INFO: task kworker/0:3:3172 blocked for more than 143 seconds. Not tainted 5.11.0-next-20210226-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:3 state:D stack:26352 pid: 3172 ppid: 2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:4324 [inline] __schedule+0x90c/0x21a0 kernel/sched/core.c:5075 schedule+0xcf/0x270 kernel/sched/core.c:5154 usb_kill_urb.part.0+0x19c/0x220 drivers/usb/core/urb.c:711 usb_kill_urb+0x81/0xa0 drivers/usb/core/urb.c:706 usb_start_wait_urb+0x24a/0x4c0 drivers/usb/core/message.c:64 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0x31c/0x4a0 drivers/usb/core/message.c:153 usb_get_descriptor+0xc5/0x1b0 drivers/usb/core/message.c:790 usb_get_device_descriptor+0x81/0xf0 drivers/usb/core/message.c:1065 hub_port_init+0x9e3/0x2dd0 drivers/usb/core/hub.c:4799 hub_port_connect drivers/usb/core/hub.c:5155 [inline] hub_port_connect_change drivers/usb/core/hub.c:5363 [inline] port_event drivers/usb/core/hub.c:5509 [inline] hub_event+0x2190/0x4320 drivers/usb/core/hub.c:5591 process_one_work+0x98d/0x1600 kernel/workqueue.c:2275 process_scheduled_works kernel/workqueue.c:2337 [inline] worker_thread+0x82b/0x1120 kernel/workqueue.c:2423 kthread+0x3b1/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 INFO: task kworker/0:5:9697 blocked for more than 144 seconds. Not tainted 5.11.0-next-20210226-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:5 state:D stack:27168 pid: 9697 ppid: 2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:4324 [inline] __schedule+0x90c/0x21a0 kernel/sched/core.c:5075 schedule+0xcf/0x270 kernel/sched/core.c:5154 usb_kill_urb.part.0+0x19c/0x220 drivers/usb/core/urb.c:711 usb_kill_urb+0x81/0xa0 drivers/usb/core/urb.c:706 usb_start_wait_urb+0x24a/0x4c0 drivers/usb/core/message.c:64 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0x31c/0x4a0 drivers/usb/core/message.c:153 usb_get_descriptor+0xc5/0x1b0 drivers/usb/core/message.c:790 usb_get_device_descriptor+0x81/0xf0 drivers/usb/core/message.c:1065 hub_port_init+0x9e3/0x2dd0 drivers/usb/core/hub.c:4799 hub_port_connect drivers/usb/core/hub.c:5155 [inline] hub_port_connect_change drivers/usb/core/hub.c:5363 [inline] port_event drivers/usb/core/hub.c:5509 [inline] hub_event+0x2190/0x4320 drivers/usb/core/hub.c:5591 process_one_work+0x98d/0x1600 kernel/workqueue.c:2275 process_scheduled_works kernel/workqueue.c:2337 [inline] worker_thread+0x82b/0x1120 kernel/workqueue.c:2423 kthread+0x3b1/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 INFO: task kworker/0:7:9743 blocked for more than 144 seconds. Not tainted 5.11.0-next-20210226-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:7 state:D stack:27368 pid: 9743 ppid: 2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:4324 [inline] __schedule+0x90c/0x21a0 kernel/sched/core.c:5075 schedule+0xcf/0x270 kernel/sched/core.c:5154 usb_kill_urb.part.0+0x19c/0x220 drivers/usb/core/urb.c:711 usb_kill_urb+0x81/0xa0 drivers/usb/core/urb.c:706 usb_start_wait_urb+0x24a/0x4c0 drivers/usb/core/message.c:64 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0x31c/0x4a0 drivers/usb/core/message.c:153 usb_get_descriptor+0xc5/0x1b0 drivers/usb/core/message.c:790 usb_get_device_descriptor+0x81/0xf0 drivers/usb/core/message.c:1065 hub_port_init+0x9e3/0x2dd0 drivers/usb/core/hub.c:4799 hub_port_connect drivers/usb/core/hub.c:5155 [inline] hub_port_connect_change drivers/usb/core/hub.c:5363 [inline] port_event drivers/usb/core/hub.c:5509 [inline] hub_event+0x2190/0x4320 drivers/usb/core/hub.c:5591 process_one_work+0x98d/0x1600 kernel/workqueue.c:2275 process_scheduled_works kernel/workqueue.c:2337 [inline] worker_thread+0x82b/0x1120 kernel/workqueue.c:2423 kthread+0x3b1/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 INFO: task kworker/0:10:9770 blocked for more than 144 seconds. Not tainted 5.11.0-next-20210226-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:10 state:D stack:27392 pid: 9770 ppid: 2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:4324 [inline] __schedule+0x90c/0x21a0 kernel/sched/core.c:5075 schedule+0xcf/0x270 kernel/sched/core.c:5154 usb_kill_urb.part.0+0x19c/0x220 drivers/usb/core/urb.c:711 usb_kill_urb+0x81/0xa0 drivers/usb/core/urb.c:706 usb_start_wait_urb+0x24a/0x4c0 drivers/usb/core/message.c:64 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0x31c/0x4a0 drivers/usb/core/message.c:153 usb_get_descriptor+0xc5/0x1b0 drivers/usb/core/message.c:790 usb_get_device_descriptor+0x81/0xf0 drivers/usb/core/message.c:1065 hub_port_init+0x9e3/0x2dd0 drivers/usb/core/hub.c:4799 hub_port_connect drivers/usb/core/hub.c:5155 [inline] hub_port_connect_change drivers/usb/core/hub.c:5363 [inline] port_event drivers/usb/core/hub.c:5509 [inline] hub_event+0x2190/0x4320 drivers/usb/core/hub.c:5591 process_one_work+0x98d/0x1600 kernel/workqueue.c:2275 process_scheduled_works kernel/workqueue.c:2337 [inline] worker_thread+0x82b/0x1120 kernel/workqueue.c:2423 kthread+0x3b1/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Showing all locks held in the system: 1 lock held by khungtaskd/1660: #0: ffffffff8bf741e0 ( rcu_read_lock ){....}-{1:2} , at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6327 5 locks held by kworker/0:3/3172: #0: ffff888015729138 ( (wq_completion)usb_hub_wq ){+.+.}-{0:0} , at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] , at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] , at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] , at: set_work_data kernel/workqueue.c:616 [inline] , at: set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline] , at: process_one_work+0x871/0x1600 kernel/workqueue.c:2246 #1: ffffc90002a0fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 kernel/workqueue.c:2250 #2: ffff88801c821218 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:740 [inline] #2: ffff88801c821218 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4320 drivers/usb/core/hub.c:5537 #3: ffff88801c824578 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3030 [inline] #3: ffff88801c824578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5154 [inline] #3: ffff88801c824578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5363 [inline] #3: ffff88801c824578 (&port_dev->status_lock){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5509 [inline] #3: ffff88801c824578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2178/0x4320 drivers/usb/core/hub.c:5591 #4: ffff888144c33b68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_init+0x1b5/0x2dd0 drivers/usb/core/hub.c:4582 1 lock held by in:imklog/8157: #0: ffff88801547d4f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:961 2 locks held by syz-executor305/8438: #0: ffff8880b9c35198 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1321 [inline] (&rq->lock){-.-.}-{2:2}, at: __schedule+0x217/0x21a0 kernel/sched/core.c:4992 #1: ffff8880b9c1f948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x305/0x440 kernel/sched/psi.c:833 2 locks held by kworker/u4:0/8455: 5 locks held by kworker/0:5/9697: #0: ffff888015729138 ( (wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] (wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] (wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] (wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:616 [inline] (wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline] (wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 kernel/workqueue.c:2246 #1: ffffc9000a9dfda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 kernel/workqueue.c:2250 #2: ffff88801c9b6218 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:740 [inline] ffff88801c9b6218 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4320 drivers/usb/core/hub.c:5537 #3: ffff888144d69578 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3030 [inline] ffff888144d69578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5154 [inline] ffff888144d69578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5363 [inline] ffff888144d69578 (&port_dev->status_lock){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5509 [inline] ffff888144d69578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2178/0x4320 drivers/usb/core/hub.c:5591 #4: ffff88801c67dc68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_init+0x1b5/0x2dd0 drivers/usb/core/hub.c:4582 5 locks held by kworker/0:7/9743: #0: ffff888015729138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888015729138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] #0: ffff888015729138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] #0: ffff888015729138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:616 [inline] #0: ffff888015729138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline] #0: ffff888015729138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 kernel/workqueue.c:2246 #1: ffffc9000a96fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 kernel/workqueue.c:2250 #2: ffff888144d62218 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:740 [inline] #2: ffff888144d62218 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4320 drivers/usb/core/hub.c:5537 #3: ffff888144d65578 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3030 [inline] #3: ffff888144d65578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5154 [inline] #3: ffff888144d65578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5363 [inline] #3: ffff888144d65578 (&port_dev->status_lock){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5509 [inline] #3: ffff888144d65578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2178/0x4320 drivers/usb/core/hub.c:5591 #4: ffff88801c614268 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_init+0x1b5/0x2dd0 drivers/usb/core/hub.c:4582 5 locks held by kworker/0:10/9770: #0: ffff888015729138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888015729138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] #0: ffff888015729138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] #0: ffff888015729138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:616 [inline] #0: ffff888015729138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline] #0: ffff888015729138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 kernel/workqueue.c:2246 #1: ffffc9000ab1fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 kernel/workqueue.c:2250 #2: ffff88801c759218 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:740 [inline] #2: ffff88801c759218 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4320 drivers/usb/core/hub.c:5537 #3: ffff88801c75c578 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3030 [inline] #3: ffff88801c75c578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5154 [inline] #3: ffff88801c75c578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5363 [inline] #3: ffff88801c75c578 (&port_dev->status_lock){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5509 [inline] #3: ffff88801c75c578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2178/0x4320 drivers/usb/core/hub.c:5591 #4: ffff88801c610368 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_init+0x1b5/0x2dd0 drivers/usb/core/hub.c:4582 3 locks held by syz-executor305/3475: #0: ffff8880b9c35198 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1321 [inline] (&rq->lock){-.-.}-{2:2}, at: __schedule+0x217/0x21a0 kernel/sched/core.c:4992 #1: ffff8880b9c1f948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x305/0x440 kernel/sched/psi.c:833 #2: ffff8880204406b8 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 kernel/sched/wait.c:137 3 locks held by syz-executor305/3510: #0: ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1321 [inline] #0: ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x217/0x21a0 kernel/sched/core.c:4992 #1: ffff8880b9d1f948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x305/0x440 kernel/sched/psi.c:833 #2: ffff8880159f2db8 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 kernel/sched/wait.c:137 3 locks held by syz-executor305/3528: #0: ffff8880b9c35198 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1321 [inline] #0: ffff8880b9c35198 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x217/0x21a0 kernel/sched/core.c:4992 #1: ffff8880b9c1f948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x305/0x440 kernel/sched/psi.c:833 #2: ffff8880159f1a38 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 kernel/sched/wait.c:137 3 locks held by syz-executor305/3548: #0: ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1321 [inline] #0: ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x217/0x21a0 kernel/sched/core.c:4992 #1: ffff8880b9d1f948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x305/0x440 kernel/sched/psi.c:833 #2: ffffffff8bf741e0 (rcu_read_lock){....}-{1:2}, at: trace_sched_stat_runtime include/trace/events/sched.h:519 [inline] #2: ffffffff8bf741e0 (rcu_read_lock){....}-{1:2}, at: update_curr+0x2e4/0x840 kernel/sched/fair.c:851 1 lock held by syz-executor305/3557: 3 locks held by syz-executor305/3559: #0: ffff888022654460 (sb_writers#6){.+.+}-{0:0}, at: ksys_write+0x12d/0x250 fs/read_write.c:659 #1: ffff8880b9d1f948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x305/0x440 kernel/sched/psi.c:833 #2: ffff8880159f47b8 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 kernel/sched/wait.c:137 3 locks held by syz-executor305/3578: 3 locks held by syz-executor305/3579: 1 lock held by syz-executor305/3582: 3 locks held by syz-executor305/3588: 3 locks held by syz-executor305/3585: 3 locks held by syz-executor305/3590: #0: ffff888022654460 (sb_writers#6){.+.+}-{0:0}, at: ksys_write+0x12d/0x250 fs/read_write.c:659 #1: ffff8880b9d1f948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x305/0x440 kernel/sched/psi.c:833 #2: ffff8880159f47b8 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 kernel/sched/wait.c:137 3 locks held by syz-executor305/3603: #0: ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1321 [inline] ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x217/0x21a0 kernel/sched/core.c:4992 #1: ffff8880b9d1f948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x305/0x440 kernel/sched/psi.c:833 #2: ffff888020447538 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 kernel/sched/wait.c:137 3 locks held by syz-executor305/3621: 3 locks held by syz-executor305/3626: 3 locks held by syz-executor305/3627: 3 locks held by syz-executor305/3628: 3 locks held by syz-executor305/3629: #0: ffff8880b9c35198 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1321 [inline] #0: ffff8880b9c35198 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x217/0x21a0 kernel/sched/core.c:4992 #1: ffff8880b9c1f948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x305/0x440 kernel/sched/psi.c:833 #2: ffff888020446838 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 kernel/sched/wait.c:137 3 locks held by syz-executor305/3643: 3 locks held by syz-executor305/3647: 3 locks held by syz-executor305/3648: #0: ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1321 [inline] #0: ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x217/0x21a0 kernel/sched/core.c:4992 #1: ffff8880b9d1f948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x305/0x440 kernel/sched/psi.c:833 #2: ffff888020447538 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 kernel/sched/wait.c:137 3 locks held by syz-executor305/3658: ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1660 Comm: khungtaskd Not tainted 5.11.0-next-20210226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0xfa/0x151 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x44/0xd7 lib/nmi_backtrace.c:105 nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:147 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:253 [inline] watchdog+0xd8e/0xf40 kernel/hung_task.c:338 kthread+0x3b1/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 18 Comm: ksoftirqd/1 Not tainted 5.11.0-next-20210226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__orc_find+0x47/0xf0 arch/x86/kernel/unwind_orc.c:50 Code: 4c 39 e7 49 89 fd 0f 87 9a 00 00 00 49 bf 00 00 00 00 00 fc ff df 49 89 fe 48 89 fd eb 0c 48 8d 6b 04 49 89 de 49 39 ec 72 4d <4c> 89 e0 48 29 e8 48 89 c2 48 c1 e8 3f 48 c1 fa 02 48 01 d0 48 d1 RSP: 0018:ffffc90000d877a8 EFLAGS: 00000293 RAX: 0000000000000012 RBX: 1ffff920001b0f06 RCX: ffffffff81b72abb RDX: 0000000000000012 RSI: ffffffff8e492a0e RDI: ffffffff8dda43d4 RBP: ffffffff8dda43d4 R08: ffffffff8e492a7a R09: ffffffff8e492a0e R10: 0000000000084087 R11: 000000000002a587 R12: ffffffff8dda4418 R13: ffffffff8dda43d4 R14: ffffffff8dda43d4 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffcdd9af578 CR3: 000000001b7cc000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: orc_find arch/x86/kernel/unwind_orc.c:173 [inline] unwind_next_frame+0x342/0x2000 arch/x86/kernel/unwind_orc.c:443 arch_stack_walk+0x7d/0xe0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:121 kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38 kasan_set_track+0x1c/0x30 mm/kasan/common.c:46 kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:357 ____kasan_slab_free mm/kasan/common.c:360 [inline] ____kasan_slab_free mm/kasan/common.c:325 [inline] __kasan_slab_free+0xf5/0x130 mm/kasan/common.c:367 kasan_slab_free include/linux/kasan.h:199 [inline] slab_free_hook mm/slub.c:1562 [inline] slab_free_freelist_hook+0x72/0x1b0 mm/slub.c:1600 slab_free mm/slub.c:3161 [inline] kmem_cache_free+0x8b/0x730 mm/slub.c:3177 i_callback+0x3f/0x70 fs/inode.c:223 rcu_do_batch kernel/rcu/tree.c:2559 [inline] rcu_core+0x722/0x1280 kernel/rcu/tree.c:2794 __do_softirq+0x29b/0x9f6 kernel/softirq.c:345 run_ksoftirqd kernel/softirq.c:652 [inline] run_ksoftirqd+0x2d/0x60 kernel/softirq.c:644 smpboot_thread_fn+0x655/0x9e0 kernel/smpboot.c:165 kthread+0x3b1/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.050 msecs