syzbot

 sign-in | mailing list | source | docs
🐞 Open [989] ≡ Subsystems 🐞 Fixed [5238] 🐞 Invalid [12509] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: task hung in hub_event

Status: auto-closed as invalid on 2020/01/02 20:34
Subsystems: usb
[Documentation on labels]
First crash: 1841d, last: 1665d
▶ ▼ Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 INFO: task hung in hub_event 5 836d 858d 0/1 auto-closed as invalid on 2022/05/10 10:19
linux-6.1 INFO: task hung in hub_event (2) 1 218d 218d 0/3 auto-obsoleted due to no activity on 2023/12/29 05:51
upstream INFO: task hung in hub_event (2) usb 27 836d 881d 0/26 closed as invalid on 2022/02/08 09:40
linux-5.15 INFO: task hung in hub_event (2) 1 124d 124d 0/3 auto-obsoleted due to no activity on 2024/04/01 17:35
upstream INFO: task hung in hub_event (3) usb 274 22d 467d 0/26 upstream: reported on 2023/01/14 20:19
linux-5.15 INFO: task hung in hub_event 3 236d 399d 0/3 auto-obsoleted due to no activity on 2023/12/12 00:26
linux-6.1 INFO: task hung in hub_event 2 381d 410d 0/3 auto-obsoleted due to no activity on 2023/08/08 09:24

Sample crash report:
INFO: task kworker/0:4:2751 blocked for more than 141 seconds.
      Not tainted 5.4.0-rc1+ #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/0:4     D22680  2751      2 0x80004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 schedule+0xca/0x250 kernel/sched/core.c:4136
 schedule_preempt_disabled+0xc/0x20 kernel/sched/core.c:4195
 __mutex_lock_common kernel/locking/mutex.c:1033 [inline]
 __mutex_lock+0x881/0x1360 kernel/locking/mutex.c:1103
 usb_lock_port drivers/usb/core/hub.c:2996 [inline]
 hub_event+0x4af/0x3640 drivers/usb/core/hub.c:5440
 process_one_work+0x92b/0x1530 kernel/workqueue.c:2269
 worker_thread+0x96/0xe20 kernel/workqueue.c:2415
 kthread+0x318/0x420 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352

Showing all locks held in the system:
4 locks held by kworker/0:1/12:
2 locks held by kworker/1:1/22:
 #0: ffff8881da029a28 ((wq_completion)rcu_gp){+.+.}, at: __write_once_size include/linux/compiler.h:226 [inline]
 #0: ffff8881da029a28 ((wq_completion)rcu_gp){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881da029a28 ((wq_completion)rcu_gp){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline]
 #0: ffff8881da029a28 ((wq_completion)rcu_gp){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline]
 #0: ffff8881da029a28 ((wq_completion)rcu_gp){+.+.}, at: set_work_data kernel/workqueue.c:620 [inline]
 #0: ffff8881da029a28 ((wq_completion)rcu_gp){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:647 [inline]
 #0: ffff8881da029a28 ((wq_completion)rcu_gp){+.+.}, at: process_one_work+0x827/0x1530 kernel/workqueue.c:2240
 #1: ffff8881d968fdd0 ((work_completion)(&rew.rew_work)){+.+.}, at: process_one_work+0x85b/0x1530 kernel/workqueue.c:2244
1 lock held by khungtaskd/23:
 #0: ffffffff86cfe420 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:5335
3 locks held by kworker/1:2/83:
10 locks held by kworker/0:2/102:
3 locks held by rs:main Q:Reg/1596:
2 locks held by getty/1689:
 #0: ffff8881d979d590 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272
 #1: ffffc900004752e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156
2 locks held by getty/1690:
 #0: ffff8881d6273390 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272
 #1: ffffc900004712e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156
2 locks held by getty/1691:
 #0: ffff8881d97f4490 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272
 #1: ffffc900004592e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156
2 locks held by getty/1692:
 #0: ffff8881d6270090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272
 #1: ffffc9000047d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156
2 locks held by getty/1693:
 #0: ffff8881d979e690 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272
 #1: ffffc900004652e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156
2 locks held by getty/1694:
 #0: ffff8881d6298090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272
 #1: ffffc900004452e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156
6 locks held by kworker/0:3/2746:
4 locks held by kworker/0:4/2751:
 #0: ffff8881d9165528 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:226 [inline]
 #0: ffff8881d9165528 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881d9165528 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline]
 #0: ffff8881d9165528 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline]
 #0: ffff8881d9165528 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:620 [inline]
 #0: ffff8881d9165528 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:647 [inline]
 #0: ffff8881d9165528 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x827/0x1530 kernel/workqueue.c:2240
 #1: ffff8881cc26fdd0 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x85b/0x1530 kernel/workqueue.c:2244
 #2: ffff8881d5f77080 (&dev->mutex){....}, at: device_lock include/linux/device.h:1462 [inline]
 #2: ffff8881d5f77080 (&dev->mutex){....}, at: hub_event+0x17c/0x3640 drivers/usb/core/hub.c:5387
 #3: ffff8881d5fa0520 (&port_dev->status_lock){+.+.}, at: usb_lock_port drivers/usb/core/hub.c:2996 [inline]
 #3: ffff8881d5fa0520 (&port_dev->status_lock){+.+.}, at: hub_event+0x4af/0x3640 drivers/usb/core/hub.c:5440
5 locks held by kworker/0:5/2766:
3 locks held by kworker/0:7/2804:
2 locks held by kworker/u4:0/7947:
 #0: ffff8881da029028 ((wq_completion)events_unbound){+.+.}, at: __write_once_size include/linux/compiler.h:226 [inline]
 #0: ffff8881da029028 ((wq_completion)events_unbound){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881da029028 ((wq_completion)events_unbound){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline]
 #0: ffff8881da029028 ((wq_completion)events_unbound){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline]
 #0: ffff8881da029028 ((wq_completion)events_unbound){+.+.}, at: set_work_data kernel/workqueue.c:620 [inline]
 #0: ffff8881da029028 ((wq_completion)events_unbound){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:647 [inline]
 #0: ffff8881da029028 ((wq_completion)events_unbound){+.+.}, at: process_one_work+0x827/0x1530 kernel/workqueue.c:2240
 #1: ffff8881c880fdd0 ((reaper_work).work){+.+.}, at: process_one_work+0x85b/0x1530 kernel/workqueue.c:2244
2 locks held by getty/11684:
 #0: ffff8881d1421190 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272
 #1: ffffc9000ce792e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156
1 lock held by syz-executor.5/13614:
 #0: ffffffff86d046b8 (rcu_state.exp_mutex){+.+.}, at: exp_funnel_lock kernel/rcu/tree_exp.h:285 [inline]
 #0: ffffffff86d046b8 (rcu_state.exp_mutex){+.+.}, at: synchronize_rcu_expedited+0xd35/0xf50 kernel/rcu/tree_exp.h:817
1 lock held by syz-executor.3/13629:

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 23 Comm: khungtaskd Not tainted 5.4.0-rc1+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xca/0x13e lib/dump_stack.c:113
 nmi_cpu_backtrace.cold+0x55/0x96 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1b0/0x1c7 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:205 [inline]
 watchdog+0x9a4/0xe50 kernel/hung_task.c:289
 kthread+0x318/0x420 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 102 Comm: kworker/0:2 Not tainted 5.4.0-rc1+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events console_callback
RIP: 0010:io_serial_out+0x68/0x80 drivers/tty/serial/8250/8250_port.c:457
Code: e9 00 00 00 48 8d 7d 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 d3 e3 80 3c 02 00 75 15 03 5d 38 44 89 e0 89 da ee <5b> 5d 41 5c c3 e8 ae b5 4e ff eb c7 e8 d7 b5 4e ff eb e4 0f 1f 44
RSP: 0018:ffff8881db209660 EFLAGS: 00000006
RAX: 0000000000000000 RBX: 00000000000003f9 RCX: 0000000000000000
RDX: 00000000000003f9 RSI: ffffffff8216a4e1 RDI: ffffffff89a569d8
RBP: ffffffff89a569a0 R08: ffff8881d5cc6000 R09: ffffed103b6412bf
R10: ffffed103b6412be R11: 0000000000000003 R12: 0000000000000000
R13: ffffffff89a56bf8 R14: ffffffff82164cb0 R15: ffffffff89a569f0
FS:  0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000148 CR3: 0000000006c21000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 serial_port_out include/linux/serial_core.h:265 [inline]
 serial8250_console_write+0x45b/0x880 drivers/tty/serial/8250/8250_port.c:3166
 call_console_drivers kernel/printk/printk.c:1791 [inline]
 console_unlock+0x898/0xc40 kernel/printk/printk.c:2473
 vprintk_emit+0x171/0x3e0 kernel/printk/printk.c:1996
 vprintk_func+0x75/0x113 kernel/printk/printk_safe.c:386
 printk+0xba/0xed kernel/printk/printk.c:2056
 printk_stack_address arch/x86/kernel/dumpstack.c:71 [inline]
 show_trace_log_lvl+0x225/0x2b5 arch/x86/kernel/dumpstack.c:258
 sched_show_task kernel/sched/core.c:5964 [inline]
 sched_show_task.cold+0x2e0/0x359 kernel/sched/core.c:5939
 show_state_filter+0x164/0x209 kernel/sched/core.c:6014
 k_spec drivers/tty/vt/keyboard.c:636 [inline]
 k_spec+0xdc/0x120 drivers/tty/vt/keyboard.c:625
 kbd_keycode drivers/tty/vt/keyboard.c:1477 [inline]
 kbd_event+0x927/0x3790 drivers/tty/vt/keyboard.c:1495
 input_to_handler+0x3b6/0x4c0 drivers/input/input.c:118
 input_pass_values.part.0+0x2e3/0x720 drivers/input/input.c:145
 input_pass_values drivers/input/input.c:181 [inline]
 input_repeat_key+0x1ee/0x2c0 drivers/input/input.c:193
 call_timer_fn+0x179/0x650 kernel/time/timer.c:1404
 expire_timers kernel/time/timer.c:1449 [inline]
 __run_timers kernel/time/timer.c:1773 [inline]
 __run_timers kernel/time/timer.c:1740 [inline]
 run_timer_softirq+0x5e3/0x1490 kernel/time/timer.c:1786
 __do_softirq+0x221/0x912 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x178/0x1a0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x12f/0x500 arch/x86/kernel/apic/apic.c:1137
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/irqflags.h:85 [inline]
RIP: 0010:console_unlock+0xb4f/0xc40 kernel/printk/printk.c:2477
Code: 32 fe ff ff e8 42 af 15 00 48 8b bc 24 80 00 00 00 e8 b5 dd ff ff e9 29 fb ff ff e8 2b af 15 00 e8 46 da 1a 00 ff 74 24 30 9d <e9> 15 fb ff ff e8 d7 ed 3c 00 e9 de f6 ff ff e8 dd ed 3c 00 e9 98
RSP: 0018:ffff8881d593fc48 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: 0000000000000200 RCX: 0000000000000006
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881d5cc684c
RBP: 0000000000000001 R08: ffff8881d5cc6000 R09: fffffbfff11b25be
R10: fffffbfff11b25bd R11: ffffffff88d92def R12: 0000000000000081
R13: dffffc0000000000 R14: ffffffff8293d990 R15: ffffffff87076f90
 console_callback+0x174/0x3f0 drivers/tty/vt/vt.c:2848
 process_one_work+0x92b/0x1530 kernel/workqueue.c:2269
 process_scheduled_works kernel/workqueue.c:2331 [inline]
 worker_thread+0x7ab/0xe20 kernel/workqueue.c:2417
 kthread+0x318/0x420 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352

Crashes (19):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/04 20:29 https://github.com/google/kasan.git usb-fuzzer 58d5f26a5584 c86336cf .config console log report ci2-upstream-usb
2019/04/17 17:20 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 05:44 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/16 20:18 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/15 20:59 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/15 02:33 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/15 00:13 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/14 23:51 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/14 23:31 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/14 21:00 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/14 13:21 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/14 11:44 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/13 22:29 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb c402d8f1 .config console log report ci2-upstream-usb
2019/04/13 17:17 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb c402d8f1 .config console log report ci2-upstream-usb
2019/04/13 14:49 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb c402d8f1 .config console log report ci2-upstream-usb
2019/04/13 11:41 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb c402d8f1 .config console log report ci2-upstream-usb
2019/04/13 08:05 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb c402d8f1 .config console log report ci2-upstream-usb
2019/04/12 05:10 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 8916f5e1 .config console log report ci2-upstream-usb
2019/04/12 02:19 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 13030ef8 .config console log report ci2-upstream-usb
* Struck through repros no longer work on HEAD.