hid-generic 0000:0000:0000.0245: unknown main item tag 0x0 hid-generic 0000:0000:0000.0245: unknown main item tag 0x0 hid-generic 0000:0000:0000.0245: unknown main item tag 0x0 hid-generic 0000:0000:0000.0245: hidraw1: HID v0.00 Device [syz0] on syz0 netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. INFO: task init:1 blocked for more than 140 seconds. Not tainted 4.9.140+ #68 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. init D23880 1 0 0x00000004 ffff8801da5f8000 ffff8801d1ac2c00 ffff8801d4c50580 ffff8801d6d02f80 ffff8801db721018 ffff8801da607580 ffffffff82807402 ffff8801da607618 ffffffff830c5278 ffff8801da607528 00ffffff81ba7f5c ffff8801db7218f0 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3553 [] schedule_timeout+0x735/0xe20 kernel/time/timer.c:1771 [] __down_common kernel/locking/semaphore.c:221 [inline] [] __down+0x191/0x2b0 kernel/locking/semaphore.c:238 [] down+0x5e/0x80 kernel/locking/semaphore.c:61 [] console_lock+0x2c/0x80 kernel/printk/printk.c:2217 [] console_device+0x1c/0xc0 kernel/printk/printk.c:2554 [] tty_lookup_driver drivers/tty/tty_io.c:2008 [inline] [] tty_open_by_driver drivers/tty/tty_io.c:2053 [inline] [] tty_open+0x6f5/0xdf0 drivers/tty/tty_io.c:2130 [] chrdev_open+0x22d/0x5c0 fs/char_dev.c:392 [] do_dentry_open+0x3ef/0xc90 fs/open.c:766 [] vfs_open+0x11c/0x210 fs/open.c:879 [] do_last fs/namei.c:3410 [inline] [] path_openat+0x542/0x2790 fs/namei.c:3534 [] do_filp_open+0x197/0x270 fs/namei.c:3568 [] do_sys_open+0x30d/0x5c0 fs/open.c:1072 [] SYSC_open fs/open.c:1090 [inline] [] SyS_open+0x2d/0x40 fs/open.c:1085 [] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 1 lock held by init/1: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/1901: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 2 locks held by getty/2028: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.140+ #68 ffff8801d9907d08 ffffffff81b42e79 0000000000000000 0000000000000001 0000000000000001 0000000000000001 ffffffff810983b0 ffff8801d9907d40 ffffffff81b4df89 0000000000000001 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.0+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12c/0x151 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6ad/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 5613 Comm: udevd Not tainted 4.9.140+ #68 task: ffff8801a341af80 task.stack: ffff8801a3510000 RIP: 0010:[] c [] strlen+0x5a/0xa0 lib/string.c:481 RSP: 0018:ffff8801a35175b8 EFLAGS: 00000006 RAX: ffffffff82a5eb63 RBX: dffffc0000000000 RCX: 0000000000000003 RDX: 0000000000000000 RSI: ffffffff830cc360 RDI: ffffffff82a5eb60 RBP: ffff8801a35175d0 R08: ffff8801a341b8c8 R09: 08f9af0cde116447 R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff82a5eb60 R13: ffffffff830b9a80 R14: ffff8801a35176c0 R15: ffffffff830cc360 FS: 00007f8468c417a0(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcef051c638 CR3: 00000001ccaf5000 CR4: 00000000001606b0 DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffff8801a35175f8c ffffffff830cc360c 1ffff100346a2ec4c ffff8801a35176e8c ffffffff811ff31dc ffff8801a3517700c ffff8801a341b8c0c ffff8801a341b820c ffff8801a341b8c8c ffff8801a341b828c ffffffff830cc378c 1ffff100346a2ec4c Call Trace: [] trace_event_get_offsets_lock include/trace/events/lock.h:38 [inline] [] perf_trace_lock+0xdd/0x520 include/trace/events/lock.h:38 [] trace_lock_release include/trace/events/lock.h:57 [inline] [] lock_release+0x935/0xc20 kernel/locking/lockdep.c:3774 [] rcu_lock_release include/linux/rcupdate.h:498 [inline] [] rcu_read_unlock include/linux/rcupdate.h:931 [inline] [] avc_reclaim_node security/selinux/avc.c:540 [inline] [] avc_alloc_node+0x311/0x3c0 security/selinux/avc.c:559 [] avc_insert security/selinux/avc.c:670 [inline] [] avc_compute_av+0x178/0x610 security/selinux/avc.c:976 [] avc_has_perm_noaudit+0x29d/0x2f0 security/selinux/avc.c:1112 [] selinux_inode_permission+0x32d/0x4b0 security/selinux/hooks.c:3038 [] security_inode_permission+0xb9/0x100 security/security.c:611 [] __inode_permission2+0x93/0x2d0 fs/namei.c:435 [] inode_permission2+0x2f/0x110 fs/namei.c:485 [] may_lookup fs/namei.c:1683 [inline] [] link_path_walk+0x1a5/0x1230 fs/namei.c:2064 [] path_lookupat.isra.10+0x1b4/0x410 fs/namei.c:2282 [] filename_lookup.part.18+0x177/0x370 fs/namei.c:2317 [] filename_lookup fs/namei.c:2310 [inline] [] user_path_at_empty+0x53/0x70 fs/namei.c:2578 [] user_path_at include/linux/namei.h:55 [inline] [] vfs_fstatat+0xc6/0x170 fs/stat.c:106 [] vfs_lstat fs/stat.c:129 [inline] [] SYSC_newlstat fs/stat.c:283 [inline] [] SyS_newlstat+0x89/0x100 fs/stat.c:277 [] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c75 c4d c41 c80 c3c c24 c00 c74 c3b c48 cbb c00 c00 c00 c00 c00 cfc cff cdf c4c c89 ce0 c48 c83 cc0 c01 c48 c89 cc2 c48 c89 cc1 c48 cc1 cea c03 c83 ce1 c07 c0f cb6 c14 c1a c<38> cca c7f c04 c84 cd2 c75 c23 c80 c38 c00 c75 cde c48 c83 cc4 c08 c4c c29 ce0 c5b c