INFO: task kworker/1:2:16615 blocked for more than 143 seconds. Not tainted 5.4.0-rc3+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/1:2 D23184 16615 2 0x80004000 Workqueue: usb_hub_wq hub_event Call Trace: schedule+0xca/0x250 kernel/sched/core.c:4136 schedule_preempt_disabled+0xc/0x20 kernel/sched/core.c:4195 __mutex_lock_common kernel/locking/mutex.c:1033 [inline] __mutex_lock+0x881/0x1360 kernel/locking/mutex.c:1103 input_disconnect_device drivers/input/input.c:732 [inline] __input_unregister_device+0x23/0x430 drivers/input/input.c:2081 input_unregister_device+0xb4/0xf0 drivers/input/input.c:2268 iforce_usb_disconnect+0x5e/0xf0 drivers/input/joystick/iforce/iforce-usb.c:261 usb_unbind_interface+0x1bd/0x8a0 drivers/usb/core/driver.c:423 __device_release_driver drivers/base/dd.c:1134 [inline] device_release_driver_internal+0x42f/0x500 drivers/base/dd.c:1165 bus_remove_device+0x2dc/0x4a0 drivers/base/bus.c:532 device_del+0x420/0xb20 drivers/base/core.c:2375 usb_disable_device+0x211/0x690 drivers/usb/core/message.c:1237 usb_disconnect+0x284/0x8d0 drivers/usb/core/hub.c:2199 hub_port_connect drivers/usb/core/hub.c:5034 [inline] hub_port_connect_change drivers/usb/core/hub.c:5323 [inline] port_event drivers/usb/core/hub.c:5469 [inline] hub_event+0x16ca/0x37e0 drivers/usb/core/hub.c:5551 process_one_work+0x92b/0x1530 kernel/workqueue.c:2269 worker_thread+0x96/0xe20 kernel/workqueue.c:2415 kthread+0x318/0x420 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Showing all locks held in the system: 5 locks held by kworker/1:0/17: #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:226 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:620 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:647 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x827/0x1530 kernel/workqueue.c:2240 #1: ffff8881da267dd0 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x85b/0x1530 kernel/workqueue.c:2244 #2: ffff8881d50ec200 (&dev->mutex){....}, at: device_lock include/linux/device.h:1462 [inline] #2: ffff8881d50ec200 (&dev->mutex){....}, at: hub_event+0x18a/0x37e0 drivers/usb/core/hub.c:5497 #3: ffff8881d1cbe200 (&dev->mutex){....}, at: device_lock include/linux/device.h:1462 [inline] #3: ffff8881d1cbe200 (&dev->mutex){....}, at: __device_attach+0x7b/0x360 drivers/base/dd.c:871 #4: ffff8881d5148190 (&dev->mutex){....}, at: device_lock include/linux/device.h:1462 [inline] #4: ffff8881d5148190 (&dev->mutex){....}, at: __device_attach+0x7b/0x360 drivers/base/dd.c:871 5 locks held by kworker/1:1/22: 1 lock held by khungtaskd/23: #0: ffffffff86cfe4a0 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:5335 1 lock held by rsyslogd/1606: #0: ffff8881d3b29c60 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 fs/file.c:801 2 locks held by getty/1697: #0: ffff8881d1f33090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffffc900004852e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156 2 locks held by getty/1698: #0: ffff8881d1f32090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffffc900004812e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156 2 locks held by getty/1699: #0: ffff8881d1c4e090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffffc900004712e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156 2 locks held by getty/1700: #0: ffff8881d1d13090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffffc900004952e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156 2 locks held by getty/1701: #0: ffff8881d1f31090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffffc9000047d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156 2 locks held by getty/1702: #0: ffff8881d21cf090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffffc900004652e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 drivers/tty/n_tty.c:2156 5 locks held by kworker/1:4/2760: 3 locks held by kworker/0:5/2798: #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:226 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:620 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:647 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x827/0x1530 kernel/workqueue.c:2240 #1: ffff8881d279fdd0 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x85b/0x1530 kernel/workqueue.c:2244 #2: ffff8881d510b270 (&(&dev->power.lock)->rlock){-.-.}, at: spin_lock_irq include/linux/spinlock.h:363 [inline] #2: ffff8881d510b270 (&(&dev->power.lock)->rlock){-.-.}, at: __rpm_callback+0x188/0x3c0 drivers/base/power/runtime.c:380 5 locks held by kworker/1:6/3101: 6 locks held by kworker/1:2/16615: #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:226 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:620 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:647 [inline] #0: ffff8881d8f06128 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x827/0x1530 kernel/workqueue.c:2240 #1: ffff8881cb86fdd0 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x85b/0x1530 kernel/workqueue.c:2244 #2: ffff8881d513a200 (&dev->mutex){....}, at: device_lock include/linux/device.h:1462 [inline] #2: ffff8881d513a200 (&dev->mutex){....}, at: hub_event+0x18a/0x37e0 drivers/usb/core/hub.c:5497 #3: ffff8881d5323200 (&dev->mutex){....}, at: device_lock include/linux/device.h:1462 [inline] #3: ffff8881d5323200 (&dev->mutex){....}, at: usb_disconnect+0x91/0x8d0 drivers/usb/core/hub.c:2190 #4: ffff8881c103a190 (&dev->mutex){....}, at: device_release_driver_internal+0x23/0x500 drivers/base/dd.c:1162 #5: ffff8881d8dc12a8 (&dev->mutex#2){+.+.}, at: input_disconnect_device drivers/input/input.c:732 [inline] #5: ffff8881d8dc12a8 (&dev->mutex#2){+.+.}, at: __input_unregister_device+0x23/0x430 drivers/input/input.c:2081 2 locks held by getty/19926: #0: ffff8881d259f090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: ffff8881d259f118 (&tty->atomic_write_lock){+.+.}, at: tty_write_lock+0x1e/0x80 drivers/tty/tty_io.c:887 2 locks held by syz-executor.1/10322: #0: ffff8881d8de6148 (&evdev->mutex){+.+.}, at: evdev_close_device drivers/input/evdev.c:425 [inline] #0: ffff8881d8de6148 (&evdev->mutex){+.+.}, at: evdev_release+0xeb/0x1c0 drivers/input/evdev.c:466 #1: ffff8881d8dc12a8 (&dev->mutex#2){+.+.}, at: input_close_device+0x42/0x1a0 drivers/input/input.c:673 3 locks held by udevd/10991: #0: ffff8881db231e58 (&rq->lock){-.-.}, at: rq_lock kernel/sched/sched.h:1215 [inline] #0: ffff8881db231e58 (&rq->lock){-.-.}, at: __schedule+0x21c/0x1ca0 kernel/sched/core.c:4017 #1: ffffffff86cfe4a0 (rcu_read_lock){....}, at: trace_sched_stat_runtime include/trace/events/sched.h:435 [inline] #1: ffffffff86cfe4a0 (rcu_read_lock){....}, at: update_curr+0x281/0x810 kernel/sched/fair.c:860 #2: ffff8881d1c0c138 (&ep->lock){...-}, at: ep_poll_callback+0xc4/0xe40 fs/eventpoll.c:1216 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 23 Comm: khungtaskd Not tainted 5.4.0-rc3+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xca/0x13e lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x55/0x96 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1b0/0x1c7 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:205 [inline] watchdog+0x9a4/0xe50 kernel/hung_task.c:289 kthread+0x318/0x420 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 11609 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:91 [inline] RIP: 0010:memory_is_nonzero mm/kasan/generic.c:109 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:135 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:166 [inline] RIP: 0010:check_memory_region_inline mm/kasan/generic.c:182 [inline] RIP: 0010:check_memory_region+0x112/0x190 mm/kasan/generic.c:192 Code: 04 1c 4d 85 c0 75 2f 49 89 e9 49 29 c1 e9 6c ff ff ff 5b b8 01 00 00 00 5d 41 5c c3 4d 85 c9 74 f1 49 01 d9 eb 09 48 83 c0 01 <4c> 39 c8 74 e3 80 38 00 74 f2 eb 92 4d 39 c2 74 4b e8 18 e8 ff ff RSP: 0018:ffff8881adfd7b00 EFLAGS: 00000086 RAX: fffffbfff0f13239 RBX: fffffbfff0f13238 RCX: ffffffff8125a32d RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff878991c0 RBP: fffffbfff0f13239 R08: 0000000000000001 R09: fffffbfff0f13239 R10: fffffbfff0f13238 R11: ffffffff878991c7 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000000000 FS: 0000000001a7f940(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4774b89000 CR3: 00000001d265c000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: test_bit include/asm-generic/bitops-instrumented.h:237 [inline] cpumask_test_cpu include/linux/cpumask.h:360 [inline] trace_lock_acquire include/trace/events/lock.h:13 [inline] lock_acquire+0xdd/0x320 kernel/locking/lockdep.c:4486 seqcount_lockdep_reader_access include/linux/seqlock.h:81 [inline] read_seqcount_begin include/linux/seqlock.h:164 [inline] ktime_get kernel/time/timekeeping.c:757 [inline] ktime_get+0x6c/0x1d0 kernel/time/timekeeping.c:747 __hrtimer_start_range_ns kernel/time/hrtimer.c:1091 [inline] hrtimer_start_range_ns+0x199/0xb00 kernel/time/hrtimer.c:1130 hrtimer_start_expires include/linux/hrtimer.h:435 [inline] hrtimer_sleeper_start_expires kernel/time/hrtimer.c:1792 [inline] do_nanosleep+0x1b9/0x650 kernel/time/hrtimer.c:1868 hrtimer_nanosleep+0x249/0x4f0 kernel/time/hrtimer.c:1924 __do_sys_nanosleep kernel/time/hrtimer.c:1958 [inline] __se_sys_nanosleep kernel/time/hrtimer.c:1945 [inline] __x64_sys_nanosleep+0x19d/0x220 kernel/time/hrtimer.c:1945 do_syscall_64+0xb7/0x580 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457f21 Code: 75 14 b8 23 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 24 d3 fb ff c3 48 83 ec 08 e8 ea 46 00 00 48 89 04 24 b8 23 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 47 00 00 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007fff9dde24d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000023 RAX: ffffffffffffffda RBX: 000000000028b274 RCX: 0000000000457f21 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fff9dde24e0 RBP: 0000000000000001 R08: 00000000dbb17c24 R09: 00000000dbb17c28 R10: 00007fff9dde25d0 R11: 0000000000000293 R12: 000000000075bf20 R13: 000000000075c9a0 R14: 000000000076e088 R15: 000000000075bfd4