INFO: task kworker/1:0:13020 blocked for more than 143 seconds. Not tainted 6.12.0-rc6-syzkaller-00153-g237d4e0f4113 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:0 state:D stack:23120 pid:13020 tgid:13020 ppid:2 flags:0x00004000 Workqueue: events console_callback Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x1042/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_timeout+0x258/0x2a0 kernel/time/timer.c:2591 ___down_common+0x2d7/0x460 kernel/locking/semaphore.c:225 __down_common kernel/locking/semaphore.c:246 [inline] __down+0x20/0x30 kernel/locking/semaphore.c:254 down+0x74/0xa0 kernel/locking/semaphore.c:63 console_lock+0x5b/0xa0 kernel/printk/printk.c:2808 console_callback+0x63/0x4c0 drivers/tty/vt/vt.c:3120 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 7 locks held by kworker/0:0/8: 1 lock held by khungtaskd/30: #0: ffffffff88ebb140 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #0: ffffffff88ebb140 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff88ebb140 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6720 5 locks held by kworker/1:2/824: #0: ffff8881062cb548 ( (wq_completion)usb_hub_wq ){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204 #1: ffffc9000199fd80 ((work_completion)(&hub->events) ){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffff88810af78190 (&dev->mutex){....}-{3:3} , at: device_lock include/linux/device.h:1014 [inline] , at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849 #3: ffff88811bfb7190 ( &dev->mutex ){....}-{3:3} , at: device_lock include/linux/device.h:1014 [inline] , at: __device_attach+0x7f/0x4b0 drivers/base/dd.c:1005 #4: ffff88810a34cf68 (hcd->bandwidth_mutex){+.+.}-{3:3} , at: usb_set_configuration+0x5fd/0x1c50 drivers/usb/core/message.c:2077 4 locks held by acpid/2846: #0: ffff88810c3f5118 (&evdev->mutex){+.+.}-{3:3} , at: evdev_open_device drivers/input/evdev.c:384 [inline] , at: evdev_open+0x2ee/0x690 drivers/input/evdev.c:478 #1: ffff88811e4e92c0 (&dev->mutex #2 ){+.+.}-{3:3} , at: raw_spin_rq_lock_nested kernel/sched/core.c:598 [inline] , at: raw_spin_rq_lock kernel/sched/sched.h:1505 [inline] , at: rq_lock kernel/sched/sched.h:1804 [inline] , at: __schedule+0x293/0x34b0 kernel/sched/core.c:6589 #2: ffff8881016b2710 ( &p->pi_lock){-.-.}-{2:2}, at: class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline] &p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x9c/0x1170 kernel/sched/core.c:4165 #3: ffff8881f583d6d8 (&rq->__lock){-.-.}-{2:2} , at: raw_spin_rq_lock_nested kernel/sched/core.c:598 [inline] , at: raw_spin_rq_lock kernel/sched/sched.h:1505 [inline] , at: rq_lock kernel/sched/sched.h:1804 [inline] , at: ttwu_queue kernel/sched/core.c:3951 [inline] , at: try_to_wake_up+0x50b/0x1170 kernel/sched/core.c:4281 2 locks held by getty/2921: #0: ffff88810aac30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900000432f0 (&ldata->atomic_read_lock ){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211 4 locks held by udevd/5246: #0: ffff888112de6c30 (&p->lock){+.+.}-{3:3} , at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182 #1: ffff888136b90088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154 #2: ffff88811981db48 (kn->active#3){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155 #3: ffff88813a85f190 (&dev->mutex ){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] ){....}-{3:3}, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2736 4 locks held by udevd/5247: #0: ffff88811dd51c30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182 #1: ffff88811e3f6888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154 #2: ffff888130e23008 (kn->active#3){++++}-{0:0} , at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155 #3: ffff88811bfb7190 ( &dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] &dev->mutex){....}-{3:3}, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2736 5 locks held by kworker/0:6/5357: #0: ffff8881062cb548 ((wq_completion)usb_hub_wq ){+.+.}-{0:0} , at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204 #1: ffffc900021ffd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffff88810ab55190 (&dev->mutex){....}-{3:3} , at: device_lock include/linux/device.h:1014 [inline] , at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849 #3: ffff88813a85b190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 drivers/base/dd.c:1005 #4: ffff88810a340468 (hcd->bandwidth_mutex){+.+.}-{3:3}, at: usb_set_configuration+0x5fd/0x1c50 drivers/usb/core/message.c:2077 4 locks held by udevd/5425: #0: ffff88811dd51d58 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182 #1: ffff888120dbc488 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154 #2: ffff88811868e1e8 (kn->active#3){++++}-{0:0} , at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155 #3: ffff88813a85b190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] ffff88813a85b190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2736 6 locks held by kworker/1:7/5801: 2 locks held by kworker/0:9/6788: 2 locks held by kworker/1:0/13020: #0: ffff888100080948 ( (wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204 #1: ffffc90005027d80 (console_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 2 locks held by kworker/u8:2/13237: #0: ffff888100089148 ((wq_completion)events_unbound ){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204 #1: ffffc90005277d80 ((work_completion)(&sub_info->work) ){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00153-g237d4e0f4113 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xf0c/0x1240 kernel/hung_task.c:379 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 15359 Comm: syz.3.2972 Not tainted 6.12.0-rc6-syzkaller-00153-g237d4e0f4113 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x70 kernel/kcov.c:217 Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 e4 d0 ad 7e 65 8b 05 e5 d0 ad 7e 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 RSP: 0018:ffffc90015b474f0 EFLAGS: 00000046 RAX: 0000000080000002 RBX: 0000000000000002 RCX: ffffffff81370966 RDX: ffff888112c91d40 RSI: 000000000003c356 RDI: 0000000000000006 RBP: ffffc90015b47660 R08: 0000000000000006 R09: 000000000003c356 R10: 000000000003c356 R11: 0000000000e04130 R12: 1ffff92002b68e9f R13: 000000000003c356 R14: dffffc0000000000 R15: 000000000003c356 FS: 00007f45a0b216c0(0000) GS:ffff8881f5800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020001700 CR3: 000000011bb66000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: desc_read_finalized_seq+0xe4/0x1d0 kernel/printk/printk_ringbuffer.c:1893 prb_read kernel/printk/printk_ringbuffer.c:1942 [inline] _prb_read_valid+0x49f/0x7e0 kernel/printk/printk_ringbuffer.c:2113 prb_read_valid+0x79/0xb0 kernel/printk/printk_ringbuffer.c:2182 printk_get_next_message+0x158/0x670 kernel/printk/printk.c:2963 console_emit_next_record kernel/printk/printk.c:3046 [inline] console_flush_all+0x6ec/0xc60 kernel/printk/printk.c:3180 __console_flush_and_unlock kernel/printk/printk.c:3239 [inline] console_unlock+0xd9/0x210 kernel/printk/printk.c:3279 vprintk_emit+0x424/0x6f0 kernel/printk/printk.c:2407 dev_vprintk_emit drivers/base/core.c:4942 [inline] dev_printk_emit+0xfb/0x140 drivers/base/core.c:4953 __dev_printk+0xf5/0x270 drivers/base/core.c:4965 _dev_err+0xe5/0x120 drivers/base/core.c:5008 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:599 [inline] raw_ioctl+0x1dd7/0x2b90 drivers/usb/gadget/legacy/raw_gadget.c:1306 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __x64_sys_ioctl+0x18f/0x220 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f45a24ae41b Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 RSP: 002b:00007f45a0b1ef10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f45a24ae41b RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 RBP: 00007f45a0b1ffe0 R08: 0000000000000000 R09: 00332e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f45a0b1efb0 R14: 00000000200007c0 R15: 00007f45a27913f0