INFO: task syz.2.4981:14474 blocked for more than 430 seconds. Not tainted 6.17.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.4981 state:D stack:0 pid:14474 tgid:14473 ppid:9766 task_flags:0x400040 flags:0x00000001 Call trace: [<81a3b41c>] (__schedule) from [<80297314>] (__schedule_loop kernel/sched/core.c:7043 [inline]) [<81a3b41c>] (__schedule) from [<80297314>] (rt_mutex_schedule+0x20/0x38 kernel/sched/core.c:7339) r10:841c0000 r9:00000002 r8:00000000 r7:dfb21dc0 r6:dfb21dc8 r5:83b8c800 r4:83b8c800 [<802972f4>] (rt_mutex_schedule) from [<81a424ec>] (rt_mutex_slowlock_block.constprop.0+0x40/0x1d4 kernel/locking/rtmutex.c:1647) r5:83b8c800 r4:833a1454 [<81a424ac>] (rt_mutex_slowlock_block.constprop.0) from [<81a43844>] (__rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline]) [<81a424ac>] (rt_mutex_slowlock_block.constprop.0) from [<81a43844>] (__rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1760 [inline]) [<81a424ac>] (rt_mutex_slowlock_block.constprop.0) from [<81a43844>] (rt_mutex_slowlock.constprop.0+0xd4/0x364 kernel/locking/rtmutex.c:1800) r10:60000013 r9:dfb21dc8 r8:00000002 r7:dfb21dc0 r6:833a1454 r5:00000000 r4:83b8c800 [<81a43770>] (rt_mutex_slowlock.constprop.0) from [<81a43bb8>] (__rt_mutex_lock kernel/locking/rtmutex.c:1815 [inline]) [<81a43770>] (rt_mutex_slowlock.constprop.0) from [<81a43bb8>] (__rt_mutex_lock_common kernel/locking/rtmutex_api.c:49 [inline]) [<81a43770>] (rt_mutex_slowlock.constprop.0) from [<81a43bb8>] (rt_mutex_lock+0x44/0x48 kernel/locking/rtmutex_api.c:89) r10:81ddd574 r9:00000000 r8:dfb21f68 r7:00000000 r6:dfb21e88 r5:00000001 r4:833a1440 [<81a43b74>] (rt_mutex_lock) from [<810cb490>] (i2c_adapter_lock_bus+0x14/0x18 drivers/i2c/i2c-core-base.c:852) [<810cb47c>] (i2c_adapter_lock_bus) from [<810cd284>] (i2c_lock_bus include/linux/i2c.h:809 [inline]) [<810cb47c>] (i2c_adapter_lock_bus) from [<810cd284>] (__i2c_lock_bus_helper drivers/i2c/i2c-core.h:46 [inline]) [<810cb47c>] (i2c_adapter_lock_bus) from [<810cd284>] (i2c_transfer+0x9c/0x110 drivers/i2c/i2c-core-base.c:2316) [<810cd1e8>] (i2c_transfer) from [<810cd354>] (i2c_transfer_buffer_flags+0x5c/0x8c drivers/i2c/i2c-core-base.c:2348) r6:00000000 r5:00000010 r4:00000000 [<810cd2f8>] (i2c_transfer_buffer_flags) from [<810d22d8>] (i2c_master_send include/linux/i2c.h:109 [inline]) [<810cd2f8>] (i2c_transfer_buffer_flags) from [<810d22d8>] (i2cdev_write+0x70/0xb4 drivers/i2c/i2c-dev.c:183) r7:85bf6000 r6:848e3540 r5:00000010 r4:00000000 [<810d2268>] (i2cdev_write) from [<80553eb8>] (vfs_write+0xac/0x44c fs/read_write.c:684) r7:83b8c800 r6:00000000 r5:848e3540 r4:810d2268 [<80553e0c>] (vfs_write) from [<805543c8>] (ksys_write+0x74/0xe8 fs/read_write.c:738) r10:00000004 r9:83b8c800 r8:8020029c r7:00000000 r6:00000000 r5:848e3540 r4:848e3541 [<80554354>] (ksys_write) from [<8055444c>] (__do_sys_write fs/read_write.c:749 [inline]) [<80554354>] (ksys_write) from [<8055444c>] (sys_write+0x10/0x14 fs/read_write.c:746) r7:00000004 r6:002f6308 r5:00000000 r4:00000000 [<8055443c>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfb21fa8 to 0xdfb21ff0) 1fa0: 00000000 00000000 00000003 00000000 00000000 00000000 1fc0: 00000000 00000000 002f6308 00000004 002e0000 00000000 00006364 76f340bc 1fe0: 76f33ec0 76f33eb0 0001948c 001322c0 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:000f0113 r5:600f0193 r4:822602a4 [<80201b08>] (show_stack) from [<8021fb90>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000001 r4:00000001 [<8021fb9c>] (dump_stack) from [<81a25030>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81a24ed0>] (nmi_cpu_backtrace) from [<81a2517c>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8280c690 r5:8281ac94 r4:ffffffff [<81a2504c>] (nmi_trigger_cpumask_backtrace) from [<802304fc>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:82abd564 r8:82804d40 r7:0002014f r6:00007f1c r5:8281b248 r4:8610c80c [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037da20>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037da20>] (check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037da20>] (watchdog+0x4d4/0x81c kernel/hung_task.c:491) [<8037d54c>] (watchdog) from [<80281fec>] (kthread+0x12c/0x280 kernel/kthread.c:463) r10:00000000 r9:00000000 r8:8037d54c r7:8332b700 r6:8332b700 r5:832e9800 r4:00000001 [<80281ec0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281ec0 r4:832bd9c0 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 18268 Comm: kworker/u10:8 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at avc_reclaim_node security/selinux/avc.c:467 [inline] PC is at avc_alloc_node+0xa8/0x1cc security/selinux/avc.c:507 LR is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] LR is at _raw_spin_unlock_irqrestore+0x30/0x54 kernel/locking/spinlock.c:194 pc : [<8078cf84>] lr : [<81a45640>] psr: 60070013 sp : dffbdb08 ip : dffbdaf8 fp : dffbdb4c r10: 82adbcd4 r9 : 8078c7e8 r8 : 82adbcd0 r7 : 000002dd r6 : 82adb03c r5 : 00000001 r4 : 82adbccc r3 : 00000000 r2 : 00000000 r1 : 60070013 r0 : 00000001 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 84e059c0 DAC: fffffffd Call trace: [<8078cedc>] (avc_alloc_node) from [<8078d174>] (avc_insert security/selinux/avc.c:618 [inline]) [<8078cedc>] (avc_alloc_node) from [<8078d174>] (avc_compute_av+0x78/0x1f4 security/selinux/avc.c:993) r10:dffbdc48 r9:dffbdba8 r8:00000007 r7:0000002e r6:82adaccc r5:00000001 r4:00000002 [<8078d0fc>] (avc_compute_av) from [<8078d598>] (avc_perm_nonode+0x60/0xc4 security/selinux/avc.c:1117) r10:00000000 r9:00000001 r8:dffbdc48 r7:00000007 r6:0000002e r5:00000001 r4:00004000 [<8078d538>] (avc_perm_nonode) from [<8078e47c>] (avc_has_perm_noaudit+0x120/0x158 security/selinux/avc.c:1160) r8:00000007 r7:0000002e r6:00004000 r5:dffbdc48 r4:00000001 [<8078e35c>] (avc_has_perm_noaudit) from [<80796f6c>] (selinux_inode_permission+0x1c4/0x384 security/selinux/hooks.c:3233) r9:00000001 r8:00004000 r7:83489018 r6:83ad612c r5:00000021 r4:860a0008 [<80796da8>] (selinux_inode_permission) from [<8077c67c>] (security_inode_permission+0x60/0x1cc security/security.c:2324) r10:85c72300 r9:00000001 r8:dffbdd70 r7:00000000 r6:8291ed6c r5:00000021 r4:83489018 [<8077c61c>] (security_inode_permission) from [<80562510>] (inode_permission+0x64/0x178 fs/namei.c:601) r5:00000021 r4:83489018 [<805624ac>] (inode_permission) from [<805632c8>] (may_open+0x70/0x160 fs/namei.c:3477) r9:00000001 r8:dffbdd70 r7:83489018 r6:8291ed6c r5:8291ed6c r4:00020020 [<80563258>] (may_open) from [<80568a68>] (do_open fs/namei.c:3885 [inline]) [<80563258>] (may_open) from [<80568a68>] (path_openat+0x2ec/0x1150 fs/namei.c:4046) r7:00000000 r6:dffbde38 r4:00020020 [<8056877c>] (path_openat) from [<80569978>] (do_filp_open+0xac/0x148 fs/namei.c:4073) r10:00000019 r9:8567d000 r8:00000001 r7:dffbdd70 r6:dffbde38 r5:856d1800 r4:ffffff9c [<805698cc>] (do_filp_open) from [<8055d4a4>] (do_open_execat+0x70/0x1a0 fs/exec.c:783) r9:86151240 r8:00000019 r7:86151058 r6:856d1800 r5:00010000 r4:00000001 [<8055d434>] (do_open_execat) from [<8055d600>] (open_exec+0x2c/0x44 fs/exec.c:822) r5:86151200 r4:8567d000 [<8055d5d4>] (open_exec) from [<805df704>] (load_elf_binary+0x518/0x14d0 fs/binfmt_elf.c:892) r5:86151200 r4:86151000 [<805df1ec>] (load_elf_binary) from [<8055cd14>] (search_binary_handler fs/exec.c:1670 [inline]) [<805df1ec>] (load_elf_binary) from [<8055cd14>] (exec_binprm fs/exec.c:1702 [inline]) [<805df1ec>] (load_elf_binary) from [<8055cd14>] (bprm_execve fs/exec.c:1754 [inline]) [<805df1ec>] (load_elf_binary) from [<8055cd14>] (bprm_execve+0x270/0x534 fs/exec.c:1730) r10:86151058 r9:8291b1d0 r8:82ace808 r7:00000006 r6:fffffff8 r5:86151000 r4:8292077c [<8055caa4>] (bprm_execve) from [<8055e334>] (kernel_execve+0xf8/0x190 fs/exec.c:1920) r10:00000000 r9:00000000 r8:828f54f4 r7:85f38080 r6:8567e000 r5:86151000 r4:00000000 [<8055e23c>] (kernel_execve) from [<8027393c>] (call_usermodehelper_exec_async+0xf0/0x160 kernel/umh.c:109) r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:85f38140 r4:84acda80 [<8027384c>] (call_usermodehelper_exec_async) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdffbdfb0 to 0xdffbdff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r7:00000000 r6:00000000 r5:8027384c r4:85f38140