INFO: task syz.3.2582:15207 blocked for more than 737 seconds. Not tainted 6.16.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.2582 state:D stack:0 pid:15207 tgid:15206 ppid:14795 task_flags:0x400040 flags:0x00000001 Call trace: [<81a3ae5c>] (__schedule) from [<80297314>] (__schedule_loop kernel/sched/core.c:7043 [inline]) [<81a3ae5c>] (__schedule) from [<80297314>] (rt_mutex_schedule+0x20/0x38 kernel/sched/core.c:7339) r10:84188c00 r9:00000002 r8:00000000 r7:eb3b1dc0 r6:eb3b1dc8 r5:84e7bc00 r4:84e7bc00 [<802972f4>] (rt_mutex_schedule) from [<81a41f2c>] (rt_mutex_slowlock_block.constprop.0+0x40/0x1d4 kernel/locking/rtmutex.c:1647) r5:84e7bc00 r4:8325dc54 [<81a41eec>] (rt_mutex_slowlock_block.constprop.0) from [<81a43284>] (__rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline]) [<81a41eec>] (rt_mutex_slowlock_block.constprop.0) from [<81a43284>] (__rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1760 [inline]) [<81a41eec>] (rt_mutex_slowlock_block.constprop.0) from [<81a43284>] (rt_mutex_slowlock.constprop.0+0xd4/0x364 kernel/locking/rtmutex.c:1800) r10:60000013 r9:eb3b1dc8 r8:00000002 r7:eb3b1dc0 r6:8325dc54 r5:00000000 r4:84e7bc00 [<81a431b0>] (rt_mutex_slowlock.constprop.0) from [<81a435f8>] (__rt_mutex_lock kernel/locking/rtmutex.c:1815 [inline]) [<81a431b0>] (rt_mutex_slowlock.constprop.0) from [<81a435f8>] (__rt_mutex_lock_common kernel/locking/rtmutex_api.c:49 [inline]) [<81a431b0>] (rt_mutex_slowlock.constprop.0) from [<81a435f8>] (rt_mutex_lock+0x44/0x48 kernel/locking/rtmutex_api.c:89) r10:81ddd55c r9:00000000 r8:eb3b1f68 r7:00000000 r6:eb3b1e88 r5:00000001 r4:8325dc40 [<81a435b4>] (rt_mutex_lock) from [<810cafb0>] (i2c_adapter_lock_bus+0x14/0x18 drivers/i2c/i2c-core-base.c:852) [<810caf9c>] (i2c_adapter_lock_bus) from [<810ccda4>] (i2c_lock_bus include/linux/i2c.h:809 [inline]) [<810caf9c>] (i2c_adapter_lock_bus) from [<810ccda4>] (__i2c_lock_bus_helper drivers/i2c/i2c-core.h:46 [inline]) [<810caf9c>] (i2c_adapter_lock_bus) from [<810ccda4>] (i2c_transfer+0x9c/0x110 drivers/i2c/i2c-core-base.c:2316) [<810ccd08>] (i2c_transfer) from [<810cce74>] (i2c_transfer_buffer_flags+0x5c/0x8c drivers/i2c/i2c-core-base.c:2348) r6:00000000 r5:00000010 r4:00000000 [<810cce18>] (i2c_transfer_buffer_flags) from [<810d1df8>] (i2c_master_send include/linux/i2c.h:109 [inline]) [<810cce18>] (i2c_transfer_buffer_flags) from [<810d1df8>] (i2cdev_write+0x70/0xb4 drivers/i2c/i2c-dev.c:183) r7:85655400 r6:8553a000 r5:00000010 r4:00000000 [<810d1d88>] (i2cdev_write) from [<80553dfc>] (vfs_write+0xac/0x44c fs/read_write.c:684) r7:84e7bc00 r6:00000000 r5:8553a000 r4:810d1d88 [<80553d50>] (vfs_write) from [<8055430c>] (ksys_write+0x74/0xe8 fs/read_write.c:738) r10:00000004 r9:84e7bc00 r8:8020029c r7:00000000 r6:00000000 r5:8553a000 r4:8553a001 [<80554298>] (ksys_write) from [<80554390>] (__do_sys_write fs/read_write.c:749 [inline]) [<80554298>] (ksys_write) from [<80554390>] (sys_write+0x10/0x14 fs/read_write.c:746) r7:00000004 r6:00130270 r5:00000000 r4:00000000 [<80554380>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xeb3b1fa8 to 0xeb3b1ff0) 1fa0: 00000000 00000000 00000003 00000000 00000000 00000000 1fc0: 00000000 00000000 00130270 00000004 002e0000 00000000 00006364 76fe80bc 1fe0: 76fe7ec0 76fe7eb0 0001948c 001322c0 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:000f0113 r5:600f0193 r4:82260298 [<80201b08>] (show_stack) from [<8021fb90>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000001 r4:00000001 [<8021fb9c>] (dump_stack) from [<81a24a70>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81a24910>] (nmi_cpu_backtrace) from [<81a24bbc>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8280c690 r5:8281ac94 r4:ffffffff [<81a24a8c>] (nmi_trigger_cpumask_backtrace) from [<802304fc>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:82abd564 r8:82804d40 r7:00031440 r6:00007f19 r5:8281b248 r4:84284e0c [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037da10>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037da10>] (check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037da10>] (watchdog+0x4d4/0x81c kernel/hung_task.c:491) [<8037d53c>] (watchdog) from [<80281fec>] (kthread+0x12c/0x280 kernel/kthread.c:463) r10:00000000 r9:00000000 r8:8037d53c r7:8334c800 r6:8334c800 r5:83391800 r4:00000001 [<80281ec0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281ec0 r4:8334acc0 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 2838 Comm: pr/ttyAMA-1 Not tainted 6.16.0-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at dev_hard_start_xmit+0x78/0x2b0 net/core/dev.c:3840 LR is at start_xmit+0x34c/0xabc drivers/net/virtio_net.c:3403 pc : [<81577884>] lr : [<80d47050>] psr: 600e0113 sp : df8016e0 ip : 00000001 fp : df80172c r10: 81d79610 r9 : 826c2ece r8 : 83aa4800 r7 : 00000000 r6 : 00000000 r5 : 833bb800 r4 : 84836c00 r3 : 00000000 r2 : 83261000 r1 : 83a7c800 r0 : 00000000 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 84298100 DAC: fffffffd Call trace: frame pointer underflow [<8157780c>] (dev_hard_start_xmit) from [<815f92f0>] (sch_direct_xmit+0x9c/0x448 net/sched/sch_generic.c:344) r10:00000040 r9:00000000 r8:00000000 r7:833bb800 r6:83261000 r5:84836c00 r4:84a7c400 [<815f9254>] (sch_direct_xmit) from [<8157812c>] (__dev_xmit_skb net/core/dev.c:4102 [inline]) [<815f9254>] (sch_direct_xmit) from [<8157812c>] (__dev_queue_xmit+0x52c/0xf9c net/core/dev.c:4679) r9:a40d31a0 r8:84a7c4c4 r7:833bb800 r6:84a7c400 r5:00000001 r4:00000000 [<81577c00>] (__dev_queue_xmit) from [<8172d744>] (dev_queue_xmit include/linux/netdevice.h:3358 [inline]) [<81577c00>] (__dev_queue_xmit) from [<8172d744>] (neigh_hh_output include/net/neighbour.h:531 [inline]) [<81577c00>] (__dev_queue_xmit) from [<8172d744>] (neigh_output include/net/neighbour.h:545 [inline]) [<81577c00>] (__dev_queue_xmit) from [<8172d744>] (ip_finish_output2+0x2c8/0x6d4 net/ipv4/ip_output.c:235) r10:00000040 r9:00000000 r8:00000010 r7:00000000 r6:0000000e r5:84836c00 r4:8478c500 [<8172d47c>] (ip_finish_output2) from [<8172ea2c>] (__ip_finish_output.part.0+0x9c/0x150 net/ipv4/ip_output.c:313) r9:00000000 r8:00000000 r7:82c1e600 r6:000005dc r5:84ee8000 r4:84836c00 [<8172e990>] (__ip_finish_output.part.0) from [<8172eb1c>] (__ip_finish_output+0x3c/0x40 net/ipv4/ip_output.c:303) r9:00000000 r8:00000000 r7:833bb800 r6:84ee8000 r5:82c1e600 r4:84836c00 [<8172eae0>] (__ip_finish_output) from [<8172eb84>] (ip_finish_output net/ipv4/ip_output.c:323 [inline]) [<8172eae0>] (__ip_finish_output) from [<8172eb84>] (NF_HOOK_COND include/linux/netfilter.h:307 [inline]) [<8172eae0>] (__ip_finish_output) from [<8172eb84>] (ip_output+0x64/0xf8 net/ipv4/ip_output.c:433) [<8172eb20>] (ip_output) from [<81730418>] (dst_output include/net/dst.h:461 [inline]) [<8172eb20>] (ip_output) from [<81730418>] (ip_local_out net/ipv4/ip_output.c:129 [inline]) [<8172eb20>] (ip_output) from [<81730418>] (__ip_queue_xmit+0x19c/0x4d4 net/ipv4/ip_output.c:527) r8:84ee82a0 r7:82c1e600 r6:00000001 r5:84ee8000 r4:84836c00 [<8173027c>] (__ip_queue_xmit) from [<81730764>] (ip_queue_xmit+0x14/0x18 net/ipv4/ip_output.c:541) r10:000e0ee0 r9:00000219 r8:84836c18 r7:842692ec r6:00000014 r5:84836c00 r4:84ee8000 [<81730750>] (ip_queue_xmit) from [<81755728>] (__tcp_transmit_skb+0x524/0xcdc net/ipv4/tcp_output.c:1479) [<81755204>] (__tcp_transmit_skb) from [<81756c80>] (__tcp_send_ack.part.0+0xe4/0x190 net/ipv4/tcp_output.c:4285) r10:00000000 r9:00000014 r8:00000014 r7:83aa4800 r6:0126e422 r5:00000010 r4:84ee8000 [<81756b9c>] (__tcp_send_ack.part.0) from [<8175aa64>] (__tcp_send_ack net/ipv4/tcp_output.c:4252 [inline]) [<81756b9c>] (__tcp_send_ack.part.0) from [<8175aa64>] (tcp_send_ack+0x24/0x28 net/ipv4/tcp_output.c:4291) r6:842684e4 r5:00000001 r4:84ee8000 [<8175aa40>] (tcp_send_ack) from [<81746c94>] (__tcp_ack_snd_check+0x6c/0x20c net/ipv4/tcp_input.c:5700) [<81746c28>] (__tcp_ack_snd_check) from [<81750604>] (tcp_ack_snd_check net/ipv4/tcp_input.c:5746 [inline]) [<81746c28>] (__tcp_ack_snd_check) from [<81750604>] (tcp_ack_snd_check net/ipv4/tcp_input.c:5740 [inline]) [<81746c28>] (__tcp_ack_snd_check) from [<81750604>] (tcp_rcv_established+0x22c/0x80c net/ipv4/tcp_input.c:6219) r5:84836b40 r4:84ee8000 [<817503d8>] (tcp_rcv_established) from [<81761794>] (tcp_v4_do_rcv+0x1c4/0x33c net/ipv4/tcp_ipv4.c:1926) r10:00000007 r9:00000038 r8:84836b40 r7:84ee8000 r6:83356a00 r5:84836b40 r4:84ee8000 [<817615d0>] (tcp_v4_do_rcv) from [<81763ad0>] (tcp_v4_rcv+0xc30/0x1160 net/ipv4/tcp_ipv4.c:2368) r7:84ee8000 r6:84ee80ec r5:00002718 r4:00000000 [<81762ea0>] (tcp_v4_rcv) from [<81729604>] (ip_protocol_deliver_rcu+0x38/0x26c net/ipv4/ip_input.c:205) r10:df801c04 r9:00000000 r8:00000000 r7:82c1e600 r6:82817934 r5:84836b40 r4:828060ec [<817295cc>] (ip_protocol_deliver_rcu) from [<817298d8>] (ip_local_deliver_finish+0xa0/0x204 net/ipv4/ip_input.c:239) r9:00000000 r8:df801c58 r7:00000000 r6:82c1e600 r5:00000014 r4:84836b40 [<81729838>] (ip_local_deliver_finish) from [<81729abc>] (NF_HOOK include/linux/netfilter.h:318 [inline]) [<81729838>] (ip_local_deliver_finish) from [<81729abc>] (NF_HOOK include/linux/netfilter.h:312 [inline]) [<81729838>] (ip_local_deliver_finish) from [<81729abc>] (ip_local_deliver+0x80/0x110 net/ipv4/ip_input.c:260) r7:00000000 r6:82c1e600 r5:833bb800 r4:84836b40 [<81729a3c>] (ip_local_deliver) from [<81728d38>] (dst_input include/net/dst.h:471 [inline]) [<81729a3c>] (ip_local_deliver) from [<81728d38>] (ip_sublist_rcv_finish+0x5c/0x70 net/ipv4/ip_input.c:585) r6:df801c04 r5:df801c04 r4:df801c04 [<81728cdc>] (ip_sublist_rcv_finish) from [<81728ef8>] (ip_list_rcv_finish net/ipv4/ip_input.c:634 [inline]) [<81728cdc>] (ip_sublist_rcv_finish) from [<81728ef8>] (ip_sublist_rcv+0x1ac/0x234 net/ipv4/ip_input.c:642) r7:83356a80 r6:df801c58 r5:83356a80 r4:df801c58 [<81728d4c>] (ip_sublist_rcv) from [<81729d4c>] (ip_list_rcv+0x120/0x14c net/ipv4/ip_input.c:676) r10:df801cb0 r9:833bb800 r8:82c1e600 r7:df801cb0 r6:82c1e600 r5:df801c58 r4:df801c58 [<81729c2c>] (ip_list_rcv) from [<8157ad9c>] (__netif_receive_skb_list_ptype net/core/dev.c:6022 [inline]) [<81729c2c>] (ip_list_rcv) from [<8157ad9c>] (__netif_receive_skb_list_core+0x1f0/0x274 net/core/dev.c:6069) r10:00000000 r9:830fd094 r8:81729c2c r7:df801cb0 r6:833bb800 r5:82817e08 r4:830fd094 [<8157abac>] (__netif_receive_skb_list_core) from [<8157b48c>] (__netif_receive_skb_list net/core/dev.c:6121 [inline]) [<8157abac>] (__netif_receive_skb_list_core) from [<8157b48c>] (netif_receive_skb_list_internal+0x1c0/0x2ec net/core/dev.c:6212) r10:00000000 r9:00000000 r8:83aa4800 r7:830fd094 r6:df801d0c r5:830fd094 r4:00000000 [<8157b2cc>] (netif_receive_skb_list_internal) from [<8157b850>] (gro_normal_list include/net/gro.h:532 [inline]) [<8157b2cc>] (netif_receive_skb_list_internal) from [<8157b850>] (gro_normal_list include/net/gro.h:528 [inline]) [<8157b2cc>] (netif_receive_skb_list_internal) from [<8157b850>] (gro_flush_normal include/net/gro.h:540 [inline]) [<8157b2cc>] (netif_receive_skb_list_internal) from [<8157b850>] (napi_complete_done+0x100/0x2c8 net/core/dev.c:6581) r10:833bbec0 r9:830fd008 r8:00000001 r7:00000000 r6:830fd008 r5:00000000 r4:830fd094 [<8157b750>] (napi_complete_done) from [<80d4d230>] (virtqueue_napi_complete drivers/net/virtio_net.c:766 [inline]) [<8157b750>] (napi_complete_done) from [<80d4d230>] (virtnet_poll+0x7fc/0xf00 drivers/net/virtio_net.c:3118) r9:830fd008 r8:00000040 r7:8409e300 r6:830fd148 r5:00000000 r4:00005e0c [<80d4ca34>] (virtnet_poll) from [<8157ba4c>] (__napi_poll+0x34/0x240 net/core/dev.c:7497) r10:dddcfe80 r9:00000000 r8:df801ea8 r7:df801ea3 r6:00000040 r5:830fd008 r4:00000001 [<8157ba18>] (__napi_poll) from [<8157c338>] (napi_poll net/core/dev.c:7560 [inline]) [<8157ba18>] (__napi_poll) from [<8157c338>] (net_rx_action+0x3a0/0x430 net/core/dev.c:7687) r9:00000000 r8:df801ea8 r7:0000012c r6:00000000 r5:5b70d000 r4:830fd008 [<8157bf98>] (net_rx_action) from [<8025de30>] (handle_softirqs+0x140/0x458 kernel/softirq.c:579) r10:83aa4800 r9:82804d40 r8:00000101 r7:00000003 r6:00000008 r5:00000004 r4:8280408c [<8025dcf0>] (handle_softirqs) from [<8025e2a4>] (__do_softirq kernel/softirq.c:613 [inline]) [<8025dcf0>] (handle_softirqs) from [<8025e2a4>] (invoke_softirq kernel/softirq.c:453 [inline]) [<8025dcf0>] (handle_softirqs) from [<8025e2a4>] (__irq_exit_rcu+0x110/0x1d0 kernel/softirq.c:680) r10:82959154 r9:83aa4800 r8:00000000 r7:eb751e60 r6:8240f744 r5:8244d01c r4:83aa4800 [<8025e194>] (__irq_exit_rcu) from [<8025e61c>] (irq_exit+0x10/0x18 kernel/softirq.c:708) r5:8244d01c r4:826c195c [<8025e60c>] (irq_exit) from [<81a376c0>] (generic_handle_arch_irq+0x7c/0x80 kernel/irq/handle.c:240) [<81a37644>] (generic_handle_arch_irq) from [<81a06b9c>] (call_with_stack+0x1c/0x20 arch/arm/lib/call_with_stack.S:40) r9:83aa4800 r8:00000000 r7:eb751e94 r6:ffffffff r5:600e0113 r4:81a45078 [<81a06b80>] (call_with_stack) from [<80200bec>] (__irq_svc+0x8c/0xbc arch/arm/kernel/entry-armv.S:228) Exception stack(0xeb751e60 to 0xeb751ea8) 1e60: 8402fc40 600e0113 00000000 00003f80 00000001 00000000 829590b8 00000117 1e80: 00000000 00000000 82959154 eb751ebc eb751ec0 eb751eb0 80a78e78 81a45078 1ea0: 600e0113 ffffffff [<81a45050>] (_raw_spin_unlock_irqrestore) from [<80a78e78>] (spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]) [<81a45050>] (_raw_spin_unlock_irqrestore) from [<80a78e78>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline]) [<81a45050>] (_raw_spin_unlock_irqrestore) from [<80a78e78>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603) [<80a78e58>] (pl011_console_device_unlock) from [<802e4534>] (nbcon_emit_one+0x88/0x100 kernel/printk/nbcon.c:1142) [<802e44ac>] (nbcon_emit_one) from [<802e4754>] (nbcon_kthread_func+0x1a8/0x2a4 kernel/printk/nbcon.c:1229) r6:8280c690 r5:83aa4800 r4:829590b8 [<802e45ac>] (nbcon_kthread_func) from [<80281fec>] (kthread+0x12c/0x280 kernel/kthread.c:463) r10:00000000 r9:829590b8 r8:802e45ac r7:846aef80 r6:846aef80 r5:83aa4800 r4:00000001 [<80281ec0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb751fb0 to 0xeb751ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281ec0 r4:833516c0