INFO: task kworker/0:1:9 blocked for more than 143 seconds.
Not tainted 6.10.0-rc1-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:1 state:D
stack:24992 pid:9 tgid:9 ppid:2 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0xca6/0x3170 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
rwsem_down_write_slowpath kernel/locking/rwsem.c:1178 [inline]
__down_write_common+0x950/0x13f0 kernel/locking/rwsem.c:1306
kernfs_remove+0x71/0xa0 fs/kernfs/dir.c:1527
sysfs_remove_dir+0xc8/0x100 fs/sysfs/dir.c:101
__kobject_del+0xe2/0x1f0 lib/kobject.c:604
kobject_del lib/kobject.c:627 [inline]
kobject_del+0x3f/0x60 lib/kobject.c:619
device_del+0x64e/0x9f0 drivers/base/core.c:3930
usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2304
hub_port_connect drivers/usb/core/hub.c:5361 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
port_event drivers/usb/core/hub.c:5821 [inline]
hub_event+0x1be4/0x4f50 drivers/usb/core/hub.c:5903
process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231
process_scheduled_works kernel/workqueue.c:3312 [inline]
worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
INFO: task jbd2/sda1-8:2366 blocked for more than 144 seconds.
Not tainted 6.10.0-rc1-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jbd2/sda1-8 state:D
stack:27200 pid:2366 tgid:2366 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0xca6/0x3170 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6837
io_schedule+0xbf/0x130 kernel/sched/core.c:9043
bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:209
__wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49
out_of_line_wait_on_bit+0xda/0x110 kernel/sched/wait_bit.c:64
wait_on_bit_io include/linux/wait_bit.h:101 [inline]
__wait_on_buffer+0x64/0x70 fs/buffer.c:123
wait_on_buffer include/linux/buffer_head.h:415 [inline]
journal_wait_on_commit_record fs/jbd2/commit.c:171 [inline]
jbd2_journal_commit_transaction+0x4827/0x65d0 fs/jbd2/commit.c:887
kjournald2+0x1f8/0x8f0 fs/jbd2/journal.c:201
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Showing all locks held in the system:
6 locks held by kworker/0:1/9:
#0:
ffff888105294948
(
(wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
#1:
ffffc9000009fd80
((work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
#2:
ffff88810978c190
(
&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: hub_event+0x1be/0x4f50 drivers/usb/core/hub.c:5849
#3:
ffff88810978f510
(
&port_dev->status_lock
){+.+.}-{3:3}
, at: usb_lock_port drivers/usb/core/hub.c:3206 [inline]
, at: hub_port_connect drivers/usb/core/hub.c:5418 [inline]
, at: hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
, at: port_event drivers/usb/core/hub.c:5821 [inline]
, at: hub_event+0x28b8/0x4f50 drivers/usb/core/hub.c:5903
#4:
ffff888107356568
(hcd->address0_mutex
){+.+.}-{3:3}
, at: hub_port_connect drivers/usb/core/hub.c:5419 [inline]
, at: hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
, at: port_event drivers/usb/core/hub.c:5821 [inline]
, at: hub_event+0x28de/0x4f50 drivers/usb/core/hub.c:5903
#5: ffffffff891210f0
(
ehci_cf_port_reset_rwsem
){.+.+}-{3:3}
, at: hub_port_reset+0x1a7/0x1e60 drivers/usb/core/hub.c:3021
2 locks held by kworker/u8:0/11:
#0:
ffff888100089148
(
(wq_completion)events_unbound
){+.+.}-{0:0}
, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
#1:
ffffc900000bfd80
((work_completion)(&sub_info->work)
){+.+.}-{0:0}
, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
6 locks held by kworker/1:0/24:
1 lock held by khungtaskd/30:
#0:
ffffffff886b4620
(
rcu_read_lock
){....}-{1:2}
, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:781 [inline]
, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6614
3 locks held by kworker/u8:2/37:
#0:
ffff888100aad948
(
(wq_completion)netns
){+.+.}-{0:0}
, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
#1:
ffffc90000277d80
(
net_cleanup_work
){+.+.}-{0:0}
, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
#2:
ffffffff898302d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 net/core/net_namespace.c:594
7 locks held by kworker/1:2/48:
2 locks held by kworker/0:2/2134:
#0: ffff888100080948
(
(wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
#1: ffffc9000400fd80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
1 lock held by udevd/2403:
#0:
ffff888100aae948
(
&root->kernfs_rwsem
){++++}-{3:3}
, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159
2 locks held by getty/2461:
#0:
ffff888107ead0a0
(
&tty->ldisc_sem){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1:
ffffc900000432f0
(
&ldata->atomic_read_lock
){+.+.}-{3:3}
, at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2201
1 lock held by syz-executor.4/2526:
1 lock held by syz-executor.2/2528:
1 lock held by syz-executor.0/2529:
1 lock held by syz-executor.1/2531:
4 locks held by udevd/4788:
#0:
ffff888111ab28b8
(
&p->lock){+.+.}-{3:3}
, at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182
#1:
ffff888137d18888
(&of->mutex
#2
){+.+.}-{3:3}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
#2:
ffff88811312a5a8
(kn->active
#25
){.+.+}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
#3: ffff888104a87190
(
&dev->mutex
){....}-{3:3}
, at: device_lock_interruptible include/linux/device.h:1014 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
1 lock held by syz-executor.1/4796:
#0:
ffffffff886bfdb8
(
rcu_state.exp_mutex
){+.+.}-{3:3}
, at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:323
6 locks held by kworker/1:3/4799:
3 locks held by kworker/1:4/4806:
2 locks held by syz-executor.3/4813:
1 lock held by modprobe/4820:
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114
nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xf86/0x1240 kernel/hung_task.c:379
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 0 to CPUs 1:
yealink 5-1:36.0: urb_ctl_callback - urb status -71
NMI backtrace for cpu 1
CPU: 1 PID: 48 Comm: kworker/1:2 Not tainted 6.10.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
Workqueue: usb_hub_wq hub_event
RIP: 0010:io_serial_out+0x8f/0xb0 drivers/tty/serial/8250/8250_port.c:413
Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d c3 cc cc cc cc e8 51 05 0b ff eb a0 e8 da 05 0b
RSP: 0018:ffffc900001b85c0 EFLAGS: 00000002
RAX: 0000000000000020 RBX: 00000000000003f8 RCX: 0000000000000000
RDX: 00000000000003f8 RSI: ffffffff829a9955 RDI: ffffffff8d71fc60
RBP: ffffffff8d71fc20 R08: 0000000000000001 R09: 000000000000001f
R10: 0000000000000000 R11: 0000000000000009 R12: 0000000000000000
R13: 0000000000000020 R14: ffffffff829a98f0 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020002a80 CR3: 000000000849e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
serial_out drivers/tty/serial/8250/8250.h:122 [inline]
serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3322 [inline]
serial8250_console_write+0xce7/0x1090 drivers/tty/serial/8250/8250_port.c:3393
console_emit_next_record kernel/printk/printk.c:2928 [inline]
console_flush_all+0x53c/0xd70 kernel/printk/printk.c:2994
console_unlock+0xae/0x290 kernel/printk/printk.c:3063
vprintk_emit kernel/printk/printk.c:2345 [inline]
vprintk_emit+0x11a/0x5a0 kernel/printk/printk.c:2300
dev_vprintk_emit drivers/base/core.c:4951 [inline]
dev_printk_emit+0xfb/0x140 drivers/base/core.c:4962
__dev_printk+0xf5/0x270 drivers/base/core.c:4974
_dev_err+0xe5/0x120 drivers/base/core.c:5017
urb_ctl_callback+0x1eb/0x2f0 drivers/input/misc/yealink.c:454
__usb_hcd_giveback_urb+0x364/0x5c0 drivers/usb/core/hcd.c:1648
usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1732
dummy_timer+0x17f6/0x3900 drivers/usb/gadget/udc/dummy_hcd.c:1987
__run_hrtimer kernel/time/hrtimer.c:1687 [inline]
__hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1751
hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1813
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
__sysvec_apic_timer_interrupt+0x10f/0x450 arch/x86/kernel/apic/apic.c:1049
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0x8b/0xb0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:memset_orig+0x36/0xb0 arch/x86/lib/memset_64.S:68
Code: b8 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 70 48 89 d1 48 c1 e9 06 74 35 0f 1f 44 00 00 48 ff c9 48 89 07 <48> 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89
RSP: 0018:ffffc90000336af0 EFLAGS: 00000202
RAX: ffffffffffffffff RBX: ffffea00042df300 RCX: 0000000000000007
RDX: 0000000000000200 RSI: 00000000000000ff RDI: ffffed10216f9800
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: ffffed10216f9800 R11: 0000000000000006 R12: 000000000010b7cc
R13: 0000000000000001 R14: 0000000000000000 R15: ffff88810b7cc000
kasan_poison_pages include/linux/kasan.h:114 [inline]
free_pages_prepare mm/page_alloc.c:1110 [inline]
free_unref_page+0x2ad/0xd40 mm/page_alloc.c:2565
vfree+0x181/0x7a0 mm/vmalloc.c:3346
hid_open_report+0x66c/0x7c0 drivers/hid/hid-core.c:1300
__hid_device_probe drivers/hid/hid-core.c:2635 [inline]
hid_device_probe+0x3bf/0x490 drivers/hid/hid-core.c:2670
call_driver_probe drivers/base/dd.c:578 [inline]
really_probe+0x23e/0xa90 drivers/base/dd.c:656
__driver_probe_device+0x1de/0x440 drivers/base/dd.c:798
driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:828
__device_attach_driver+0x1df/0x310 drivers/base/dd.c:956
bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
__device_attach+0x1e8/0x4b0 drivers/base/dd.c:1028
bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
device_add+0x114b/0x1a70 drivers/base/core.c:3721
hid_add_device+0x37f/0xa70 drivers/hid/hid-core.c:2816
usbhid_probe+0xd24/0x1400 drivers/hid/usbhid/hid-core.c:1429
usb_probe_interface+0x309/0x9d0 drivers/usb/core/driver.c:399
call_driver_probe drivers/base/dd.c:578 [inline]
really_probe+0x23e/0xa90 drivers/base/dd.c:656
__driver_probe_device+0x1de/0x440 drivers/base/dd.c:798
driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:828
__device_attach_driver+0x1df/0x310 drivers/base/dd.c:956
bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
__device_attach+0x1e8/0x4b0 drivers/base/dd.c:1028
bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
device_add+0x114b/0x1a70 drivers/base/core.c:3721
usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254
usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294
call_driver_probe drivers/base/dd.c:578 [inline]
really_probe+0x23e/0xa90 drivers/base/dd.c:656
__driver_probe_device+0x1de/0x440 drivers/base/dd.c:798
driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:828
__device_attach_driver+0x1df/0x310 drivers/base/dd.c:956
bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457
__device_attach+0x1e8/0x4b0 drivers/base/dd.c:1028
bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532
device_add+0x114b/0x1a70 drivers/base/core.c:3721
usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651
hub_port_connect drivers/usb/core/hub.c:5521 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
port_event drivers/usb/core/hub.c:5821 [inline]
hub_event+0x2e66/0x4f50 drivers/usb/core/hub.c:5903
process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231
process_scheduled_works kernel/workqueue.c:3312 [inline]
worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244