hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 INFO: task kworker/u4:0:7 blocked for more than 140 seconds. hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 Not tainted 4.19.204-syzkaller #0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 kworker/u4:0 D26048 7 2 0x80000000 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 Workqueue: events_unbound fsnotify_mark_destroy_workfn hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 Call Trace: hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 schedule_timeout+0x92d/0xfe0 kernel/time/timer.c:1794 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common+0x29c/0x470 kernel/sched/completion.c:115 __synchronize_srcu+0x124/0x210 kernel/rcu/srcutree.c:936 fsnotify_mark_destroy_workfn+0xfd/0x340 fs/notify/mark.c:795 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 INFO: task kworker/u4:4:2927 blocked for more than 140 seconds. Not tainted 4.19.204-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/u4:4 D25056 2927 2 0x80000000 Workqueue: events_unbound fsnotify_connector_destroy_workfn Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_timeout+0x92d/0xfe0 kernel/time/timer.c:1794 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common+0x29c/0x470 kernel/sched/completion.c:115 __synchronize_srcu+0x124/0x210 kernel/rcu/srcutree.c:936 fsnotify_connector_destroy_workfn+0x49/0xa0 fs/notify/mark.c:174 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Showing all locks held in the system: hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 2 locks held by kworker/u4:0/7: hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 #0: 0000000098e8af77 ((wq_completion)"events_unbound"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 #1: 00000000551bccdb ((reaper_work).work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 1 lock held by khungtaskd/1569: hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 #0: 00000000d187fd3f (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4441 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 2 locks held by kworker/u4:4/2927: hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 #0: 0000000098e8af77 ((wq_completion)"events_unbound"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 hid-generic 0005:0101:0007.010F: unknown main item tag 0x0 hid-generic 0005:0101:0007.0110: unknown main item tag 0x0 #1: 000000006dca4de3 (connector_reaper_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 1 lock held by in:imklog/7819: 6 locks held by kworker/1:4/9189: 3 locks held by kworker/0:2/1047: ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1569 Comm: khungtaskd Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x991/0xe60 kernel/hung_task.c:287 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 9189 Comm: kworker/1:4 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events uhid_device_add_worker RIP: 0010:kernel_text_address+0x70/0xf0 kernel/extable.c:160 Code: 00 00 83 3d 65 74 e7 09 01 76 20 e8 3a 6e 12 00 84 c0 74 32 48 89 ef e8 4e ee 1a 00 84 c0 74 4f 48 83 c4 08 b8 01 00 00 00 5d 48 81 fd 00 70 37 8c 72 d7 48 81 fd c6 61 50 8c 72 e3 e8 08 6e RSP: 0018:ffff8880ba1079b8 EFLAGS: 00000092 RAX: 0000000000000001 RBX: ffffffff814dcd2b RCX: 0000000000000000 RDX: 1ffff11017420f48 RSI: ffff8880ba107860 RDI: ffffffff814dcd2b RBP: ffff8880ba107a40 R08: ffff8880ba107860 R09: ffffffff8c11bd46 R10: ffff8880ba107a57 R11: 0000000000074071 R12: ffff8880ba107a88 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88809993bbb0 FS: 0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd0b09ef000 CR3: 00000000aab67000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __kernel_text_address+0x9/0x30 kernel/extable.c:107 unwind_get_return_address arch/x86/kernel/unwind_orc.c:297 [inline] unwind_get_return_address+0x51/0x90 arch/x86/kernel/unwind_orc.c:292 __save_stack_trace+0xaf/0x190 arch/x86/kernel/stacktrace.c:45 save_stack mm/kasan/kasan.c:448 [inline] set_track mm/kasan/kasan.c:460 [inline] __kasan_slab_free+0x126/0x1f0 mm/kasan/kasan.c:521 __cache_free mm/slab.c:3503 [inline] kfree+0xcc/0x210 mm/slab.c:3822 skb_free_head net/core/skbuff.c:563 [inline] skb_release_data+0x6de/0x920 net/core/skbuff.c:583 skb_release_all net/core/skbuff.c:640 [inline] __kfree_skb net/core/skbuff.c:654 [inline] consume_skb+0x113/0x3d0 net/core/skbuff.c:714 mac80211_hwsim_tx_frame+0x133/0x210 drivers/net/wireless/mac80211_hwsim.c:1557 mac80211_hwsim_beacon_tx+0x3f8/0x680 drivers/net/wireless/mac80211_hwsim.c:1595 __iterate_interfaces+0x2e1/0x4a0 net/mac80211/util.c:614 ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 net/mac80211/util.c:650 mac80211_hwsim_beacon+0xc9/0x190 drivers/net/wireless/mac80211_hwsim.c:1615 __tasklet_hrtimer_trampoline+0x29/0xa0 kernel/softirq.c:601 tasklet_action_common.constprop.0+0x265/0x360 kernel/softirq.c:522 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:console_unlock+0xe7b/0x1110 kernel/printk/printk.c:2468 Code: ff df 48 c1 e8 03 80 3c 08 00 0f 85 66 02 00 00 48 83 3d af b5 a3 08 00 0f 84 9e 00 00 00 e8 6c c5 14 00 48 8b 7c 24 30 57 9d <0f> 1f 44 00 00 e9 9b fc ff ff e8 56 c5 14 00 0f 0b e8 4f c5 14 00 RSP: 0018:ffff88808f8e7378 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff88808f85c500 RBX: 0000000000000200 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: ffffffff814dcd24 RDI: 0000000000000293 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8446eec0 R13: 000000000000004a R14: 0000000000000000 R15: ffffffff8a6dcdd0 vprintk_emit+0x2d1/0x740 kernel/printk/printk.c:1965 dev_vprintk_emit+0x2e3/0x640 drivers/base/core.c:3263 dev_printk_emit+0xbb/0xf0 drivers/base/core.c:3274 __dev_printk+0x108/0x260 drivers/base/core.c:3286 _dev_warn+0xd8/0x110 drivers/base/core.c:3330 hid_parser_main+0x65d/0xb60 drivers/hid/hid-core.c:629 hid_open_report+0x355/0x6e0 drivers/hid/hid-core.c:1089 hid_parse include/linux/hid.h:1032 [inline] hid_generic_probe+0x4a/0x90 drivers/hid/hid-generic.c:66 hid_device_probe+0x29e/0x3d0 drivers/hid/hid-core.c:2105 really_probe+0x622/0xbd0 drivers/base/dd.c:506 driver_probe_device+0x218/0x340 drivers/base/dd.c:667 __device_attach_driver+0x29e/0x370 drivers/base/dd.c:754 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:464 __device_attach+0x226/0x470 drivers/base/dd.c:822 bus_probe_device+0x1ea/0x2a0 drivers/base/bus.c:524 device_add+0xb37/0x16d0 drivers/base/core.c:2169 hid_add_device+0x344/0x9e0 drivers/hid/hid-core.c:2257 uhid_device_add_worker+0x3a/0x150 drivers/hid/uhid.c:65 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 83 3d 65 74 e7 09 01 cmpl $0x1,0x9e77465(%rip) # 0x9e7746e 9: 76 20 jbe 0x2b b: e8 3a 6e 12 00 callq 0x126e4a 10: 84 c0 test %al,%al 12: 74 32 je 0x46 14: 48 89 ef mov %rbp,%rdi 17: e8 4e ee 1a 00 callq 0x1aee6a 1c: 84 c0 test %al,%al 1e: 74 4f je 0x6f 20: 48 83 c4 08 add $0x8,%rsp 24: b8 01 00 00 00 mov $0x1,%eax 29: 5d pop %rbp 2a: c3 retq <-- trapping instruction 2b: 48 81 fd 00 70 37 8c cmp $0xffffffff8c377000,%rbp 32: 72 d7 jb 0xb 34: 48 81 fd c6 61 50 8c cmp $0xffffffff8c5061c6,%rbp 3b: 72 e3 jb 0x20 3d: e8 .byte 0xe8 3e: 08 .byte 0x8 3f: 6e outsb %ds:(%rsi),(%dx)