INFO: task kworker/1:4:2768 blocked for more than 143 seconds. Not tainted 5.2.0-rc1+ #10 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/1:4 D23848 2768 2 0x80004000 Workqueue: pm hcd_resume_work Call Trace: schedule+0x96/0x240 kernel/sched/core.c:3508 schedule_preempt_disabled+0xc/0x20 kernel/sched/core.c:3567 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x7fb/0x12b0 kernel/locking/mutex.c:1072 device_lock include/linux/device.h:1207 [inline] usb_remote_wakeup+0x1f/0xb0 drivers/usb/core/hub.c:3598 process_one_work+0x905/0x1570 kernel/workqueue.c:2268 worker_thread+0x96/0xe20 kernel/workqueue.c:2414 kthread+0x30b/0x410 kernel/kthread.c:254 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Showing all locks held in the system: 6 locks held by kworker/1:0/17: 1 lock held by khungtaskd/23: #0: 00000000674c481a (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:5146 6 locks held by kworker/1:2/108: #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:221 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81a/0x1570 kernel/workqueue.c:2239 #1: 00000000e3399b67 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x84e/0x1570 kernel/workqueue.c:2243 #2: 000000003f8a7231 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 000000003f8a7231 (&dev->mutex){....}, at: hub_event+0x179/0x3590 drivers/usb/core/hub.c:5378 #3: 00000000c150af06 (&port_dev->status_lock){+.+.}, at: usb_lock_port drivers/usb/core/hub.c:2994 [inline] #3: 00000000c150af06 (&port_dev->status_lock){+.+.}, at: hub_port_connect drivers/usb/core/hub.c:5020 [inline] #3: 00000000c150af06 (&port_dev->status_lock){+.+.}, at: hub_port_connect_change drivers/usb/core/hub.c:5204 [inline] #3: 00000000c150af06 (&port_dev->status_lock){+.+.}, at: port_event drivers/usb/core/hub.c:5350 [inline] #3: 00000000c150af06 (&port_dev->status_lock){+.+.}, at: hub_event+0x18e8/0x3590 drivers/usb/core/hub.c:5432 #4: 0000000053dc2c07 (hcd->address0_mutex){+.+.}, at: hub_port_init+0x1b6/0x2c00 drivers/usb/core/hub.c:4529 #5: 00000000c137c88f (ehci_cf_port_reset_rwsem){.+.+}, at: hub_port_reset+0x17a/0x1440 drivers/usb/core/hub.c:2856 1 lock held by rsyslogd/1634: #0: 000000004b6af564 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 fs/file.c:801 2 locks held by getty/1725: #0: 00000000e87d8458 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000e69a24ee (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2156 2 locks held by getty/1726: #0: 000000007b2ab011 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 000000006073a680 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2156 2 locks held by getty/1727: #0: 000000008b501125 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 000000005ba87a5d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2156 2 locks held by getty/1728: #0: 000000006bf6850e (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000e9337dfe (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2156 2 locks held by getty/1729: #0: 0000000089f8657d (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000828f571e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2156 2 locks held by getty/1730: #0: 00000000ed24f4d5 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 0000000086f27937 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2156 2 locks held by getty/1731: #0: 00000000cc704449 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000e1c7b814 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2156 3 locks held by kworker/1:4/2768: #0: 000000001b1ced45 ((wq_completion)pm){+.+.}, at: __write_once_size include/linux/compiler.h:221 [inline] #0: 000000001b1ced45 ((wq_completion)pm){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000001b1ced45 ((wq_completion)pm){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 000000001b1ced45 ((wq_completion)pm){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 000000001b1ced45 ((wq_completion)pm){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 000000001b1ced45 ((wq_completion)pm){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 000000001b1ced45 ((wq_completion)pm){+.+.}, at: process_one_work+0x81a/0x1570 kernel/workqueue.c:2239 #1: 00000000dd46a53d ((work_completion)(&hcd->wakeup_work)){+.+.}, at: process_one_work+0x84e/0x1570 kernel/workqueue.c:2243 #2: 000000002de4c532 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 000000002de4c532 (&dev->mutex){....}, at: usb_remote_wakeup+0x1f/0xb0 drivers/usb/core/hub.c:3598 5 locks held by kworker/0:5/2902: 6 locks held by kworker/1:3/5927: #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:221 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81a/0x1570 kernel/workqueue.c:2239 #1: 000000006f961ba8 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x84e/0x1570 kernel/workqueue.c:2243 #2: 00000000b7c8fa54 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 00000000b7c8fa54 (&dev->mutex){....}, at: hub_event+0x179/0x3590 drivers/usb/core/hub.c:5378 #3: 0000000056977811 (&port_dev->status_lock){+.+.}, at: usb_lock_port drivers/usb/core/hub.c:2994 [inline] #3: 0000000056977811 (&port_dev->status_lock){+.+.}, at: hub_port_connect drivers/usb/core/hub.c:5020 [inline] #3: 0000000056977811 (&port_dev->status_lock){+.+.}, at: hub_port_connect_change drivers/usb/core/hub.c:5204 [inline] #3: 0000000056977811 (&port_dev->status_lock){+.+.}, at: port_event drivers/usb/core/hub.c:5350 [inline] #3: 0000000056977811 (&port_dev->status_lock){+.+.}, at: hub_event+0x18e8/0x3590 drivers/usb/core/hub.c:5432 #4: 00000000ba5b0ad0 (hcd->address0_mutex){+.+.}, at: hub_port_init+0x1b6/0x2c00 drivers/usb/core/hub.c:4529 #5: 00000000c137c88f (ehci_cf_port_reset_rwsem){.+.+}, at: hub_port_reset+0x17a/0x1440 drivers/usb/core/hub.c:2856 6 locks held by kworker/0:0/19159: 6 locks held by kworker/0:7/24884: #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:221 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000661c067e ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81a/0x1570 kernel/workqueue.c:2239 #1: 0000000071e9580a ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x84e/0x1570 kernel/workqueue.c:2243 #2: 00000000e2e93ce8 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 00000000e2e93ce8 (&dev->mutex){....}, at: hub_event+0x179/0x3590 drivers/usb/core/hub.c:5378 #3: 00000000ff232aee (&port_dev->status_lock){+.+.}, at: usb_lock_port drivers/usb/core/hub.c:2994 [inline] #3: 00000000ff232aee (&port_dev->status_lock){+.+.}, at: hub_port_connect drivers/usb/core/hub.c:5020 [inline] #3: 00000000ff232aee (&port_dev->status_lock){+.+.}, at: hub_port_connect_change drivers/usb/core/hub.c:5204 [inline] #3: 00000000ff232aee (&port_dev->status_lock){+.+.}, at: port_event drivers/usb/core/hub.c:5350 [inline] #3: 00000000ff232aee (&port_dev->status_lock){+.+.}, at: hub_event+0x18e8/0x3590 drivers/usb/core/hub.c:5432 #4: 000000006ac55afe (hcd->address0_mutex){+.+.}, at: hub_port_init+0x1b6/0x2c00 drivers/usb/core/hub.c:4529 #5: 00000000c137c88f (ehci_cf_port_reset_rwsem){.+.+}, at: hub_port_reset+0x17a/0x1440 drivers/usb/core/hub.c:2856 2 locks held by kworker/u4:2/25277: 6 locks held by syz-executor.0/27710: ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 23 Comm: khungtaskd Not tainted 5.2.0-rc1+ #10 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xca/0x13e lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x48/0x87 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1a6/0x1bd lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline] watchdog+0x989/0xe20 kernel/hung_task.c:288 kthread+0x30b/0x410 kernel/kthread.c:254 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 1 to CPUs 0: INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.165 msecs NMI backtrace for cpu 0 CPU: 0 PID: 27736 Comm: syz-executor.2 Not tainted 5.2.0-rc1+ #10 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:match_held_lock+0x28/0x4b0 kernel/locking/lockdep.c:3853 Code: 00 00 48 b8 00 00 00 00 00 fc ff df 41 56 41 55 41 54 55 53 48 89 fb 48 83 c7 10 48 89 fa 48 83 ec 08 48 c1 ea 03 80 3c 02 00 <0f> 85 af 03 00 00 48 39 73 10 0f 84 f9 01 00 00 48 8d 7b 22 48 b8 RSP: 0018:ffff8881db209998 EFLAGS: 00000046 RAX: dffffc0000000000 RBX: ffff8881d0bb8838 RCX: 0000000000000000 RDX: 1ffff1103a177109 RSI: ffffffff86ef8220 RDI: ffff8881d0bb8848 RBP: ffff8881d0bb8000 R08: 0000000000000000 R09: ffffed103b646748 R10: ffffed103b646747 R11: ffff8881db233a3b R12: ffff8881d0bb8830 R13: ffffed103a177106 R14: ffffffff86ef8220 R15: ffff8881d0bb8838 FS: 00007f0a429b9700(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0a429b7f8c CR3: 00000001cf4eb000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __lock_is_held kernel/locking/lockdep.c:4122 [inline] lock_is_held_type+0x142/0x240 kernel/locking/lockdep.c:4340 task_css include/linux/cgroup.h:480 [inline] task_ca kernel/sched/cpuacct.c:43 [inline] cpuacct_charge+0x294/0x310 kernel/sched/cpuacct.c:349 cgroup_account_cputime include/linux/cgroup.h:764 [inline] update_curr+0x273/0x7e0 kernel/sched/fair.c:843 enqueue_entity kernel/sched/fair.c:3901 [inline] enqueue_task_fair+0x1194/0x4680 kernel/sched/fair.c:5194 enqueue_task kernel/sched/core.c:773 [inline] activate_task+0xfb/0x320 kernel/sched/core.c:794 ttwu_do_activate+0xca/0x130 kernel/sched/core.c:1736 ttwu_queue kernel/sched/core.c:1881 [inline] try_to_wake_up+0x905/0x1410 kernel/sched/core.c:2091 wake_up_worker kernel/workqueue.c:840 [inline] insert_work+0x2a0/0x390 kernel/workqueue.c:1341 __queue_work+0x4d0/0x10b0 kernel/workqueue.c:1490 call_timer_fn+0x15e/0x5e0 kernel/time/timer.c:1322 expire_timers kernel/time/timer.c:1362 [inline] __run_timers kernel/time/timer.c:1685 [inline] __run_timers kernel/time/timer.c:1653 [inline] run_timer_softirq+0x3cc/0x1410 kernel/time/timer.c:1698 __do_softirq+0x219/0x8b0 kernel/softirq.c:293 invoke_softirq kernel/softirq.c:374 [inline] irq_exit+0x17c/0x1a0 kernel/softirq.c:414 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0xe2/0x480 arch/x86/kernel/apic/apic.c:1067 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:806 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/irqflags.h:85 [inline] RIP: 0010:console_trylock_spinning kernel/printk/printk.c:1740 [inline] RIP: 0010:vprintk_emit+0x3cd/0x3e0 kernel/printk/printk.c:1984 Code: 00 83 fb ff 75 d6 e9 db fc ff ff e8 4d 01 15 00 e8 f8 26 1a 00 41 56 9d e9 b1 fd ff ff e8 3b 01 15 00 e8 e6 26 1a 00 41 56 9d 2a ff ff ff 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 RSP: 0018:ffff8881d07df758 EFLAGS: 00000216 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000007 RBX: 0000000000000200 RCX: 1ffff1103a17710b RDX: 0000000000000000 RSI: ffff8881d0bb8838 RDI: ffff8881d0bb8834 RBP: ffff8881d07df7a0 R08: ffff8881d0bb8000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000034 R13: ffff8881d9e64800 R14: 0000000000000216 R15: 0000000000000000 dev_vprintk_emit+0x4fc/0x541 drivers/base/core.c:3190 dev_printk_emit+0xba/0xf1 drivers/base/core.c:3201 __dev_printk+0x1db/0x203 drivers/base/core.c:3213 dev_printk+0xd0/0x104 drivers/base/core.c:3230 udc_bind_to_driver+0x55/0x517 drivers/usb/gadget/udc/core.c:1338 usb_gadget_probe_driver.cold+0x10/0xde drivers/usb/gadget/udc/core.c:1408 fuzzer_ioctl_run drivers/usb/gadget/fuzzer/fuzzer.c:718 [inline] fuzzer_ioctl+0x15b9/0x1d90 drivers/usb/gadget/fuzzer/fuzzer.c:1130 full_proxy_unlocked_ioctl+0x111/0x180 fs/debugfs/file.c:205 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0xcda/0x12e0 fs/ioctl.c:696 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:713 __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:718 do_syscall_64+0xb7/0x560 arch/x86/entry/common.c:301 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459137 Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f0a429b8638 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f0a429b8c10 RCX: 0000000000459137 RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 000000000000000b R10: 0000000000000075 R11: 0000000000000246 R12: 00007f0a429b96d4 R13: 00000000004be8d2 R14: 00000000004df050 R15: 00000000ffffffff dummy_hcd dummy_hcd.4: no ep configured for urb 000000009c12d312 dummy_hcd dummy_hcd.0: no ep configured for urb 000000004b4db762