hid-generic 0000:0000:0000.0FAE: unknown main item tag 0x0 hid-generic 0000:0000:0000.0FAE: unknown main item tag 0x0 hid-generic 0000:0000:0000.0FAE: unknown main item tag 0x0 hid-generic 0000:0000:0000.0FAD: hidraw51: HID v0.00 Device [syz0] on syz0 hid-generic 0000:0000:0000.0FAE: hidraw52: HID v0.00 Device [syz0] on syz0 INFO: task init:20080 blocked for more than 140 seconds. Not tainted 4.9.202+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. init D28440 20080 1 0x00000000 0000000000000087 ffff88019d385f00 ffff8801cf9b3700 ffff8801db61ffc0 ffff8801d0d54740 ffff8801db61ffd8 ffff8801a9697758 ffffffff8280a1de ffff88010000000d 1ffff100352d2ed4 00ffe8ffffc148a0 ffff8801db6208b0 Call Trace: [<00000000fd4ef494>] schedule+0x92/0x1c0 kernel/sched/core.c:3546 [<000000008828628c>] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3579 [<0000000049e8c8d6>] __mutex_lock_common kernel/locking/mutex.c:582 [inline] [<0000000049e8c8d6>] mutex_lock_nested+0x38d/0x920 kernel/locking/mutex.c:621 [<00000000f771b4b9>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] [<00000000f771b4b9>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 [<00000000028843eb>] chrdev_open+0x230/0x630 fs/char_dev.c:398 [<0000000006ca72eb>] do_dentry_open+0x422/0xd20 fs/open.c:791 [<00000000fb92973a>] vfs_open+0x105/0x230 fs/open.c:904 [<00000000d6f3d45c>] do_last fs/namei.c:3457 [inline] [<00000000d6f3d45c>] path_openat+0xbf5/0x2f60 fs/namei.c:3581 [<0000000069447d22>] do_filp_open+0x1a1/0x280 fs/namei.c:3615 [<0000000072eaa2a4>] do_sys_open+0x2f0/0x610 fs/open.c:1097 [<0000000096c65d33>] SYSC_open fs/open.c:1115 [inline] [<0000000096c65d33>] SyS_open+0x2d/0x40 fs/open.c:1110 [<000000008518f3c0>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288 [<000000007076d64f>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by kworker/0:1/23: #0: ("events"){.+.+.+}, at: [<000000008d2232ce>] process_one_work+0x790/0x1600 kernel/workqueue.c:2107 #1: (key_gc_work){+.+.+.}, at: [<00000000c05ca661>] process_one_work+0x7ce/0x1600 kernel/workqueue.c:2111 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [<000000008716b171>] check_hung_uninterruptible_tasks kernel/hung_task.c:169 [inline] #0: (rcu_read_lock){......}, at: [<000000008716b171>] watchdog+0x14b/0xaf0 kernel/hung_task.c:263 #1: (tasklist_lock){.+.+..}, at: [<0000000082cbf8ae>] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4339 1 lock held by rsyslogd/1896: #0: (&f->f_pos_lock){+.+.+.}, at: [<00000000f4553978>] __fdget_pos+0xa8/0xd0 fs/file.c:782 2 locks held by getty/2024: #0: (&tty->ldisc_sem){++++++}, at: [<00000000e52dbd41>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:376 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [<000000008494f70e>] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 2 locks held by syz-executor.1/4526: #0: (tasklist_lock){.+.+..}, at: [<0000000044e1419f>] do_wait+0x371/0x930 kernel/exit.c:1567 #1: (rcu_read_lock){......}, at: [<0000000035b77cf6>] task_has_perm+0x0/0x330 security/selinux/hooks.c:5848 1 lock held by init/20080: #0: (tty_mutex){+.+.+.}, at: [<00000000f771b4b9>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<00000000f771b4b9>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/20082: #0: (tty_mutex){+.+.+.}, at: [<00000000f771b4b9>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<00000000f771b4b9>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/20084: #0: (tty_mutex){+.+.+.}, at: [<00000000f771b4b9>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<00000000f771b4b9>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/20090: #0: (tty_mutex){+.+.+.}, at: [<00000000f771b4b9>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<00000000f771b4b9>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/27978: #0: (tty_mutex){+.+.+.}, at: [<00000000f771b4b9>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<00000000f771b4b9>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.202+ #0 ffff8801d98d7cc8 ffffffff81b55d2b 0000000000000001 0000000000000000 0000000000000001 ffffffff8109a001 dffffc0000000000 ffff8801d98d7d00 ffffffff81b60fcc 0000000000000001 0000000000000000 0000000000000001 Call Trace: [<00000000125bf4ff>] __dump_stack lib/dump_stack.c:15 [inline] [<00000000125bf4ff>] dump_stack+0xcb/0x130 lib/dump_stack.c:56 [<000000009557ede2>] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [<000000002208bf64>] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [<0000000007ca46d5>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [<000000007acc26f7>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [<000000007acc26f7>] check_hung_task kernel/hung_task.c:126 [inline] [<000000007acc26f7>] check_hung_uninterruptible_tasks kernel/hung_task.c:183 [inline] [<000000007acc26f7>] watchdog+0x670/0xaf0 kernel/hung_task.c:263 [<00000000a1a4f965>] kthread+0x278/0x310 kernel/kthread.c:211 [<00000000602c6d90>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 11462 Comm: syz-executor.0 Not tainted 4.9.202+ #0 task: 000000009dabac5f task.stack: 0000000027cf9711 RIP: 0010:[] c [<00000000c655bcb8>] __lock_release kernel/locking/lockdep.c:3586 [inline] RIP: 0010:[] c [<00000000c655bcb8>] lock_release+0x490/0xc30 kernel/locking/lockdep.c:3778 RSP: 0018:ffff8801a5467ac0 EFLAGS: 00000046 RAX: 0000000000000000 RBX: 9620cf3c89f7b72e RCX: 0000000000000001 RDX: 1ffff10033bbdcf5 RSI: 0000000000000000 RDI: ffff88019ddee7a0 RBP: ffff8801a5467b68 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: ffff88019ddee7b0 R14: 0000000000000001 R15: ffff88019ddee7fa FS: 000000000195b940(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000001bd4ff8 CR3: 00000001a2179000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: b5f825a1409d2dd8c 0000000000000246c ffff88019ddedf00c 0000000000000000c ffff8801a5467b20c ffffffff81bbc38cc ffffffff81bbc38cc ffff8801a5467b38c ffffffff81bbc38cc ffff88019ddee7a8c ffff88019ddee7b0c 0000000000000246c Call Trace: [<00000000cfe217df>] rcu_lock_release include/linux/rcupdate.h:496 [inline] [<00000000cfe217df>] rcu_read_unlock include/linux/rcupdate.h:929 [inline] [<00000000cfe217df>] task_has_perm+0x1ea/0x330 security/selinux/hooks.c:1636 [<0000000067261f37>] selinux_task_wait+0x24/0x30 security/selinux/hooks.c:3980 [<0000000014da4ca9>] security_task_wait+0x73/0xb0 security/security.c:1039 [<00000000bd0bded7>] wait_consider_task+0x294/0x35e0 kernel/exit.c:1386 [<000000007671bead>] do_wait_thread kernel/exit.c:1499 [inline] [<000000007671bead>] do_wait+0x3fc/0x930 kernel/exit.c:1570 [<00000000e9b4294a>] SYSC_wait4 kernel/exit.c:1702 [inline] [<00000000e9b4294a>] SyS_wait4+0x144/0x210 kernel/exit.c:1667 [<000000008518f3c0>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288 [<000000007076d64f>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c02 c85 cf6 c0f c85 c91 c00 c00 c00 c48 cb8 c00 c00 c00 c00 c00 cfc cff cdf c48 c8b c55 ca0 c48 cc1 cea c03 c0f cb6 c04 c02 c84 cc0 c74 c08 c3c c03 c0f c8e c21 c07 c00 c00 c<48> c8b c45 cd0 c8b c4d cc8 c3b c88 ca8 c08 c00 c00 c74 c60 ce8 c6c c95 c97 c00 c85 c