INFO: task kworker/1:0:19 blocked for more than 143 seconds. Not tainted 5.11.0-next-20210226-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:0 state:D stack:27280 pid: 19 ppid: 2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:4324 [inline] __schedule+0x90c/0x21a0 kernel/sched/core.c:5075 schedule+0xcf/0x270 kernel/sched/core.c:5154 usb_kill_urb.part.0+0x19c/0x220 drivers/usb/core/urb.c:711 usb_kill_urb+0x81/0xa0 drivers/usb/core/urb.c:706 usb_start_wait_urb+0x24a/0x4c0 drivers/usb/core/message.c:64 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0x31c/0x4a0 drivers/usb/core/message.c:153 usb_get_descriptor+0xc5/0x1b0 drivers/usb/core/message.c:790 usb_get_device_descriptor+0x81/0xf0 drivers/usb/core/message.c:1065 hub_port_init+0x9e3/0x2dd0 drivers/usb/core/hub.c:4799 hub_port_connect drivers/usb/core/hub.c:5155 [inline] hub_port_connect_change drivers/usb/core/hub.c:5363 [inline] port_event drivers/usb/core/hub.c:5509 [inline] hub_event+0x2190/0x4320 drivers/usb/core/hub.c:5591 process_one_work+0x98d/0x1600 kernel/workqueue.c:2275 worker_thread+0x64c/0x1120 kernel/workqueue.c:2421 kthread+0x3b1/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Showing all locks held in the system: 5 locks held by kworker/1:0/19: #0: ffff8881414dc138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8881414dc138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] #0: ffff8881414dc138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] #0: ffff8881414dc138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:616 [inline] #0: ffff8881414dc138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline] #0: ffff8881414dc138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 kernel/workqueue.c:2246 #1: ffffc90000d97da8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 kernel/workqueue.c:2250 #2: ffff8881443e8218 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:740 [inline] #2: ffff8881443e8218 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4320 drivers/usb/core/hub.c:5537 #3: ffff8881443eb578 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3030 [inline] #3: ffff8881443eb578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5154 [inline] #3: ffff8881443eb578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5363 [inline] #3: ffff8881443eb578 (&port_dev->status_lock){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5509 [inline] #3: ffff8881443eb578 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2178/0x4320 drivers/usb/core/hub.c:5591 #4: ffff888143b61c68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_init+0x1b5/0x2dd0 drivers/usb/core/hub.c:4582 1 lock held by khungtaskd/1666: #0: ffffffff8bf741e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6327 1 lock held by in:imklog/8108: #0: ffff88801bbf00f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:961 1 lock held by systemd-journal/5019: 4 locks held by syz-executor021/20104: 4 locks held by syz-executor021/20111: 4 locks held by syz-executor021/20113: #0: ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1321 [inline] #0: ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x217/0x21a0 kernel/sched/core.c:4992 #1: ffff8880b9d1f948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x305/0x440 kernel/sched/psi.c:833 #2: ffff888015250038 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 kernel/sched/wait.c:137 #3: ffff88801cdd9bd8 (&____s->seqcount#5){....}-{0:0}, at: exit_notify kernel/exit.c:699 [inline] (&____s->seqcount#5){....}-{0:0}, at: do_exit+0x1518/0x2a60 kernel/exit.c:845 4 locks held by syz-executor021/20146: #0: ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1321 [inline] #0: ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x217/0x21a0 kernel/sched/core.c:4992 #1: ffff8880b9d1f948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x305/0x440 kernel/sched/psi.c:833 #2: ffff8880152561b8 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 kernel/sched/wait.c:137 #3: ffff88801f994958 (&____s->seqcount#5){....}-{0:0}, at: exit_notify kernel/exit.c:699 [inline] #3: ffff88801f994958 (&____s->seqcount#5){....}-{0:0}, at: do_exit+0x1518/0x2a60 kernel/exit.c:845 4 locks held by syz-executor021/20194: 4 locks held by syz-executor021/20197: #0: ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1321 [inline] ffff8880b9d35198 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x217/0x21a0 kernel/sched/core.c:4992 #1: ffff8880b9d1f948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x305/0x440 kernel/sched/psi.c:833 #2: ffff888015255b38 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 kernel/sched/wait.c:137 #3: ffff8880153428d8 (&____s->seqcount#5){....}-{0:0}, at: exit_notify kernel/exit.c:699 [inline] #3: ffff8880153428d8 (&____s->seqcount#5){....}-{0:0}, at: do_exit+0x1518/0x2a60 kernel/exit.c:845 4 locks held by syz-executor021/20237: ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1666 Comm: khungtaskd Not tainted 5.11.0-next-20210226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0xfa/0x151 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x44/0xd7 lib/nmi_backtrace.c:105 nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:147 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:253 [inline] watchdog+0xd8e/0xf40 kernel/hung_task.c:338 kthread+0x3b1/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 8387 Comm: syz-executor021 Not tainted 5.11.0-next-20210226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__timerqueue_less lib/timerqueue.c:22 [inline] RIP: 0010:rb_add_cached include/linux/rbtree.h:201 [inline] RIP: 0010:timerqueue_add+0xf8/0x330 lib/timerqueue.c:40 Code: 80 3c 22 00 0f 85 c4 01 00 00 49 8b 17 48 85 d2 74 40 48 89 d3 e8 88 b7 94 fd 48 8d 7b 18 48 89 f8 48 c1 e8 03 42 80 3c 20 00 <0f> 85 ab 01 00 00 4c 8b 7b 18 4c 89 ef 4c 89 fe e8 73 bd 94 fd 4d RSP: 0018:ffffc90001bffb78 EFLAGS: 00000046 RAX: 1ffff920016f9fc0 RBX: ffffc9000b7cfde8 RCX: 0000000000000000 RDX: ffff888020b38000 RSI: ffffffff83deaa48 RDI: ffffc9000b7cfe00 RBP: ffffc90001bffda0 R08: ffffc90001bffda0 R09: 0000000000000000 R10: ffffffff83dea9a4 R11: 0000000000000000 R12: dffffc0000000000 R13: 0000012ab75c05de R14: 0000000000000001 R15: 0000000000000000 FS: 0000000001f99300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9c40343000 CR3: 0000000011557000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: enqueue_hrtimer+0x176/0x3e0 kernel/time/hrtimer.c:977 __hrtimer_start_range_ns kernel/time/hrtimer.c:1108 [inline] hrtimer_start_range_ns+0x576/0x870 kernel/time/hrtimer.c:1138 hrtimer_start_expires include/linux/hrtimer.h:436 [inline] hrtimer_sleeper_start_expires kernel/time/hrtimer.c:1805 [inline] do_nanosleep+0x202/0x6a0 kernel/time/hrtimer.c:1881 hrtimer_nanosleep+0x1f9/0x430 kernel/time/hrtimer.c:1937 common_nsleep+0xa2/0xc0 kernel/time/posix-timers.c:1227 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1267 [inline] __se_sys_clock_nanosleep kernel/time/posix-timers.c:1245 [inline] __x64_sys_clock_nanosleep+0x2f4/0x430 kernel/time/posix-timers.c:1245 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x46fe6a Code: 83 ff 03 74 3b 48 83 ec 28 b8 fa ff ff ff 83 ff 02 49 89 ca 0f 44 f8 64 8b 04 25 18 00 00 00 85 c0 75 2d b8 e6 00 00 00 0f 05 <89> c2 f7 da 3d 00 f0 ff ff b8 00 00 00 00 0f 47 c2 48 83 c4 28 c3 RSP: 002b:00007ffe5f096640 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 000000000046fe6a RDX: 00007ffe5f096680 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000004f1a R08: 0000000000000000 R09: 00007ffe5f1d4090 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000139326 R13: 00007ffe5f0966d4 R14: 00007ffe5f096720 R15: 00007ffe5f096710