INFO: task syz-executor.1:29667 can't die for more than 143 seconds. syz-executor.1 D28128 29667 7197 0x00004004 Call Trace: schedule+0xd0/0x2a0 kernel/sched/core.c:4163 schedule_timeout+0x55b/0x850 kernel/time/timer.c:1874 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion_timeout+0x162/0x280 kernel/sched/completion.c:157 usb_start_wait_urb+0x144/0x2b0 drivers/usb/core/message.c:63 usb_bulk_msg+0x228/0x550 drivers/usb/core/message.c:254 proc_bulk+0x41a/0x780 drivers/usb/core/devio.c:1226 usbdev_do_ioctl drivers/usb/core/devio.c:2530 [inline] usbdev_ioctl+0x543/0x31e0 drivers/usb/core/devio.c:2696 vfs_ioctl fs/ioctl.c:47 [inline] ksys_ioctl+0x11a/0x180 fs/ioctl.c:763 __do_sys_ioctl fs/ioctl.c:772 [inline] __se_sys_ioctl fs/ioctl.c:770 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:770 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xb3 RIP: 0033:0x45c829 Code: Bad RIP value. RSP: 002b:00007fa572f40c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00000000004f03c0 RCX: 000000000045c829 RDX: 0000000020000240 RSI: 00000000c0185502 RDI: 0000000000000003 RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000005e2 R14: 00000000004c88c0 R15: 00007fa572f416d4 INFO: task syz-executor.1:29667 blocked for more than 143 seconds. Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D28128 29667 7197 0x00004004 Call Trace: schedule+0xd0/0x2a0 kernel/sched/core.c:4163 schedule_timeout+0x55b/0x850 kernel/time/timer.c:1874 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion_timeout+0x162/0x280 kernel/sched/completion.c:157 usb_start_wait_urb+0x144/0x2b0 drivers/usb/core/message.c:63 usb_bulk_msg+0x228/0x550 drivers/usb/core/message.c:254 proc_bulk+0x41a/0x780 drivers/usb/core/devio.c:1226 usbdev_do_ioctl drivers/usb/core/devio.c:2530 [inline] usbdev_ioctl+0x543/0x31e0 drivers/usb/core/devio.c:2696 vfs_ioctl fs/ioctl.c:47 [inline] ksys_ioctl+0x11a/0x180 fs/ioctl.c:763 __do_sys_ioctl fs/ioctl.c:772 [inline] __se_sys_ioctl fs/ioctl.c:770 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:770 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xb3 RIP: 0033:0x45c829 Code: Bad RIP value. RSP: 002b:00007fa572f40c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00000000004f03c0 RCX: 000000000045c829 RDX: 0000000020000240 RSI: 00000000c0185502 RDI: 0000000000000003 RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000005e2 R14: 00000000004c88c0 R15: 00007fa572f416d4 Showing all locks held in the system: 3 locks held by kworker/u4:0/7: #0: ffff8880ae7379d8 (&rq->lock){-.-.}-{2:2}, at: newidle_balance+0x9be/0xdb0 kernel/sched/fair.c:10512 #1: ffffffff899befc0 (rcu_read_lock){....}-{1:2}, at: __update_idle_core+0x42/0x3e0 kernel/sched/fair.c:5969 #2: ffff8880ae727598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x55/0x1a0 kernel/time/timer.c:936 1 lock held by khungtaskd/1167: #0: ffffffff899befc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:5754 1 lock held by in:imklog/6745: #0: ffff888097ee3b30 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:826 3 locks held by syz-fuzzer/7053: ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1167 Comm: khungtaskd Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x188/0x20d lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x70/0xb1 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x231/0x27e lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:147 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:249 [inline] watchdog+0xde3/0x14e0 kernel/hung_task.c:333 kthread+0x388/0x470 kernel/kthread.c:268 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 4137 Comm: systemd-journal Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0033:0x7f75b74870a1 Code: 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 83 ff 08 74 36 83 ff 09 b8 07 00 00 00 48 89 e6 0f 44 f8 e8 13 d5 f2 ff 85 c0 75 2d <48> 89 e7 e8 17 b9 f2 ff 48 8b 54 24 18 64 48 33 14 25 28 00 00 00 RSP: 002b:00007ffe2a65cd60 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 0000000000000069 RCX: 0000000000000018 RDX: 000000000002d5c6 RSI: 00007ffe2a738090 RDI: 000000000002d5c6 RBP: 0000000000000001 R08: 00007ffe2a738080 R09: 00000000000003b0 R10: 261ad1a35c2103f8 R11: 6fdc9e5bd13dd7b3 R12: 0000556e3be64e80 R13: 00007ffe2a65cec0 R14: 00007ffe2a65ceb8 R15: 0000000038915c51 FS: 00007f75b77ab8c0 GS: 0000000000000000