INFO: task kworker/0:2:6417 blocked for more than 430 seconds. Not tainted 5.12.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:2 state:D stack: 0 pid: 6417 ppid: 2 flags:0x00000000 Workqueue: usb_hub_wq hub_event Backtrace: [<821376f0>] (__schedule) from [<82138414>] (schedule+0x5c/0x108 kernel/sched/core.c:5154) r10:00000100 r9:00000000 r8:869e1d18 r7:869e1d80 r6:839d1ad4 r5:869e0000 r4:890be180 [<821383b8>] (schedule) from [<8103b1d0>] (usb_kill_urb drivers/usb/core/urb.c:711 [inline]) [<821383b8>] (schedule) from [<8103b1d0>] (usb_kill_urb+0xf4/0x12c drivers/usb/core/urb.c:703) r5:87624490 r4:87624480 [<8103b0dc>] (usb_kill_urb) from [<8103b974>] (usb_start_wait_urb+0xdc/0x16c drivers/usb/core/message.c:64) r6:00001388 r5:00000000 r4:87624480 [<8103b898>] (usb_start_wait_urb) from [<8103bacc>] (usb_internal_control_msg drivers/usb/core/message.c:102 [inline]) [<8103b898>] (usb_start_wait_urb) from [<8103bacc>] (usb_control_msg+0xc8/0x12c drivers/usb/core/message.c:153) r8:00000040 r7:877d4e40 r6:00000080 r5:00000006 r4:87ef8000 [<8103ba04>] (usb_control_msg) from [<81031334>] (hub_port_init+0x1f4/0xc2c drivers/usb/core/hub.c:4708) r10:00000001 r9:84772000 r8:839d188c r7:00000002 r6:86a81000 r5:877d4e00 r4:87ef8000 [<81031140>] (hub_port_init) from [<81034b24>] (hub_port_connect drivers/usb/core/hub.c:5155 [inline]) [<81031140>] (hub_port_init) from [<81034b24>] (hub_port_connect_change drivers/usb/core/hub.c:5363 [inline]) [<81031140>] (hub_port_init) from [<81034b24>] (port_event drivers/usb/core/hub.c:5509 [inline]) [<81031140>] (hub_port_init) from [<81034b24>] (hub_event+0x698/0x1848 drivers/usb/core/hub.c:5591) r10:86a811bc r9:00000002 r8:87ef8000 r7:86a81b04 r6:00000404 r5:84772000 r4:86a39000 [<8103448c>] (hub_event) from [<802696b4>] (process_one_work+0x2d4/0x998 kernel/workqueue.c:2275) r10:00000008 r9:83822c98 r8:83ac76b2 r7:ddfd3e00 r6:ddfccd40 r5:8907be80 r4:86a811bc [<802693e0>] (process_one_work) from [<80269ddc>] (worker_thread+0x64/0x54c kernel/workqueue.c:2421) r10:00000008 r9:869e0000 r8:83806d00 r7:ddfccd78 r6:8907be94 r5:ddfccd40 r4:8907be80 [<80269d78>] (worker_thread) from [<80271f50>] (kthread+0x184/0x1a4 kernel/kthread.c:292) r10:87ec3e64 r9:8907be80 r8:80269d78 r7:00000000 r6:869e0000 r5:89023140 r4:8907be00 [<80271dcc>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:158) Exception stack(0x869e1fb0 to 0x869e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80271dcc r4:89023140 Showing all locks held in the system: 1 lock held by khungtaskd/1524: #0: 8390e91c (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x34/0x1dc kernel/locking/lockdep.c:6329 2 locks held by getty/4305: #0: 86ec1454 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x38/0x3c drivers/tty/tty_ldsem.c:340 #1: e85fa290 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x4a4/0x56c drivers/tty/n_tty.c:2178 3 locks held by kworker/u4:2/6410: 5 locks held by kworker/0:2/6417: #0: 847138a8 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:615 [inline] #0: 847138a8 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline] #0: 847138a8 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x214/0x998 kernel/workqueue.c:2246 #1: 869e1ef8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:615 [inline] #1: 869e1ef8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline] #1: 869e1ef8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x214/0x998 kernel/workqueue.c:2246 #2: 86a39140 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:740 [inline] #2: 86a39140 (&dev->mutex){....}-{3:3}, at: hub_event+0x60/0x1848 drivers/usb/core/hub.c:5537 #3: 86a81b3c (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3030 [inline] #3: 86a81b3c (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5154 [inline] #3: 86a81b3c (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5363 [inline] #3: 86a81b3c (&port_dev->status_lock){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5509 [inline] #3: 86a81b3c (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x684/0x1848 drivers/usb/core/hub.c:5591 #4: 847c94b8 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_init+0x6c/0xc2c drivers/usb/core/hub.c:4582 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1524 Comm: khungtaskd Not tainted 5.12.0-rc2-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<8210a388>] (dump_backtrace) from [<8210a5fc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:252) r7:00000000 r6:600f0013 r5:00000000 r4:83966184 [<8210a5e4>] (show_stack) from [<821135d0>] (__dump_stack lib/dump_stack.c:79 [inline]) [<8210a5e4>] (show_stack) from [<821135d0>] (dump_stack+0xb8/0xe8 lib/dump_stack.c:120) [<82113518>] (dump_stack) from [<8091da60>] (nmi_cpu_backtrace+0xfc/0x160 lib/nmi_backtrace.c:105) r7:00000000 r6:80210934 r5:00000000 r4:00000000 [<8091d964>] (nmi_cpu_backtrace) from [<8091dc00>] (nmi_trigger_cpumask_backtrace+0x13c/0x224 lib/nmi_backtrace.c:62) r5:83823424 r4:00000000 [<8091dac4>] (nmi_trigger_cpumask_backtrace) from [<80211dec>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:857) r9:83822dd8 r8:83806d00 r7:00007f6e r6:83835150 r5:0002ef40 r4:83ac77d9 [<80211dd4>] (arch_trigger_cpumask_backtrace) from [<803665cc>] (trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]) [<80211dd4>] (arch_trigger_cpumask_backtrace) from [<803665cc>] (check_hung_uninterruptible_tasks kernel/hung_task.c:209 [inline]) [<80211dd4>] (arch_trigger_cpumask_backtrace) from [<803665cc>] (watchdog+0x6d0/0x88c kernel/hung_task.c:294) [<80365efc>] (watchdog) from [<80271f50>] (kthread+0x184/0x1a4 kernel/kthread.c:292) r10:84505e2c r9:00000000 r8:80365efc r7:00000000 r6:8475c000 r5:84746d40 r4:8473fa00 [<80271dcc>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:158) Exception stack(0x8475dfb0 to 0x8475dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80271dcc r4:84746d40 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 6410 Comm: kworker/u4:2 Not tainted 5.12.0-rc2-syzkaller #0 Hardware name: ARM-Versatile Express Workqueue: bat_events batadv_nc_worker PC is at current_thread_info arch/arm/include/asm/thread_info.h:94 [inline] PC is at preempt_count include/asm-generic/preempt.h:11 [inline] PC is at should_resched include/asm-generic/preempt.h:77 [inline] PC is at __local_bh_enable_ip+0xf8/0x244 kernel/softirq.c:205 LR is at __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:70 pc : [<8024df10>] lr : [<82135db4>] psr: 20000113 sp : 8468be08 ip : 8468bdb0 fp : 8468be24 r10: 00000088 r9 : 88bfc000 r8 : 88b5e400 r7 : 00000000 r6 : ffffe000 r5 : 8207ef70 r4 : 00000001 r3 : 00a35097 r2 : 00000001 r1 : 82aee05c r0 : 00000001 Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 87f7af40 DAC: 00000000 CPU: 1 PID: 6410 Comm: kworker/u4:2 Not tainted 5.12.0-rc2-syzkaller #0 Hardware name: ARM-Versatile Express Workqueue: bat_events batadv_nc_worker Backtrace: [<8210a388>] (dump_backtrace) from [<8210a5fc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:252) r7:00000080 r6:60000193 r5:00000000 r4:83966184 [<8210a5e4>] (show_stack) from [<821135d0>] (__dump_stack lib/dump_stack.c:79 [inline]) [<8210a5e4>] (show_stack) from [<821135d0>] (dump_stack+0xb8/0xe8 lib/dump_stack.c:120) [<82113518>] (dump_stack) from [<802096bc>] (show_regs+0x14/0x18 arch/arm/kernel/process.c:191) r7:8440cd80 r6:00000001 r5:8468bdb8 r4:00000001 [<802096a8>] (show_regs) from [<8091da48>] (nmi_cpu_backtrace+0xe4/0x160 lib/nmi_backtrace.c:103) [<8091d964>] (nmi_cpu_backtrace) from [<80210e34>] (do_handle_IPI+0x4c/0x440 arch/arm/kernel/smp.c:672) r5:00000017 r4:00000007 [<80210de8>] (do_handle_IPI) from [<80211248>] (ipi_handler+0x20/0x28 arch/arm/kernel/smp.c:700) r9:8468bdb8 r8:8468bd20 r7:8440cd80 r6:8382343c r5:00000017 r4:844a4600 [<80211228>] (ipi_handler) from [<802dfc14>] (handle_percpu_devid_irq+0xa4/0x19c kernel/irq/chip.c:930) [<802dfb70>] (handle_percpu_devid_irq) from [<802d8a40>] (generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]) [<802dfb70>] (handle_percpu_devid_irq) from [<802d8a40>] (generic_handle_irq kernel/irq/irqdesc.c:652 [inline]) [<802dfb70>] (handle_percpu_devid_irq) from [<802d8a40>] (__handle_domain_irq+0xb0/0x120 kernel/irq/irqdesc.c:689) r10:8468bd50 r9:8468bdb8 r8:00000001 r7:00000000 r6:836c6498 r5:00000000 r4:836c6498 r3:00010000 [<802d8990>] (__handle_domain_irq) from [<80932490>] (handle_domain_irq include/linux/irqdesc.h:176 [inline]) [<802d8990>] (__handle_domain_irq) from [<80932490>] (gic_handle_irq+0x84/0xac drivers/irqchip/irq-gic.c:370) r10:00000088 r9:40000193 r8:e000200c r7:836c64bc r6:e0002000 r5:8468bdb8 r4:8382343c [<8093240c>] (gic_handle_irq) from [<80200abc>] (__irq_svc+0x5c/0x94 arch/arm/kernel/entry-armv.S:205) Exception stack(0x8468bdb8 to 0x8468be00) bda0: 00000001 82aee05c bdc0: 00000001 00a35097 00000001 8207ef70 ffffe000 00000000 88b5e400 88bfc000 bde0: 00000088 8468be24 8468bdb0 8468be08 82135db4 8024df10 20000113 ffffffff r9:8468a000 r8:88b5e400 r7:8468bdec r6:ffffffff r5:20000113 r4:8024df10 [<8024de18>] (__local_bh_enable_ip) from [<8213ed94>] (__raw_spin_unlock_bh include/linux/spinlock_api_smp.h:176 [inline]) [<8024de18>] (__local_bh_enable_ip) from [<8213ed94>] (_raw_spin_unlock_bh+0x34/0x38 kernel/locking/spinlock.c:207) r7:00000000 r6:00000001 r5:88bfc000 r4:8207ef70 [<8213ed60>] (_raw_spin_unlock_bh) from [<8207ef70>] (spin_unlock_bh include/linux/spinlock.h:399 [inline]) [<8213ed60>] (_raw_spin_unlock_bh) from [<8207ef70>] (batadv_nc_purge_paths+0x10c/0x148 net/batman-adv/network-coding.c:467) r5:88c19740 r4:8207f03c [<8207ee64>] (batadv_nc_purge_paths) from [<8207f6d0>] (batadv_nc_worker+0x304/0x470 net/batman-adv/network-coding.c:716) r10:00000088 r9:83822c98 r8:88c19d28 r7:86eca000 r6:83806d00 r5:88c1a000 r4:88c19740 [<8207f3cc>] (batadv_nc_worker) from [<802696b4>] (process_one_work+0x2d4/0x998 kernel/workqueue.c:2275) r10:00000088 r9:83822c98 r8:83ac76b2 r7:86eca000 r6:84420000 r5:89081d80 r4:88c19d28 [<802693e0>] (process_one_work) from [<80269ddc>] (worker_thread+0x64/0x54c kernel/workqueue.c:2421) r10:00000088 r9:8468a000 r8:83806d00 r7:84420038 r6:89081d94 r5:84420000 r4:89081d80 [<80269d78>] (worker_thread) from [<80271f50>] (kthread+0x184/0x1a4 kernel/kthread.c:292) r10:845ede64 r9:89081d80 r8:80269d78 r7:00000000 r6:8468a000 r5:89060540 r4:89081c80 [<80271dcc>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:158) Exception stack(0x8468bfb0 to 0x8468bff8) bfa0: 00000000 00000000 00000000 00000000 bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 bfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80271dcc r4:89060540