INFO: task kworker/0:2:648 blocked for more than 143 seconds.
Not tainted 6.10.0-rc4-syzkaller-00025-gb0fc24f36191 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:2 state:D
stack:18384 pid:648 tgid:648 ppid:2 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0xca6/0x3170 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
rwsem_down_write_slowpath kernel/locking/rwsem.c:1178 [inline]
__down_write_common+0x950/0x13f0 kernel/locking/rwsem.c:1306
kernfs_add_one+0xb1/0x520 fs/kernfs/dir.c:778
kernfs_create_dir_ns+0xf4/0x150 fs/kernfs/dir.c:1071
sysfs_create_dir_ns+0x13b/0x2b0 fs/sysfs/dir.c:59
create_dir lib/kobject.c:73 [inline]
kobject_add_internal+0x2c8/0x990 lib/kobject.c:240
kobject_add_varg lib/kobject.c:374 [inline]
kobject_add+0x16f/0x240 lib/kobject.c:426
device_add+0x289/0x1a70 drivers/base/core.c:3617
usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651
hub_port_connect drivers/usb/core/hub.c:5521 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
port_event drivers/usb/core/hub.c:5821 [inline]
hub_event+0x2e66/0x4f50 drivers/usb/core/hub.c:5903
process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231
process_scheduled_works kernel/workqueue.c:3312 [inline]
worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
INFO: task udevd:4802 blocked for more than 144 seconds.
Not tainted 6.10.0-rc4-syzkaller-00025-gb0fc24f36191 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd state:D
stack:25280 pid:4802 tgid:4802 ppid:2401 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0xca6/0x3170 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
device_lock include/linux/device.h:1009 [inline]
uevent_show+0x188/0x3b0 drivers/base/core.c:2743
dev_attr_show+0x53/0xe0 drivers/base/core.c:2437
sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
seq_read_iter+0x4fa/0x12c0 fs/seq_file.c:230
kernfs_fop_read_iter+0x41a/0x590 fs/kernfs/file.c:279
new_sync_read fs/read_write.c:395 [inline]
vfs_read+0x869/0xbd0 fs/read_write.c:476
ksys_read+0x12f/0x260 fs/read_write.c:619
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa080959b6a
RSP: 002b:00007ffdb15e24a8 EFLAGS: 00000246
ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055a693123170 RCX: 00007fa080959b6a
RDX: 0000000000001000 RSI: 000055a69310a930 RDI: 0000000000000008
RBP: 000055a693123170 R08: 0000000000000008 R09: 0000000000000000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffdb15e2988 R15: 000000000000000a
Showing all locks held in the system:
9 locks held by kworker/1:0/24:
1 lock held by khungtaskd/30:
#0:
ffffffff886b4660
(
rcu_read_lock
){....}-{1:2}
, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:781 [inline]
, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6614
3 locks held by kworker/1:1/42:
5 locks held by kworker/0:2/648:
#0:
ffff8881052ccd48
((wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
#1: ffffc9000195fd80
((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
#2: ffff888109710190 (&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: hub_event+0x1be/0x4f50 drivers/usb/core/hub.c:5849
#3:
ffff8881056db278
(
&(&priv->bus_notifier)->rwsem
){++++}-{3:3}
, at: blocking_notifier_call_chain kernel/notifier.c:387 [inline]
, at: blocking_notifier_call_chain+0x53/0xa0 kernel/notifier.c:376
#4: ffff888100aae948
(
&root->kernfs_rwsem){++++}-{3:3}
, at: kernfs_add_one+0xb1/0x520 fs/kernfs/dir.c:778
2 locks held by getty/2459:
#0: ffff888106fdf0a0
(&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1:
ffffc900000432f0
(&ldata->atomic_read_lock
){+.+.}-{3:3}
, at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2211
1 lock held by syz-executor.1/2523:
6 locks held by syz-executor.0/2525:
1 lock held by syz-executor.3/2526:
1 lock held by syz-executor.4/2527:
1 lock held by syz-executor.2/2533:
#0:
ffffffff886bfdf8
(rcu_state.exp_mutex
){+.+.}-{3:3}
, at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:323
1 lock held by udevd/4786:
#0: ffff888100aae948
(
&root->kernfs_rwsem
){++++}-{3:3}
, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159
4 locks held by udevd/4802:
#0:
ffff88811bff6c30
(&p->lock
){+.+.}-{3:3}
, at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182
#1: ffff88811c60b488
(
&of->mutex
#2){+.+.}-{3:3}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
#2:
ffff8881152e5d28
(kn->active
#3){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
#3:
ffff88811ac85190
(&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2743
6 locks held by kworker/1:4/4806:
#0: ffff8881052ccd48
(
(wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
#1:
ffffc9000a9dfd80
(
(work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
#2:
ffff8881093f6190
(
&dev->mutex){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: hub_event+0x1be/0x4f50 drivers/usb/core/hub.c:5849
#3: ffff88811ac85190
(
&dev->mutex){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: __device_attach+0x7f/0x4b0 drivers/base/dd.c:1003
#4: ffff888118e41160
(
&dev->mutex){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: __device_attach+0x7f/0x4b0 drivers/base/dd.c:1003
#5:
ffff888100aae948
(&root->kernfs_rwsem
){++++}-{3:3}
, at: kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689
6 locks held by kworker/1:5/4822:
1 lock held by udevd/4837:
#0: ffff888100aae948
(
&root->kernfs_rwsem
){++++}-{3:3}
, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159
1 lock held by syz-executor.2/9779:
#0:
ffff888100aae948
(&root->kernfs_rwsem
){++++}-{3:3}
, at: kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc4-syzkaller-00025-gb0fc24f36191 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114
nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xf86/0x1240 kernel/hung_task.c:379
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 0 to CPUs 1:
imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored
NMI backtrace for cpu 1
CPU: 1 PID: 2525 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00025-gb0fc24f36191 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:io_serial_out+0x8f/0xb0 drivers/tty/serial/8250/8250_port.c:413
Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d c3 cc cc cc cc e8 d1 f9 0a ff eb a0 e8 5a fa 0a
RSP: 0018:ffffc900001b85c0 EFLAGS: 00000002
RAX: 0000000000000020 RBX: 00000000000003f8 RCX: 0000000000000000
RDX: 00000000000003f8 RSI: ffffffff829aa585 RDI: ffffffff8d721c60
RBP: ffffffff8d721c20 R08: 0000000000000001 R09: 000000000000001f
R10: 0000000000000000 R11: 0000000000000006 R12: 0000000000000000
R13: 0000000000000020 R14: ffffffff829aa520 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa2c4794070 CR3: 00000001368a8000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
serial_out drivers/tty/serial/8250/8250.h:122 [inline]
serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3322 [inline]
serial8250_console_write+0xce7/0x1090 drivers/tty/serial/8250/8250_port.c:3393
console_emit_next_record kernel/printk/printk.c:2928 [inline]
console_flush_all+0x53c/0xd70 kernel/printk/printk.c:2994
console_unlock+0xae/0x290 kernel/printk/printk.c:3063
vprintk_emit kernel/printk/printk.c:2345 [inline]
vprintk_emit+0x11a/0x5a0 kernel/printk/printk.c:2300
dev_vprintk_emit drivers/base/core.c:4909 [inline]
dev_printk_emit+0xfb/0x140 drivers/base/core.c:4920
__dev_printk+0xf5/0x270 drivers/base/core.c:4932
_dev_warn+0xe5/0x120 drivers/base/core.c:4976
usb_rx_callback_intf0+0x11c/0x1a0 drivers/media/rc/imon.c:1771
__usb_hcd_giveback_urb+0x466/0x6e0 drivers/usb/core/hcd.c:1650
usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1734
dummy_timer+0x17f6/0x3900 drivers/usb/gadget/udc/dummy_hcd.c:1987
__run_hrtimer kernel/time/hrtimer.c:1687 [inline]
__hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1751
hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1813
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
__sysvec_apic_timer_interrupt+0x10f/0x450 arch/x86/kernel/apic/apic.c:1049
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0x8b/0xb0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:200
Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 04 82 b0 7e 65 8b 05 05 82 b0 7e a9 00 01
RSP: 0018:ffffc9000155f670 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffffea00048c8640 RCX: ffffffff81998be5
RDX: ffff888113ccba00 RSI: 0000000000000000 RDI: 0000000000000001
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000003 R12: ffffea00048c8640
R13: 0000000000000000 R14: ffff8881360b27e0 R15: ffffea00048c8640
__folio_remove_rmap mm/rmap.c:1507 [inline]
folio_remove_rmap_ptes+0xc3/0x3e0 mm/rmap.c:1595
zap_present_folio_ptes mm/memory.c:1505 [inline]
zap_present_ptes mm/memory.c:1570 [inline]
zap_pte_range mm/memory.c:1612 [inline]
zap_pmd_range mm/memory.c:1730 [inline]
zap_pud_range mm/memory.c:1759 [inline]
zap_p4d_range mm/memory.c:1780 [inline]
unmap_page_range+0x1298/0x35a0 mm/memory.c:1801
unmap_single_vma+0x194/0x2b0 mm/memory.c:1847
unmap_vmas+0x22f/0x490 mm/memory.c:1891
exit_mmap+0x1b8/0xb20 mm/mmap.c:3341
__mmput kernel/fork.c:1346 [inline]
mmput+0xdb/0x420 kernel/fork.c:1368
exit_mm kernel/exit.c:565 [inline]
do_exit+0x9b7/0x2b20 kernel/exit.c:861
do_group_exit+0xd3/0x2a0 kernel/exit.c:1023
get_signal+0x2618/0x2710 kernel/signal.c:2909
arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:310
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0x141/0x250 kernel/entry/common.c:218
do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3560145981
Code: Unable to access opcode bytes at 0x7f3560145957.
RSP: 002b:00007ffdc2a440b0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
RAX: fffffffffffffffe RBX: 00000000000002c1 RCX: 00007f3560145981
RDX: 0000000000090800 RSI: 00007f35601a276a RDI: 00000000ffffff9c
RBP: 00007ffdc2a4416c R08: 000000000001e00c R09: 00007f3560253080
R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000
R13: 00000000000a2106 R14: 00000000000a2106 R15: 0000000000000000