INFO: task kworker/1:0:24 blocked for more than 143 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:0 state:D stack:21952 pid:24 tgid:24 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580 kernfs_add_one+0xb1/0x520 fs/kernfs/dir.c:778 kernfs_create_dir_ns+0xf4/0x150 fs/kernfs/dir.c:1071 sysfs_create_dir_ns+0x13b/0x2b0 fs/sysfs/dir.c:59 create_dir lib/kobject.c:73 [inline] kobject_add_internal+0x2c8/0x990 lib/kobject.c:240 kobject_add_varg lib/kobject.c:374 [inline] kobject_add+0x16f/0x240 lib/kobject.c:426 device_add+0x289/0x1a70 drivers/base/core.c:3617 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2e66/0x4f50 drivers/usb/core/hub.c:5903 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf20 kernel/workqueue.c:3390 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task udevd:4755 blocked for more than 144 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:25536 pid:4755 tgid:4755 ppid:2366 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752 device_lock include/linux/device.h:1009 [inline] uevent_show+0x188/0x3b0 drivers/base/core.c:2743 dev_attr_show+0x53/0xe0 drivers/base/core.c:2437 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59 seq_read_iter+0x4fa/0x12c0 fs/seq_file.c:230 kernfs_fop_read_iter+0x41a/0x590 fs/kernfs/file.c:279 new_sync_read fs/read_write.c:395 [inline] vfs_read+0x869/0xbd0 fs/read_write.c:476 ksys_read+0x12f/0x260 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f084aa0ab6a RSP: 002b:00007ffc9694bee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 000055803c7b76f0 RCX: 00007f084aa0ab6a RDX: 0000000000001000 RSI: 000055803c863690 RDI: 0000000000000008 RBP: 000055803c7b76f0 R08: 0000000000000008 R09: 0000000000000000 R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000003fff R14: 00007ffc9694c3c8 R15: 000000000000000a INFO: task udevd:4758 blocked for more than 144 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:24448 pid:4758 tgid:4758 ppid:2366 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752 device_lock include/linux/device.h:1009 [inline] uevent_show+0x188/0x3b0 drivers/base/core.c:2743 dev_attr_show+0x53/0xe0 drivers/base/core.c:2437 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59 seq_read_iter+0x4fa/0x12c0 fs/seq_file.c:230 kernfs_fop_read_iter+0x41a/0x590 fs/kernfs/file.c:279 new_sync_read fs/read_write.c:395 [inline] vfs_read+0x869/0xbd0 fs/read_write.c:476 ksys_read+0x12f/0x260 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f084aa0ab6a RSP: 002b:00007ffc9694bee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 000055803c7f1150 RCX: 00007f084aa0ab6a RDX: 0000000000001000 RSI: 000055803c8647d0 RDI: 0000000000000008 RBP: 000055803c7f1150 R08: 0000000000000008 R09: 0000000000000020 R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000003fff R14: 00007ffc9694c3c8 R15: 000000000000000a Showing all locks held in the system: 5 locks held by kworker/0:0/8: 2 locks held by kworker/1:0/24: 1 lock held by khungtaskd/30: #0: ffffffff884b67a0 ( rcu_read_lock ){....}-{1:2} , at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] , at: rcu_read_lock include/linux/rcupdate.h:838 [inline] , at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6620 5 locks held by kworker/u8:2/36: #0: ffff888100aab148 ( (wq_completion)netns ){+.+.}-{0:0} , at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206 #1: ffffc90000267d80 (net_cleanup_work ){+.+.}-{0:0} , at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207 #2: ffffffff8960cc90 (pernet_ops_rwsem ){++++}-{3:3} , at: cleanup_net+0xbb/0xbf0 net/core/net_namespace.c:594 #3: ffffffff896223a8 ( rtnl_mutex ){+.+.}-{3:3} , at: cleanup_net+0x503/0xbf0 net/core/net_namespace.c:630 #4: ffffffff884c1f38 (rcu_state.exp_mutex ){+.+.}-{3:3} , at: exp_funnel_lock+0x282/0x3b0 kernel/rcu/tree_exp.h:296 5 locks held by kworker/0:2/41: 1 lock held by udevd/2366: #0: ffff888100aac148 (&root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 2 locks held by getty/2426: #0: ffff88810eb430a0 ( &tty->ldisc_sem ){++++}-{0:0} , at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900000432f0 (&ldata->atomic_read_lock ){+.+.}-{3:3} , at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2211 1 lock held by syz-executor/2466: #0: ffff888100aac148 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141 1 lock held by syz-executor/2472: #0: ffff888100aac148 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141 1 lock held by syz-executor/2474: #0: ffff888100aac148 ( &root->kernfs_rwsem){++++}-{3:3} , at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141 4 locks held by kworker/1:4/4747: 4 locks held by udevd/4755: #0: ffff888117cb4d58 ( &p->lock){+.+.}-{3:3} , at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182 #1: ffff888119156c88 ( &of->mutex #2 ){+.+.}-{3:3} , at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154 #2: ffff8881155b03c8 (kn->active #3){++++}-{0:0} , at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155 #3: ffff88811dd83190 ( &dev->mutex ){....}-{3:3} , at: device_lock include/linux/device.h:1009 [inline] , at: uevent_show+0x188/0x3b0 drivers/base/core.c:2743 4 locks held by udevd/4758: #0: ffff88811ca7de80 (&p->lock ){+.+.}-{3:3} , at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182 #1: ffff88812d27e088 ( &of->mutex #2 ){+.+.}-{3:3} , at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154 #2: ffff88810d7c5f08 (kn->active #3 ){++++}-{0:0} , at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155 #3: ffff88811b574190 ( &dev->mutex ){....}-{3:3} , at: device_lock include/linux/device.h:1009 [inline] , at: uevent_show+0x188/0x3b0 drivers/base/core.c:2743 6 locks held by kworker/0:3/4766: 3 locks held by kworker/0:4/4767: #0: ffff888100080948 ( (wq_completion)events){+.+.}-{0:0} , at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206 #1: ffffc9000239fd80 ( (work_completion)(&gadget->work)){+.+.}-{0:0} , at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207 #2: ffff888100aac148 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_find_and_get_ns+0x71/0xc0 fs/kernfs/dir.c:918 7 locks held by kworker/0:5/4834: 1 lock held by syz-executor/5167: #0: ffff888100aac148 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141 1 lock held by syz.2.838/8118: 1 lock held by syz-executor/8119: #0: ffff888100aac148 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 1 lock held by syz-executor/8120: #0: ffff888100aac148 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 1 lock held by syz-executor/8121: #0: ffff888100aac148 (&root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 1 lock held by syz-executor/8122: #0: ffff888100aac148 ( &root->kernfs_rwsem ){++++}-{3:3}, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 1 lock held by syz-executor/8123: #0: ffff888100aac148 (&root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-g933069701c1b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Call Trace: __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:119 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xf4e/0x1280 kernel/hung_task.c:379 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: yealink 2-1:36.0: urb_irq_callback - urb status -71 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.10.0-syzkaller-g933069701c1b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Workqueue: events_power_efficient gc_worker RIP: 0010:__kasan_check_read+0x8/0x20 mm/kasan/shadow.c:31 Code: 60 48 c7 c7 b0 26 fa 87 5b 5d 41 5c e9 71 a0 8b ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f6 31 d2 e9 2f f1 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f RSP: 0018:ffffc90000007480 EFLAGS: 00000046 RAX: 0000000000000000 RBX: 000000000000000d RCX: ffffffff81308c0e RDX: 1ffff110202d0c50 RSI: 0000000000000008 RDI: ffffffff8ca90ea0 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000080000 R10: 0000000000000019 R11: 0000000000000000 R12: 0000000000000002 R13: ffff888101686260 R14: 000000000000000d R15: ffff888101685700 FS: 0000000000000000(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020ff3000 CR3: 000000012607a000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] hlock_class+0x4e/0x130 kernel/locking/lockdep.c:227 check_wait_context kernel/locking/lockdep.c:4772 [inline] __lock_acquire+0x415/0x3cb0 kernel/locking/lockdep.c:5092 lock_acquire kernel/locking/lockdep.c:5759 [inline] lock_acquire+0x1b1/0x560 kernel/locking/lockdep.c:5724 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 console_lock_spinning_enable kernel/printk/printk.c:1867 [inline] console_emit_next_record kernel/printk/printk.c:2977 [inline] console_flush_all+0x4d4/0xd70 kernel/printk/printk.c:3049 console_unlock+0xae/0x290 kernel/printk/printk.c:3118 vprintk_emit kernel/printk/printk.c:2348 [inline] vprintk_emit+0x11a/0x5a0 kernel/printk/printk.c:2303 dev_vprintk_emit drivers/base/core.c:4909 [inline] dev_printk_emit+0xfb/0x140 drivers/base/core.c:4920 __dev_printk+0xf5/0x270 drivers/base/core.c:4932 _dev_err+0xe5/0x120 drivers/base/core.c:4975 urb_irq_callback+0x454/0x700 drivers/input/misc/yealink.c:418 __usb_hcd_giveback_urb+0x466/0x6e0 drivers/usb/core/hcd.c:1650 usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1734 dummy_timer+0x17c3/0x38d0 drivers/usb/gadget/udc/dummy_hcd.c:1987 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x10f/0x450 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x8b/0xb0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__seqprop_spinlock_sequence include/linux/seqlock.h:227 [inline] RIP: 0010:nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:345 [inline] RIP: 0010:gc_worker+0x2e1/0x1770 net/netfilter/nf_conntrack_core.c:1488 Code: 00 00 48 c7 c7 a8 7f 9c 89 e8 eb 63 85 fb 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 19 45 a7 fb 48 85 db 58 0f 85 3d 10 00 00 da 49 a7 fb eb 07 e8 d3 49 a7 fb f3 90 44 8b 35 8a 70 f0 03 31 RSP: 0018:ffffc9000008fbc8 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff85ac1ad1 RDX: ffff888101685700 RSI: ffffffff85ac1ae0 RDI: 0000000000000007 RBP: ffff888111000000 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000238a R13: dffffc0000000000 R14: 0000000000004713 R15: 0000000000040000 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf20 kernel/workqueue.c:3390 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244