INFO: task hung in usb_deregister

INFO: task hung in usb_deregister_dev
Status: upstream: reported on 2020/07/06 15:22
Reported-by: syzbot+4189d5cde8630463053f@syzkaller.appspotmail.com
First crash: 638d, last: 2d04h

Sample crash report:

INFO: task kworker/1:5:7208 blocked for more than 143 seconds.
      Not tainted 5.12.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:5     state:D stack:18248 pid: 7208 ppid:     2 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 context_switch kernel/sched/core.c:4339 [inline]
 __schedule+0x920/0x1f70 kernel/sched/core.c:5147
 schedule+0xcb/0x270 kernel/sched/core.c:5226
 rwsem_down_write_slowpath+0x917/0x11c0 kernel/locking/rwsem.c:1106
 __down_write_common kernel/locking/rwsem.c:1261 [inline]
 __down_write_common kernel/locking/rwsem.c:1258 [inline]
 __down_write kernel/locking/rwsem.c:1270 [inline]
 down_write+0x137/0x150 kernel/locking/rwsem.c:1407
 usb_deregister_dev+0xaa/0x320 drivers/usb/core/file.c:239
 sisusb_disconnect+0x5a/0x200 drivers/usb/misc/sisusbvga/sisusb.c:3166
 usb_unbind_interface+0x1d8/0x8d0 drivers/usb/core/driver.c:458
 __device_release_driver+0x3bd/0x6f0 drivers/base/dd.c:1181
 device_release_driver_internal drivers/base/dd.c:1212 [inline]
 device_release_driver+0x26/0x40 drivers/base/dd.c:1235
 bus_remove_device+0x2eb/0x5a0 drivers/base/bus.c:533
 device_del+0x502/0xd40 drivers/base/core.c:3507
 usb_disable_device+0x35b/0x7b0 drivers/usb/core/message.c:1413
 usb_disconnect.cold+0x27d/0x791 drivers/usb/core/hub.c:2219
 hub_port_connect drivers/usb/core/hub.c:5127 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5416 [inline]
 port_event drivers/usb/core/hub.c:5562 [inline]
 hub_event+0x1c9c/0x4330 drivers/usb/core/hub.c:5644
 process_one_work+0x98d/0x1580 kernel/workqueue.c:2275
 process_scheduled_works kernel/workqueue.c:2337 [inline]
 worker_thread+0x82b/0x1120 kernel/workqueue.c:2423
 kthread+0x38c/0x460 kernel/kthread.c:313
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Showing all locks held in the system:
1 lock held by khungtaskd/1217:
 #0: ffffffff87a7cea0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:6333
1 lock held by in:imklog/4277:
 #0: ffff888104dd05f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:974
2 locks held by agetty/4292:
 #0: ffff888116316098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:267
 #1: ffffc900004bb2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xd5b/0x12f0 drivers/tty/n_tty.c:2179
2 locks held by agetty/4294:
 #0: ffff88811719b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:267
 #1: ffffc9000053b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xd5b/0x12f0 drivers/tty/n_tty.c:2179
6 locks held by kworker/1:5/7208:
 #0: ffff888109f97d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888109f97d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline]
 #0: ffff888109f97d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline]
 #0: ffff888109f97d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:616 [inline]
 #0: ffff888109f97d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline]
 #0: ffff888109f97d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x871/0x1580 kernel/workqueue.c:2246
 #1: ffffc90004807da8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1580 kernel/workqueue.c:2250
 #2: ffff88810f1d6220 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:744 [inline]
 #2: ffff88810f1d6220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4330 drivers/usb/core/hub.c:5590
 #3: ffff888100dc2220 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:744 [inline]
 #3: ffff888100dc2220 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x791 drivers/usb/core/hub.c:2210
 #4: ffff88810de511a8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:744 [inline]
 #4: ffff88810de511a8 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1001 [inline]
 #4: ffff88810de511a8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal drivers/base/dd.c:1209 [inline]
 #4: ffff88810de511a8 (&dev->mutex){....}-{3:3}, at: device_release_driver+0x1c/0x40 drivers/base/dd.c:1235
 #5: ffffffff88365fb0 (minor_rwsem#2){++++}-{3:3}, at: usb_deregister_dev+0xaa/0x320 drivers/usb/core/file.c:239
2 locks held by syz-executor.4/19048:
 #0: ffffffff88365fb0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x24/0x2e0 drivers/usb/core/file.c:39
 #1: ffff88810b48f0d0 (&(sisusb->lock)){+.+.}-{3:3}, at: sisusb_open+0xb2/0x4d0 drivers/usb/misc/sisusbvga/sisusb.c:2396

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 1217 Comm: khungtaskd Not tainted 5.12.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x143/0x1db lib/dump_stack.c:120
 nmi_cpu_backtrace.cold+0x46/0xe0 lib/nmi_backtrace.c:105
 nmi_trigger_cpumask_backtrace+0x1da/0x200 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:209 [inline]
 watchdog+0xd32/0xf70 kernel/hung_task.c:294
 kthread+0x38c/0x460 kernel/kthread.c:313
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 2632 Comm: systemd-journal Not tainted 5.12.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:check_kcov_mode kernel/kcov.c:163 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x7/0x60 kernel/kcov.c:197
Code: b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 66 0f 1f 44 00 00 65 8b 05 29 f6 c0 7e <89> c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 40 ef 01 00 a9
RSP: 0018:ffffc900001c7c40 EFLAGS: 00000246
RAX: 0000000080000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff88811407d1c0 RDI: 0000000000000003
RBP: 0000000000010af2 R08: 0000000000000000 R09: ffffffff8a205797
R10: ffffffff8131d45d R11: 0000000000000000 R12: ffffc900001c7cc0
R13: fffff52000038f99 R14: fffff52000038f98 R15: 0000000001000000
FS:  00007f162164e8c0(0000) GS:ffff8881f6a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f161e3eb018 CR3: 00000001015c8000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ktime_get_coarse_real_ts64+0xf6/0x200 kernel/time/timekeeping.c:2239
 current_time+0x72/0x2c0 fs/inode.c:2313
 shmem_truncate_range mm/shmem.c:1031 [inline]
 shmem_setattr+0x5c7/0x8f0 mm/shmem.c:1091
 notify_change+0xb28/0x10f0 fs/attr.c:398
 do_truncate+0x13c/0x200 fs/open.c:64
 do_sys_ftruncate+0x719/0x880 fs/open.c:196
 do_syscall_64+0x3a/0xb0 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f1620910ec7
Code: 73 01 c3 48 8b 0d d1 5f 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 5f 2b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffce8372e98 EFLAGS: 00000202 ORIG_RAX: 000000000000004d
RAX: ffffffffffffffda RBX: 00007ffce8372ed0 RCX: 00007f1620910ec7
RDX: 000055fd45646e80 RSI: 0000000001000000 RDI: 0000000000000010
RBP: 00007ffce8372ec8 R08: 0000000000000008 R09: 000055fd4564725c
R10: 000055fd456471e0 R11: 0000000000000202 R12: 000055fd456471e0
R13: 00007ffce8372fc8 R14: 000055fd43de7958 R15: 0005c1d23e96bd61

Crashes (162):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Title
ci2-upstream-usb	2021/05/08 14:20	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	31a85035	bc5434be	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/05/06 03:55	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	d665ea6e	06c27ff5	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/27 02:39	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	caa93d9b	8ee2dea6	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/26 23:17	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	caa93d9b	8ee2dea6	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/25 02:45	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	caa93d9b	17f0b706	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/24 06:49	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	ddae7979	17f0b706	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/20 23:56	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	4b853c23	c0ced557	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/20 05:22	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	4b853c23	4285c989	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/19 05:40	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	4b853c23	7e2b734b	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/18 09:16	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	4b853c23	7e2b734b	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/17 05:17	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	4b853c23	7e2b734b	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/11 07:40	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3db53374	6a81331a	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/10 11:14	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	49696027	6a81331a	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/05 03:47	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	bee1f89a	6a81331a	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/03 14:11	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	bee1f89a	6a81331a	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/04/02 06:33	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e5242861	6a81331a	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/03/31 14:25	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	e5242861	6a81331a	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/03/23 00:57	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	f85142af	8092f30d	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/03/13 08:24	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	14b02f02	4a003785	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/03/10 04:35	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	bebccc4b	26967e35	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/03/04 22:22	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	5e17812c	f89ed068	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/03/01 15:30	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	fe07bfda	4c37c133	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/03/01 13:09	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	fe07bfda	4c37c133	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/25 07:53	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3b9cdafb	fcc6d71b	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/24 10:54	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3b9cdafb	fcc6d71b	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/22 00:55	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	55f62bc8	a659b3f1	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/20 16:53	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b5a12546	3e5ed8b4	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/16 09:02	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b5a12546	98682e5e	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/15 19:23	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b5a12546	98682e5e	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/09 15:58	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	4b049f55	2bd9619f	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/09 11:22	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	4b049f55	2bd9619f	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/01/31 11:30	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3c648d3d	fc9fd31e	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/01/26 22:06	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	7a35a5ca	55a7d4df	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/01/26 12:22	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	7cbcd008	52e37319	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/01/09 20:51	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	841081d8	a6c52263	.config	log	report	info
ci2-upstream-usb	2021/01/05 16:55	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	ed054e4e	a0234d98	.config	log	report	info
ci2-upstream-usb	2021/01/04 03:18	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	cb4d9b52	79264ae3	.config	log	report	info
ci2-upstream-usb	2021/01/03 05:54	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	cb4d9b52	79264ae3	.config	log	report	info
ci2-upstream-usb	2020/12/31 18:20	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	cb4d9b52	79264ae3	.config	log	report	info
ci2-upstream-usb	2020/12/26 21:24	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3644e2d2	821e0b09	.config	log	report	info
ci2-upstream-usb	2020/12/25 11:02	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3644e2d2	b982b3ea	.config	log	report	info
ci2-upstream-usb	2020/12/24 19:44	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3644e2d2	c2c1d1dd	.config	log	report	info
ci2-upstream-usb	2020/12/23 19:36	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3644e2d2	c2c1d1dd	.config	log	report	info
ci2-upstream-usb	2020/12/22 02:33	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3644e2d2	04201c06	.config	log	report	info
ci2-upstream-usb	2020/07/05 00:56	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	768a0741	24d7f505	.config	log	report
ci2-upstream-usb	2019/08/11 00:40	https://github.com/google/kasan.git usb-fuzzer	e96407b4	acb51638	.config	log	report