INFO: task syz.0.7986:20020 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.7986 state:D stack:0 pid:20020 tgid:20019 ppid:3094 task_flags:0x400040 flags:0x00000001 Call trace: [<81ab0e7c>] (__schedule) from [<81ab2128>] (__schedule_loop kernel/sched/core.c:6945 [inline]) [<81ab0e7c>] (__schedule) from [<81ab2128>] (schedule+0x2c/0x130 kernel/sched/core.c:6960) r10:00000189 r9:807bbab4 r8:84e5a400 r7:00000005 r6:84e5a400 r5:82804d80 r4:84e5a400 [<81ab20fc>] (schedule) from [<81aba8a0>] (schedule_timeout+0x8c/0x114 kernel/time/sleep_timeout.c:99) r5:82804d80 r4:0000aed2 [<81aba814>] (schedule_timeout) from [<8032ba20>] (schedule_timeout_uninterruptible kernel/time/sleep_timeout.c:158 [inline]) [<81aba814>] (schedule_timeout) from [<8032ba20>] (msleep+0x30/0x48 kernel/time/sleep_timeout.c:318) r6:84e5a400 r5:00000002 r4:000001f4 [<8032b9f0>] (msleep) from [<807be450>] (ssleep include/linux/delay.h:103 [inline]) [<8032b9f0>] (msleep) from [<807be450>] (sel_write_user+0x5c/0x240 security/selinux/selinuxfs.c:1085) r7:00000005 r6:86da7004 r5:00000000 r4:84e5a400 [<807be3f4>] (sel_write_user) from [<807bbb0c>] (selinux_transaction_write+0x58/0x7c security/selinux/selinuxfs.c:845) r10:00000189 r9:807bbab4 r8:84e5a400 r7:ee751f88 r6:807be3f4 r5:84f0d3c0 r4:00000005 [<807bbab4>] (selinux_transaction_write) from [<805694a0>] (do_loop_readv_writev fs/read_write.c:850 [inline]) [<807bbab4>] (selinux_transaction_write) from [<805694a0>] (do_loop_readv_writev fs/read_write.c:835 [inline]) [<807bbab4>] (selinux_transaction_write) from [<805694a0>] (vfs_writev+0x248/0x3c0 fs/read_write.c:1059) r7:ee751f88 r6:84f0d3c0 r5:00000000 r4:839cc400 [<80569258>] (vfs_writev) from [<805697f0>] (do_pwritev+0x90/0xf0 fs/read_write.c:1153) r9:84e5a400 r8:8020029c r7:20003240 r6:00000001 r5:84f0d3c0 r4:84f0d3c1 [<80569760>] (do_pwritev) from [<8056b0f8>] (__do_sys_pwritev2 fs/read_write.c:1211 [inline]) [<80569760>] (do_pwritev) from [<8056b0f8>] (sys_pwritev2+0x2c/0x44 fs/read_write.c:1202) r7:00000189 r6:0031631c r5:00000001 r4:00000004 [<8056b0cc>] (sys_pwritev2) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xee751fa8 to 0xee751ff0) 1fa0: 00000004 00000001 00000003 20003240 00000001 0000000b 1fc0: 00000004 00000001 0031631c 00000189 00300000 00000000 00006364 76f200bc 1fe0: 76f1fec0 76f1feb0 0001929c 00132320 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00000113 r5:60000193 r4:822956f0 [<80201b58>] (show_stack) from [<8021ee24>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201b58>] (show_stack) from [<8021ee24>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<8021edb4>] (dump_stack_lvl) from [<8021ee48>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000001 r4:00000001 [<8021ee30>] (dump_stack) from [<81a9a960>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81a9a800>] (nmi_cpu_backtrace) from [<81a9aaac>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8280c6d0 r5:8281af1c r4:ffffffff [<81a9a97c>] (nmi_trigger_cpumask_backtrace) from [<8022f818>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:00007f48 r8:8280c850 r7:00015640 r6:00007f48 r5:82ac27e4 r4:00000048 [<8022f800>] (arch_trigger_cpumask_backtrace) from [<81aa25bc>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<8022f800>] (arch_trigger_cpumask_backtrace) from [<81aa25bc>] (__sys_info lib/sys_info.c:157 [inline]) [<8022f800>] (arch_trigger_cpumask_backtrace) from [<81aa25bc>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81aa2554>] (sys_info) from [<803836c0>] (check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]) [<81aa2554>] (sys_info) from [<803836c0>] (watchdog+0x464/0x8a0 kernel/hung_task.c:515) r5:82ac27e4 r4:839e140c [<8038325c>] (watchdog) from [<8027f5fc>] (kthread+0x12c/0x280 kernel/kthread.c:463) r10:00000000 r9:00000000 r8:8038325c r7:832d4180 r6:832d4180 r5:832e2400 r4:00000001 [<8027f4d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f4d0 r4:838c6500 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at arch_spin_lock arch/arm/include/asm/spinlock.h:74 [inline] PC is at do_raw_spin_lock include/linux/spinlock.h:187 [inline] PC is at __raw_spin_lock include/linux/spinlock_api_smp.h:134 [inline] PC is at _raw_spin_lock+0x40/0x58 kernel/locking/spinlock.c:154 LR is at __raw_spin_lock include/linux/spinlock_api_smp.h:132 [inline] LR is at _raw_spin_lock+0x18/0x58 kernel/locking/spinlock.c:154 pc : [<81abbc34>] lr : [<81abbc0c>] psr: 80000113 sp : 82801b40 ip : 82801b40 fp : 82801b54 r10: 81c05450 r9 : 8411fa40 r8 : 83352688 r7 : 8411fb68 r6 : 00000001 r5 : 00000001 r4 : 8411fb68 r3 : 000039eb r2 : 000039ec r1 : 00000000 r0 : 00000001 Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 84f7ce40 DAC: fffffffd Call trace: [<81abbbf4>] (_raw_spin_lock) from [<809c77ac>] (class_raw_spinlock_constructor include/linux/spinlock.h:535 [inline]) [<81abbbf4>] (_raw_spin_lock) from [<809c77ac>] (gpio_mmio_set+0x44/0x80 drivers/gpio/gpio-mmio.c:234) r5:00000001 r4:8411fa40 [<809c7768>] (gpio_mmio_set) from [<809b7f68>] (gpiochip_set+0x1c/0x44 drivers/gpio/gpiolib.c:2919) r7:00000001 r6:00000000 r5:00000000 r4:83869cc0 [<809b7f4c>] (gpiochip_set) from [<809ba830>] (gpiod_set_raw_value_commit+0x78/0x218 drivers/gpio/gpiolib.c:3662) [<809ba7b8>] (gpiod_set_raw_value_commit) from [<809bc0d0>] (gpiod_set_value_nocheck+0x44/0x58 drivers/gpio/gpiolib.c:3881) r10:81c05450 r9:82801c94 r8:00000102 r7:0000ae3d r6:00000007 r5:00000001 r4:83869cc0 [<809bc08c>] (gpiod_set_value_nocheck) from [<809bc120>] (gpiod_set_value+0x3c/0x88 drivers/gpio/gpiolib.c:3903) [<809bc0e4>] (gpiod_set_value) from [<809cc8bc>] (gpio_led_set+0x5c/0x60 drivers/leds/leds-gpio.c:57) r5:8408c844 r4:8408c844 [<809cc860>] (gpio_led_set) from [<809ca154>] (__led_set_brightness drivers/leds/led-core.c:52 [inline]) [<809cc860>] (gpio_led_set) from [<809ca154>] (led_set_brightness_nopm drivers/leds/led-core.c:335 [inline]) [<809cc860>] (gpio_led_set) from [<809ca154>] (led_set_brightness_nosleep+0x38/0x44 drivers/leds/led-core.c:369) r5:8408c844 r4:83904a4c [<809ca11c>] (led_set_brightness_nosleep) from [<809cd1b8>] (led_heartbeat_function+0x84/0x144 drivers/leds/trigger/ledtrig-heartbeat.c:90) [<809cd134>] (led_heartbeat_function) from [<80326f70>] (call_timer_fn+0x30/0x220 kernel/time/timer.c:1748) r7:0000ae3d r6:809cd134 r5:83904a4c r4:8281b500 [<80326f40>] (call_timer_fn) from [<80327424>] (expire_timers kernel/time/timer.c:1799 [inline]) [<80326f40>] (call_timer_fn) from [<80327424>] (__run_timers+0x2c4/0x3f8 kernel/time/timer.c:2373) r9:82801c94 r8:0000ae3d r7:00000000 r6:809cd134 r5:dddc5f00 r4:83904a4c [<80327160>] (__run_timers) from [<803275c0>] (__run_timer_base kernel/time/timer.c:2385 [inline]) [<80327160>] (__run_timers) from [<803275c0>] (__run_timer_base kernel/time/timer.c:2377 [inline]) [<80327160>] (__run_timers) from [<803275c0>] (run_timer_base+0x68/0x78 kernel/time/timer.c:2394) r10:8281b500 r9:82804d80 r8:00000102 r7:00000001 r6:00000002 r5:00000002 r4:dddc5f00 [<80327558>] (run_timer_base) from [<803275ec>] (run_timer_softirq+0x1c/0x34 kernel/time/timer.c:2404) r4:82804084 [<803275d0>] (run_timer_softirq) from [<8025b55c>] (handle_softirqs+0x140/0x458 kernel/softirq.c:622) [<8025b41c>] (handle_softirqs) from [<8025b9d0>] (__do_softirq kernel/softirq.c:656 [inline]) [<8025b41c>] (handle_softirqs) from [<8025b9d0>] (invoke_softirq kernel/softirq.c:496 [inline]) [<8025b41c>] (handle_softirqs) from [<8025b9d0>] (__irq_exit_rcu+0x110/0x1d0 kernel/softirq.c:723) r10:00000000 r9:8281b500 r8:00000000 r7:82801dd8 r6:82443ff8 r5:8247f12c r4:8281b500 [<8025b8c0>] (__irq_exit_rcu) from [<8025bd48>] (irq_exit+0x10/0x18 kernel/softirq.c:751) r5:8247f12c r4:826c3a9c [<8025bd38>] (irq_exit) from [<81aad6a4>] (generic_handle_arch_irq+0x7c/0x80 kernel/irq/handle.c:295) [<81aad628>] (generic_handle_arch_irq) from [<80200bdc>] (__irq_svc+0x7c/0xbc arch/arm/kernel/entry-armv.S:228) Exception stack(0x82801dd8 to 0x82801e20) 1dc0: e029a008 0000000c 1de0: 000039eb 00000000 e029a008 0000000c 00000001 8411fb68 83352688 8411fa40 1e00: 00000000 82801e3c 82801e28 82801e28 809c7fa8 809c7fac 60000013 ffffffff r9:8281b500 r8:83352688 r7:82801e0c r6:ffffffff r5:60000013 r4:809c7fac [<809c7f8c>] (gpio_mmio_write32) from [<809c77cc>] (gpio_mmio_set+0x64/0x80 drivers/gpio/gpio-mmio.c:241) r5:00000004 r4:8411fa40 [<809c7768>] (gpio_mmio_set) from [<809b7f68>] (gpiochip_set+0x1c/0x44 drivers/gpio/gpiolib.c:2919) r7:00000001 r6:00000000 r5:00000002 r4:83869ce8 [<809b7f4c>] (gpiochip_set) from [<809ba830>] (gpiod_set_raw_value_commit+0x78/0x218 drivers/gpio/gpiolib.c:3662) [<809ba7b8>] (gpiod_set_raw_value_commit) from [<809bc0d0>] (gpiod_set_value_nocheck+0x44/0x58 drivers/gpio/gpiolib.c:3881) r10:00000000 r9:00000000 r8:00000001 r7:dddce4c0 r6:83ef42d8 r5:00000001 r4:83869ce8 [<809bc08c>] (gpiod_set_value_nocheck) from [<809bc120>] (gpiod_set_value+0x3c/0x88 drivers/gpio/gpiolib.c:3903) [<809bc0e4>] (gpiod_set_value) from [<809cc8bc>] (gpio_led_set+0x5c/0x60 drivers/leds/leds-gpio.c:57) r5:000000ff r4:8408ca24 [<809cc860>] (gpio_led_set) from [<809ca1e4>] (__led_set_brightness drivers/leds/led-core.c:52 [inline]) [<809cc860>] (gpio_led_set) from [<809ca1e4>] (led_set_brightness_nopm drivers/leds/led-core.c:335 [inline]) [<809cc860>] (gpio_led_set) from [<809ca1e4>] (led_set_brightness_nosleep drivers/leds/led-core.c:369 [inline]) [<809cc860>] (gpio_led_set) from [<809ca1e4>] (led_set_brightness+0x84/0x90 drivers/leds/led-core.c:328) r5:000000ff r4:8408ca24 [<809ca160>] (led_set_brightness) from [<809cbd64>] (led_trigger_event drivers/leds/led-triggers.c:420 [inline]) [<809ca160>] (led_set_brightness) from [<809cbd64>] (led_trigger_event+0x40/0x58 drivers/leds/led-triggers.c:408) r5:000000ff r4:8408ca24 [<809cbd24>] (led_trigger_event) from [<809cd3c0>] (ledtrig_cpu+0xac/0xf4 drivers/leds/trigger/ledtrig-cpu.c:86) r7:dddce4c0 r6:00000002 r5:82b15cd8 r4:000001fd [<809cd314>] (ledtrig_cpu) from [<80227a38>] (arch_cpu_idle_exit+0x14/0x18 arch/arm/kernel/process.c:98) r9:00000000 r8:00000000 r7:8280c710 r6:8281b500 r5:8280c6d0 r4:00000000 [<80227a24>] (arch_cpu_idle_exit) from [<802b158c>] (do_idle+0x5c/0x2d8 kernel/sched/idle.c:334) [<802b1530>] (do_idle) from [<802b1b38>] (cpu_startup_entry+0x30/0x34 kernel/sched/idle.c:430) r10:8281aff4 r9:8280c680 r8:823bec00 r7:00000000 r6:deffc06c r5:828222e8 r4:000000ed [<802b1b08>] (cpu_startup_entry) from [<81aaf0bc>] (kernel_init+0x0/0x138 init/main.c:757) [<81aaefdc>] (rest_init) from [<8260145c>] (start_kernel+0x844/0x860 init/main.c:1206) [<82600c18>] (start_kernel) from [<00000000>] (0x0) watchdog: BUG: soft lockup - CPU#0 stuck for 430s! [swapper/0:0] Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at arch_spin_lock arch/arm/include/asm/spinlock.h:74 [inline] PC is at do_raw_spin_lock include/linux/spinlock.h:187 [inline] PC is at __raw_spin_lock include/linux/spinlock_api_smp.h:134 [inline] PC is at _raw_spin_lock+0x40/0x58 kernel/locking/spinlock.c:154 LR is at __raw_spin_lock include/linux/spinlock_api_smp.h:132 [inline] LR is at _raw_spin_lock+0x18/0x58 kernel/locking/spinlock.c:154 pc : [<81abbc34>] lr : [<81abbc0c>] psr: 80000113 sp : 82801b40 ip : 82801b40 fp : 82801b54 r10: 81c05450 r9 : 8411fa40 r8 : 83352688 r7 : 8411fb68 r6 : 00000001 r5 : 00000001 r4 : 8411fb68 r3 : 000039eb r2 : 000039ec r1 : 00000000 r0 : 00000001 Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 84f7ce40 DAC: fffffffd Call trace: [<81abbbf4>] (_raw_spin_lock) from [<809c77ac>] (class_raw_spinlock_constructor include/linux/spinlock.h:535 [inline]) [<81abbbf4>] (_raw_spin_lock) from [<809c77ac>] (gpio_mmio_set+0x44/0x80 drivers/gpio/gpio-mmio.c:234) r5:00000001 r4:8411fa40 [<809c7768>] (gpio_mmio_set) from [<809b7f68>] (gpiochip_set+0x1c/0x44 drivers/gpio/gpiolib.c:2919) r7:00000001 r6:00000000 r5:00000000 r4:83869cc0 [<809b7f4c>] (gpiochip_set) from [<809ba830>] (gpiod_set_raw_value_commit+0x78/0x218 drivers/gpio/gpiolib.c:3662) [<809ba7b8>] (gpiod_set_raw_value_commit) from [<809bc0d0>] (gpiod_set_value_nocheck+0x44/0x58 drivers/gpio/gpiolib.c:3881) r10:81c05450 r9:82801c94 r8:00000102 r7:0000ae3d r6:00000007 r5:00000001 r4:83869cc0 [<809bc08c>] (gpiod_set_value_nocheck) from [<809bc120>] (gpiod_set_value+0x3c/0x88 drivers/gpio/gpiolib.c:3903) [<809bc0e4>] (gpiod_set_value) from [<809cc8bc>] (gpio_led_set+0x5c/0x60 drivers/leds/leds-gpio.c:57) r5:8408c844 r4:8408c844 [<809cc860>] (gpio_led_set) from [<809ca154>] (__led_set_brightness drivers/leds/led-core.c:52 [inline]) [<809cc860>] (gpio_led_set) from [<809ca154>] (led_set_brightness_nopm drivers/leds/led-core.c:335 [inline]) [<809cc860>] (gpio_led_set) from [<809ca154>] (led_set_brightness_nosleep+0x38/0x44 drivers/leds/led-core.c:369) r5:8408c844 r4:83904a4c [<809ca11c>] (led_set_brightness_nosleep) from [<809cd1b8>] (led_heartbeat_function+0x84/0x144 drivers/leds/trigger/ledtrig-heartbeat.c:90) [<809cd134>] (led_heartbeat_function) from [<80326f70>] (call_timer_fn+0x30/0x220 kernel/time/timer.c:1748) r7:0000ae3d r6:809cd134 r5:83904a4c r4:8281b500 [<80326f40>] (call_timer_fn) from [<80327424>] (expire_timers kernel/time/timer.c:1799 [inline]) [<80326f40>] (call_timer_fn) from [<80327424>] (__run_timers+0x2c4/0x3f8 kernel/time/timer.c:2373) r9:82801c94 r8:0000ae3d r7:00000000 r6:809cd134 r5:dddc5f00 r4:83904a4c [<80327160>] (__run_timers) from [<803275c0>] (__run_timer_base kernel/time/timer.c:2385 [inline]) [<80327160>] (__run_timers) from [<803275c0>] (__run_timer_base kernel/time/timer.c:2377 [inline]) [<80327160>] (__run_timers) from [<803275c0>] (run_timer_base+0x68/0x78 kernel/time/timer.c:2394) r10:8281b500 r9:82804d80 r8:00000102 r7:00000001 r6:00000002 r5:00000002 r4:dddc5f00 [<80327558>] (run_timer_base) from [<803275ec>] (run_timer_softirq+0x1c/0x34 kernel/time/timer.c:2404) r4:82804084 [<803275d0>] (run_timer_softirq) from [<8025b55c>] (handle_softirqs+0x140/0x458 kernel/softirq.c:622) [<8025b41c>] (handle_softirqs) from [<8025b9d0>] (__do_softirq kernel/softirq.c:656 [inline]) [<8025b41c>] (handle_softirqs) from [<8025b9d0>] (invoke_softirq kernel/softirq.c:496 [inline]) [<8025b41c>] (handle_softirqs) from [<8025b9d0>] (__irq_exit_rcu+0x110/0x1d0 kernel/softirq.c:723) r10:00000000 r9:8281b500 r8:00000000 r7:82801dd8 r6:82443ff8 r5:8247f12c r4:8281b500 [<8025b8c0>] (__irq_exit_rcu) from [<8025bd48>] (irq_exit+0x10/0x18 kernel/softirq.c:751) r5:8247f12c r4:826c3a9c [<8025bd38>] (irq_exit) from [<81aad6a4>] (generic_handle_arch_irq+0x7c/0x80 kernel/irq/handle.c:295) [<81aad628>] (generic_handle_arch_irq) from [<80200bdc>] (__irq_svc+0x7c/0xbc arch/arm/kernel/entry-armv.S:228) Exception stack(0x82801dd8 to 0x82801e20) 1dc0: e029a008 0000000c 1de0: 000039eb 00000000 e029a008 0000000c 00000001 8411fb68 83352688 8411fa40 1e00: 00000000 82801e3c 82801e28 82801e28 809c7fa8 809c7fac 60000013 ffffffff r9:8281b500 r8:83352688 r7:82801e0c r6:ffffffff r5:60000013 r4:809c7fac [<809c7f8c>] (gpio_mmio_write32) from [<809c77cc>] (gpio_mmio_set+0x64/0x80 drivers/gpio/gpio-mmio.c:241) r5:00000004 r4:8411fa40 [<809c7768>] (gpio_mmio_set) from [<809b7f68>] (gpiochip_set+0x1c/0x44 drivers/gpio/gpiolib.c:2919) r7:00000001 r6:00000000 r5:00000002 r4:83869ce8 [<809b7f4c>] (gpiochip_set) from [<809ba830>] (gpiod_set_raw_value_commit+0x78/0x218 drivers/gpio/gpiolib.c:3662) [<809ba7b8>] (gpiod_set_raw_value_commit) from [<809bc0d0>] (gpiod_set_value_nocheck+0x44/0x58 drivers/gpio/gpiolib.c:3881) r10:00000000 r9:00000000 r8:00000001 r7:dddce4c0 r6:83ef42d8 r5:00000001 r4:83869ce8 [<809bc08c>] (gpiod_set_value_nocheck) from [<809bc120>] (gpiod_set_value+0x3c/0x88 drivers/gpio/gpiolib.c:3903) [<809bc0e4>] (gpiod_set_value) from [<809cc8bc>] (gpio_led_set+0x5c/0x60 drivers/leds/leds-gpio.c:57) r5:000000ff r4:8408ca24 [<809cc860>] (gpio_led_set) from [<809ca1e4>] (__led_set_brightness drivers/leds/led-core.c:52 [inline]) [<809cc860>] (gpio_led_set) from [<809ca1e4>] (led_set_brightness_nopm drivers/leds/led-core.c:335 [inline]) [<809cc860>] (gpio_led_set) from [<809ca1e4>] (led_set_brightness_nosleep drivers/leds/led-core.c:369 [inline]) [<809cc860>] (gpio_led_set) from [<809ca1e4>] (led_set_brightness+0x84/0x90 drivers/leds/led-core.c:328) r5:000000ff r4:8408ca24 [<809ca160>] (led_set_brightness) from [<809cbd64>] (led_trigger_event drivers/leds/led-triggers.c:420 [inline]) [<809ca160>] (led_set_brightness) from [<809cbd64>] (led_trigger_event+0x40/0x58 drivers/leds/led-triggers.c:408) r5:000000ff r4:8408ca24 [<809cbd24>] (led_trigger_event) from [<809cd3c0>] (ledtrig_cpu+0xac/0xf4 drivers/leds/trigger/ledtrig-cpu.c:86) r7:dddce4c0 r6:00000002 r5:82b15cd8 r4:000001fd [<809cd314>] (ledtrig_cpu) from [<80227a38>] (arch_cpu_idle_exit+0x14/0x18 arch/arm/kernel/process.c:98) r9:00000000 r8:00000000 r7:8280c710 r6:8281b500 r5:8280c6d0 r4:00000000 [<80227a24>] (arch_cpu_idle_exit) from [<802b158c>] (do_idle+0x5c/0x2d8 kernel/sched/idle.c:334) [<802b1530>] (do_idle) from [<802b1b38>] (cpu_startup_entry+0x30/0x34 kernel/sched/idle.c:430) r10:8281aff4 r9:8280c680 r8:823bec00 r7:00000000 r6:deffc06c r5:828222e8 r4:000000ed [<802b1b08>] (cpu_startup_entry) from [<81aaf0bc>] (kernel_init+0x0/0x138 init/main.c:757) [<81aaefdc>] (rest_init) from [<8260145c>] (start_kernel+0x844/0x860 init/main.c:1206) [<82600c18>] (start_kernel) from [<00000000>] (0x0) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 18119 Comm: syz.1.7053 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at 0x194ac LR is at 0x194ac pc : [<000194ac>] lr : [<000194ac>] psr: 20000010 sp : 20001810 ip : 20001810 fp : 76fac0bc r10: 00006364 r9 : 00000000 r8 : 00300000 r7 : 00000000 r6 : 00000000 r5 : 00000000 r4 : 00000000 r3 : 00000000 r2 : 000001e4 r1 : 00000004 r0 : ffffffff Flags: nzCv IRQs on FIQs on Mode USER_32 ISA ARM Segment none Control: 30c5387d Table: 84d2f6c0 DAC: 00000000 Call trace: invalid frame pointer 0x76fac0bc