watchdog: BUG: soft lockup - CPU#0 stuck for 430s! [syz.1.313:4360] Modules linked in: CPU: 0 UID: 0 PID: 4360 Comm: syz.1.313 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline] PC is at _raw_spin_unlock_irq+0x28/0x54 kernel/locking/spinlock.c:202 LR is at tmigr_handle_remote_cpu kernel/time/timer_migration.c:1038 [inline] LR is at tmigr_handle_remote_up+0x268/0x4b0 kernel/time/timer_migration.c:1074 pc : [<81a89b04>] lr : [<80346224>] psr: 60000113 sp : df801e08 ip : df801e18 fp : df801e14 r10: 00000001 r9 : 00000054 r8 : cd342700 r7 : ddddb488 r6 : df801ee0 r5 : 830bf3b0 r4 : 830bf380 r3 : 0000c6bc r2 : 00000101 r1 : 830bf3b0 r0 : ddddb488 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 85fb7f80 DAC: fffffffd Call trace: frame pointer underflow [<81a89adc>] (_raw_spin_unlock_irq) from [<80346224>] (tmigr_handle_remote_cpu kernel/time/timer_migration.c:1038 [inline]) [<81a89adc>] (_raw_spin_unlock_irq) from [<80346224>] (tmigr_handle_remote_up+0x268/0x4b0 kernel/time/timer_migration.c:1074) [<80345fbc>] (tmigr_handle_remote_up) from [<803444d4>] (__walk_groups_from+0x3c/0xe4 kernel/time/timer_migration.c:566) r10:83ff4800 r9:8280c820 r8:80345fbc r7:df801ee0 r6:830bf380 r5:00000002 r4:830bf380 [<80344498>] (__walk_groups_from) from [<8034686c>] (__walk_groups kernel/time/timer_migration.c:583 [inline]) [<80344498>] (__walk_groups_from) from [<8034686c>] (tmigr_handle_remote+0xe8/0x108 kernel/time/timer_migration.c:1133) r9:82804d80 r8:00000100 r7:00000001 r6:00000002 r5:00000002 r4:dddc7488 [<80346784>] (tmigr_handle_remote) from [<80326e68>] (run_timer_softirq+0x30/0x34 kernel/time/timer.c:2408) r4:82804084 [<80326e38>] (run_timer_softirq) from [<8025af68>] (handle_softirqs+0x140/0x458 kernel/softirq.c:622) [<8025ae28>] (handle_softirqs) from [<8025b3dc>] (__do_softirq kernel/softirq.c:656 [inline]) [<8025ae28>] (handle_softirqs) from [<8025b3dc>] (invoke_softirq kernel/softirq.c:496 [inline]) [<8025ae28>] (handle_softirqs) from [<8025b3dc>] (__irq_exit_rcu+0x110/0x1d0 kernel/softirq.c:723) r10:00006364 r9:00000000 r8:00000000 r7:ec9c1fb0 r6:82440a40 r5:8247bc64 r4:83ff4800 [<8025b2cc>] (__irq_exit_rcu) from [<8025b754>] (irq_exit+0x10/0x18 kernel/softirq.c:751) r5:8247bc64 r4:826c2a9c [<8025b744>] (irq_exit) from [<81a7b738>] (generic_handle_arch_irq+0x7c/0x80 kernel/irq/handle.c:295) [<81a7b6bc>] (generic_handle_arch_irq) from [<81a4b818>] (call_with_stack+0x1c/0x20 arch/arm/lib/call_with_stack.S:40) r9:00000000 r8:826b8044 r7:83ff4800 r6:ffffffff r5:20000010 r4:000194ac [<81a4b7fc>] (call_with_stack) from [<80200f68>] (__irq_usr+0x88/0xa0 arch/arm/kernel/entry-armv.S:443) Exception stack(0xec9c1fb0 to 0xec9c1ff8) 1fa0: ffffffff 00000004 000001e4 00000000 1fc0: 00000000 00000000 00000000 00000000 00300000 00000000 00006364 76f5c0bc 1fe0: 20002e10 20002e10 000194ac 000194ac 20000010 ffffffff Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express PC is at arch_spin_lock arch/arm/include/asm/spinlock.h:74 [inline] PC is at do_raw_spin_lock include/linux/spinlock.h:187 [inline] PC is at __raw_spin_lock include/linux/spinlock_api_smp.h:134 [inline] PC is at _raw_spin_lock+0x40/0x58 kernel/locking/spinlock.c:154 LR is at __raw_spin_lock include/linux/spinlock_api_smp.h:132 [inline] LR is at _raw_spin_lock+0x18/0x58 kernel/locking/spinlock.c:154 pc : [<81a89cbc>] lr : [<81a89c94>] psr: 80000113 sp : df805d68 ip : df805d68 fp : df805d7c r10: 81c05430 r9 : 84128e40 r8 : 8387fe88 r7 : 84128f68 r6 : 00000001 r5 : 00000001 r4 : 84128f68 r3 : 0000a64d r2 : 0000a64e r1 : 00000000 r0 : 00000001 Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 851578c0 DAC: 00000000 Call trace: frame pointer underflow [<81a89c7c>] (_raw_spin_lock) from [<809c0ef0>] (class_raw_spinlock_constructor include/linux/spinlock.h:535 [inline]) [<81a89c7c>] (_raw_spin_lock) from [<809c0ef0>] (gpio_mmio_set+0x44/0x80 drivers/gpio/gpio-mmio.c:234) r5:00000001 r4:84128e40 [<809c0eac>] (gpio_mmio_set) from [<809b187c>] (gpiochip_set+0x1c/0x44 drivers/gpio/gpiolib.c:2919) r7:00000001 r6:00000000 r5:00000000 r4:841cad80 [<809b1860>] (gpiochip_set) from [<809b4094>] (gpiod_set_raw_value_commit+0x78/0x218 drivers/gpio/gpiolib.c:3662) [<809b401c>] (gpiod_set_raw_value_commit) from [<809b5934>] (gpiod_set_value_nocheck+0x44/0x58 drivers/gpio/gpiolib.c:3881) r10:81c05430 r9:df805ebc r8:00000102 r7:00001912 r6:00000007 r5:00000001 r4:841cad80 [<809b58f0>] (gpiod_set_value_nocheck) from [<809b5984>] (gpiod_set_value+0x3c/0x88 drivers/gpio/gpiolib.c:3903) [<809b5948>] (gpiod_set_value) from [<809c5fec>] (gpio_led_set+0x5c/0x60 drivers/leds/leds-gpio.c:57) r5:8330f844 r4:8330f844 [<809c5f90>] (gpio_led_set) from [<809c3898>] (__led_set_brightness drivers/leds/led-core.c:52 [inline]) [<809c5f90>] (gpio_led_set) from [<809c3898>] (led_set_brightness_nopm drivers/leds/led-core.c:335 [inline]) [<809c5f90>] (gpio_led_set) from [<809c3898>] (led_set_brightness_nosleep+0x38/0x44 drivers/leds/led-core.c:369) r5:8330f844 r4:84d0608c [<809c3860>] (led_set_brightness_nosleep) from [<809c68e8>] (led_heartbeat_function+0x84/0x144 drivers/leds/trigger/ledtrig-heartbeat.c:90) [<809c6864>] (led_heartbeat_function) from [<803267d8>] (call_timer_fn+0x30/0x220 kernel/time/timer.c:1748) r7:00001912 r6:809c6864 r5:84d0608c r4:83216000 [<803267a8>] (call_timer_fn) from [<80326c8c>] (expire_timers kernel/time/timer.c:1799 [inline]) [<803267a8>] (call_timer_fn) from [<80326c8c>] (__run_timers+0x2c4/0x3f8 kernel/time/timer.c:2373) r9:df805ebc r8:00001912 r7:00000000 r6:809c6864 r5:dddd9f00 r4:84d0608c [<803269c8>] (__run_timers) from [<80326e28>] (__run_timer_base kernel/time/timer.c:2385 [inline]) [<803269c8>] (__run_timers) from [<80326e28>] (__run_timer_base kernel/time/timer.c:2377 [inline]) [<803269c8>] (__run_timers) from [<80326e28>] (run_timer_base+0x68/0x78 kernel/time/timer.c:2394) r10:83216000 r9:82804d80 r8:00000102 r7:00000001 r6:00000082 r5:00000002 r4:dddd9f00 [<80326dc0>] (run_timer_base) from [<80326e54>] (run_timer_softirq+0x1c/0x34 kernel/time/timer.c:2404) r4:82804084 [<80326e38>] (run_timer_softirq) from [<8025af68>] (handle_softirqs+0x140/0x458 kernel/softirq.c:622) [<8025ae28>] (handle_softirqs) from [<8025b3dc>] (__do_softirq kernel/softirq.c:656 [inline]) [<8025ae28>] (handle_softirqs) from [<8025b3dc>] (invoke_softirq kernel/softirq.c:496 [inline]) [<8025ae28>] (handle_softirqs) from [<8025b3dc>] (__irq_exit_rcu+0x110/0x1d0 kernel/softirq.c:723) r10:00000000 r9:83216000 r8:00000000 r7:df865e08 r6:82440a40 r5:8247bc64 r4:83216000 [<8025b2cc>] (__irq_exit_rcu) from [<8025b754>] (irq_exit+0x10/0x18 kernel/softirq.c:751) r5:8247bc64 r4:826c2a9c [<8025b744>] (irq_exit) from [<81a7b738>] (generic_handle_arch_irq+0x7c/0x80 kernel/irq/handle.c:295) [<81a7b6bc>] (generic_handle_arch_irq) from [<81a4b818>] (call_with_stack+0x1c/0x20 arch/arm/lib/call_with_stack.S:40) r9:83216000 r8:8387fe88 r7:df865e3c r6:ffffffff r5:60000013 r4:809c16f0 [<81a4b7fc>] (call_with_stack) from [<80200bec>] (__irq_svc+0x8c/0xbc arch/arm/kernel/entry-armv.S:228) Exception stack(0xdf865e08 to 0xdf865e50) 5e00: e05ff008 0000000c 0000a64d 00000000 e05ff008 0000000c 5e20: 00000001 84128f68 8387fe88 84128e40 00000000 df865e6c df865e58 df865e58 5e40: 809c16ec 809c16f0 60000013 ffffffff [<809c16d0>] (gpio_mmio_write32) from [<809c0f10>] (gpio_mmio_set+0x64/0x80 drivers/gpio/gpio-mmio.c:241) r5:00000008 r4:84128e40 [<809c0eac>] (gpio_mmio_set) from [<809b187c>] (gpiochip_set+0x1c/0x44 drivers/gpio/gpiolib.c:2919) r7:00000001 r6:00000000 r5:00000003 r4:841cadbc [<809b1860>] (gpiochip_set) from [<809b4094>] (gpiod_set_raw_value_commit+0x78/0x218 drivers/gpio/gpiolib.c:3662) [<809b401c>] (gpiod_set_raw_value_commit) from [<809b5934>] (gpiod_set_value_nocheck+0x44/0x58 drivers/gpio/gpiolib.c:3881) r10:00000000 r9:00000000 r8:00000001 r7:ddde24c0 r6:8381c958 r5:00000001 r4:841cadbc [<809b58f0>] (gpiod_set_value_nocheck) from [<809b5984>] (gpiod_set_value+0x3c/0x88 drivers/gpio/gpiolib.c:3903) [<809b5948>] (gpiod_set_value) from [<809c5fec>] (gpio_led_set+0x5c/0x60 drivers/leds/leds-gpio.c:57) r5:000000ff r4:8330fb14 [<809c5f90>] (gpio_led_set) from [<809c3928>] (__led_set_brightness drivers/leds/led-core.c:52 [inline]) [<809c5f90>] (gpio_led_set) from [<809c3928>] (led_set_brightness_nopm drivers/leds/led-core.c:335 [inline]) [<809c5f90>] (gpio_led_set) from [<809c3928>] (led_set_brightness_nosleep drivers/leds/led-core.c:369 [inline]) [<809c5f90>] (gpio_led_set) from [<809c3928>] (led_set_brightness+0x84/0x90 drivers/leds/led-core.c:328) r5:000000ff r4:8330fb14 [<809c38a4>] (led_set_brightness) from [<809c5494>] (led_trigger_event drivers/leds/led-triggers.c:420 [inline]) [<809c38a4>] (led_set_brightness) from [<809c5494>] (led_trigger_event+0x40/0x58 drivers/leds/led-triggers.c:408) r5:000000ff r4:8330fb14 [<809c5454>] (led_trigger_event) from [<809c6af0>] (ledtrig_cpu+0xac/0xf4 drivers/leds/trigger/ledtrig-cpu.c:86) r7:ddde24c0 r6:00000002 r5:82b15bd8 r4:000001fd [<809c6a44>] (ledtrig_cpu) from [<80227758>] (arch_cpu_idle_exit+0x14/0x18 arch/arm/kernel/process.c:98) r9:00000000 r8:00000001 r7:8280c710 r6:83216000 r5:8280c6d0 r4:00000001 [<80227744>] (arch_cpu_idle_exit) from [<802b13cc>] (do_idle+0x5c/0x2d8 kernel/sched/idle.c:334) [<802b1370>] (do_idle) from [<802b1978>] (cpu_startup_entry+0x30/0x34 kernel/sched/idle.c:430) r10:00000000 r9:414fc0f0 r8:80003000 r7:82a7b4a4 r6:83216000 r5:00000001 r4:00000092 [<802b1948>] (cpu_startup_entry) from [<8022f04c>] (secondary_start_kernel+0x128/0x180 arch/arm/kernel/smp.c:478) [<8022ef24>] (secondary_start_kernel) from [<80220094>] (__enable_mmu+0x0/0xc arch/arm/kernel/head.S:446) r7:82a7b4a4 r6:30c0387d r5:00000000 r4:830b7b80