4eb4>] (do_recvmmsg+0x120/0x2f4 net/socket.c:2949)
r8:00000000 r7:00000002 r6:00021095 r5:20421a20 r4:dfe31ec0
[<815c4d94>] (do_recvmmsg) from [<815c7380>] (__sys_recvmmsg net/socket.c:3023 [inline])
[<815c4d94>] (do_recvmmsg) from [<815c7380>] (__do_sys_recvmmsg_time32 net/socket.c:3057 [inline])
[<815c4d94>] (do_recvmmsg) from [<815c7380>] (sys_recvmmsg_time32+0xc4/0xd8 net/socket.c:3050)
r10:0000016d r9:84ef6c00 r8:ffffff81 r7:00000002 r6:00000000 r5:20000780
r4:00000003
[<815c72bc>] (sys_recvmmsg_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67)
Exception stack(0xdfe31fa8 to 0xdfe31ff0)
1fa0: 00000000 00000000 00000003 20000780 ffffff81 00000002
1fc0: 00000000 00000000 003463b8 0000016d 00346378 00000000 003d0f00 76f060dc
1fe0: 76f05e88 76f05e78 00018ba0 001302e0
r8:8020029c r7:0000016d r6:003463b8 r5:00000000 r4:00000000
* Struck through repros no longer work on HEAD.