INFO: task syz-executor.2:19251 blocked for more than 143 seconds.
Not tainted 6.8.0-rc4-next-20240214-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2 state:D stack:27128 pid:19251 tgid:19248 ppid:19010 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5400 [inline]
__schedule+0x17df/0x4a40 kernel/sched/core.c:6727
__schedule_loop kernel/sched/core.c:6804 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6819
schedule_timeout+0xb0/0x310 kernel/time/timer.c:2159
do_wait_for_common kernel/sched/completion.c:95 [inline]
__wait_for_common kernel/sched/completion.c:116 [inline]
wait_for_common kernel/sched/completion.c:127 [inline]
wait_for_completion+0x355/0x620 kernel/sched/completion.c:148
__flush_work+0xa7b/0xc90 kernel/workqueue.c:4018
__cancel_work_timer+0x51e/0x6b0 kernel/workqueue.c:4105
uhid_dev_destroy+0x8b/0x120 drivers/hid/uhid.c:584
uhid_char_write+0x761/0xb50 drivers/hid/uhid.c:761
vfs_write+0x2a4/0xcb0 fs/read_write.c:588
ksys_write+0x1a0/0x2c0 fs/read_write.c:643
do_syscall_64+0xfb/0x240
entry_SYSCALL_64_after_hwframe+0x6d/0x75
RIP: 0033:0x7f9875e7dda9
RSP: 002b:00007f9876b3a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f9875fabf80 RCX: 00007f9875e7dda9
RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003
RBP: 00007f9875eca47a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f9875fabf80 R15: 00007ffe4bd71398
INFO: task syz-executor.0:19299 blocked for more than 144 seconds.
Not tainted 6.8.0-rc4-next-20240214-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:25112 pid:19299 tgid:19299 ppid:19104 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5400 [inline]
__schedule+0x17df/0x4a40 kernel/sched/core.c:6727
__schedule_loop kernel/sched/core.c:6804 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6819
schedule_timeout+0xb0/0x310 kernel/time/timer.c:2159
do_wait_for_common kernel/sched/completion.c:95 [inline]
__wait_for_common kernel/sched/completion.c:116 [inline]
wait_for_common kernel/sched/completion.c:127 [inline]
wait_for_completion+0x355/0x620 kernel/sched/completion.c:148
__flush_work+0xa7b/0xc90 kernel/workqueue.c:4018
__cancel_work_timer+0x51e/0x6b0 kernel/workqueue.c:4105
uhid_dev_destroy drivers/hid/uhid.c:584 [inline]
uhid_char_release+0xaf/0x600 drivers/hid/uhid.c:662
__fput+0x429/0x8a0 fs/file_table.c:411
__do_sys_close fs/open.c:1557 [inline]
__se_sys_close fs/open.c:1542 [inline]
__x64_sys_close+0x7f/0x110 fs/open.c:1542
do_syscall_64+0xfb/0x240
entry_SYSCALL_64_after_hwframe+0x6d/0x75
RIP: 0033:0x7f1396e7cc9a
RSP: 002b:00007ffdf8ef9e90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f1396e7cc9a
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000032 R08: 0000001b2cb20000 R09: 0000000000000005
R10: 000000008135f728 R11: 0000000000000293 R12: 00007f1396a00448
R13: ffffffffffffffff R14: 00007f1396a00000 R15: 000000000024064d
Showing all locks held in the system:
3 locks held by kworker/0:0/7:
#0: ffff888014c7c948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3121 [inline]
#0: ffff888014c7c948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8e1/0x1730 kernel/workqueue.c:3226
#1: ffffc900000c7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3121 [inline]
#1: ffffc900000c7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x8e1/0x1730 kernel/workqueue.c:3226
#2: ffffffff8f387548 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:281
4 locks held by kworker/u8:0/10:
1 lock held by khungtaskd/29:
#0:
ffffffff8e1315a0
(rcu_read_lock
){....}-{1:2}
, at: rcu_lock_acquire include/linux/rcupdate.h:298 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:750 [inline]
, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614
3 locks held by kworker/1:1/41:
3 locks held by kworker/0:2/782:
5 locks held by kworker/0:3/929:
2 locks held by getty/4821:
#0:
ffff88802a4cf0a0
(
&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1:
ffffc90002f162f0
(
&ldata->atomic_read_lock
){+.+.}-{3:3}
, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2201
3 locks held by kworker/0:6/17534:
3 locks held by kworker/1:3/32563:
5 locks held by kworker/1:5/3753:
3 locks held by kworker/u8:5/15671:
2 locks held by kworker/u8:6/18499:
1 lock held by syz-executor.2/19251:
#0:
ffff888077498068
(
&uhid->devlock
){+.+.}-{3:3}
, at: uhid_char_write+0x78/0xb50 drivers/hid/uhid.c:731
3 locks held by kworker/1:7/19428:
1 lock held by syz-executor.2/19432:
#0: ffff888065904068 (&uhid->devlock){+.+.}-{3:3}, at: uhid_char_write+0x78/0xb50 drivers/hid/uhid.c:731
1 lock held by syz-executor.1/19577:
#0: ffff88805795c068
(
&uhid->devlock
){+.+.}-{3:3}, at: uhid_char_write+0x78/0xb50 drivers/hid/uhid.c:731
1 lock held by syz-executor.3/19726:
#0: ffff888063070068 (&uhid->devlock){+.+.}-{3:3}, at: uhid_char_write+0x78/0xb50 drivers/hid/uhid.c:731
1 lock held by syz-executor.1/19755:
#0: ffff8880523c0068 (&uhid->devlock){+.+.}-{3:3}, at: uhid_char_write+0x78/0xb50 drivers/hid/uhid.c:731
1 lock held by syz-executor.2/19805:
#0: ffffffff8f387548 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:79 [inline]
, at: rtnetlink_rcv_msg+0x82c/0x1040 net/core/rtnetlink.c:6606
1 lock held by syz-executor.3/19821:
#0:
ffffffff8f387548
(
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:79 [inline]
, at: rtnetlink_rcv_msg+0x82c/0x1040 net/core/rtnetlink.c:6606
2 locks held by dhcpcd/19823:
#0:
ffff88802ded8130
(sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1691 [inline]
(sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3202
#1:
ffffffff8e136938
(
rcu_state.exp_mutex
){+.+.}-{3:3}
, at: exp_funnel_lock kernel/rcu/tree_exp.h:323 [inline]
, at: synchronize_rcu_expedited+0x463/0x820 kernel/rcu/tree_exp.h:939
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc4-next-20240214-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114
nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xfb0/0xff0 kernel/hung_task.c:380
kthread+0x2f0/0x390 kernel/kthread.c:388
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:242
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 17534 Comm: kworker/0:6 Not tainted 6.8.0-rc4-next-20240214-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
Workqueue: events uhid_device_add_worker
RIP: 0010:io_serial_in+0x76/0xb0 drivers/tty/serial/8250/8250_port.c:410
Code: 10 fb 61 fc 89 e9 41 d3 e6 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 01 34 c5 fc 44 03 33 44 89 f2 ec <0f> b6 c0 5b 41 5e 41 5f 5d c3 cc cc cc cc 89 e9 80 e1 07 38 c1 7c
RSP: 0018:ffffc9000e286c38 EFLAGS: 00000002
RAX: 1ffffffff28fd000 RBX: ffffffff947e82c0 RCX: 0000000000000000
RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
RBP: 0000000000000000 R08: ffffffff8531e4a6 R09: 1ffff11003f7a046
R10: dffffc0000000000 R11: ffffffff8531e460 R12: dffffc0000000000
R13: 000000000000265f R14: 00000000000003fd R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555cd4ea7600 CR3: 000000000df32000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
serial_in drivers/tty/serial/8250/8250.h:117 [inline]
serial_lsr_in drivers/tty/serial/8250/8250.h:139 [inline]
wait_for_lsr drivers/tty/serial/8250/8250_port.c:2081 [inline]
serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3373 [inline]
serial8250_console_write+0x1173/0x18c0 drivers/tty/serial/8250/8250_port.c:3451
console_emit_next_record kernel/printk/printk.c:2907 [inline]
console_flush_all+0x865/0xfd0 kernel/printk/printk.c:2973
console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3042
vprintk_emit+0x5a6/0x770 kernel/printk/printk.c:2342
dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4864
dev_printk_emit+0xdd/0x120 drivers/base/core.c:4875
_dev_warn+0x122/0x170 drivers/base/core.c:4931
hid_parser_main+0x71f/0xaa0 drivers/hid/hid-core.c:632
hid_open_report+0xafa/0x14a0 drivers/hid/hid-core.c:1276
hid_parse include/linux/hid.h:1118 [inline]
hid_generic_probe+0x3d/0x90 drivers/hid/hid-generic.c:63
__hid_device_probe drivers/hid/hid-core.c:2633 [inline]
hid_device_probe+0x26e/0x4f0 drivers/hid/hid-core.c:2670
really_probe+0x29e/0xc50 drivers/base/dd.c:658
__driver_probe_device+0x1a2/0x3e0 drivers/base/dd.c:800
driver_probe_device+0x50/0x430 drivers/base/dd.c:830
__device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958
bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457
__device_attach+0x333/0x520 drivers/base/dd.c:1030
bus_probe_device+0x189/0x260 drivers/base/bus.c:532
device_add+0x8ff/0xca0 drivers/base/core.c:3639
hid_add_device+0x3b6/0x520 drivers/hid/hid-core.c:2816
uhid_device_add_worker+0x44/0xf0 drivers/hid/uhid.c:73
process_one_work kernel/workqueue.c:3146 [inline]
process_scheduled_works+0x9d7/0x1730 kernel/workqueue.c:3226
worker_thread+0x86d/0xd70 kernel/workqueue.c:3307
kthread+0x2f0/0x390 kernel/kthread.c:388
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:242