INFO: task kworker/0:0:3 blocked for more than 140 seconds. Not tainted 4.14.230-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/0:0 D26784 3 2 0x80000000 IPVS: ftp: loaded support on port[0] = 21 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3384 schedule+0x8d/0x1b0 kernel/sched/core.c:3428 usb_kill_urb.part.0+0x125/0x190 drivers/usb/core/urb.c:691 usb_kill_urb+0x7c/0x90 drivers/usb/core/urb.c:686 usb_start_wait_urb+0x209/0x440 drivers/usb/core/message.c:62 usb_internal_control_msg drivers/usb/core/message.c:100 [inline] usb_control_msg+0x302/0x450 drivers/usb/core/message.c:151 usb_get_descriptor+0xc0/0x160 drivers/usb/core/message.c:652 usb_get_device_descriptor+0x71/0xd0 drivers/usb/core/message.c:924 hub_port_init+0x629/0x2970 drivers/usb/core/hub.c:4647 hub_port_connect drivers/usb/core/hub.c:4905 [inline] hub_port_connect_change drivers/usb/core/hub.c:5088 [inline] port_event drivers/usb/core/hub.c:5194 [inline] hub_event+0x18fd/0x3d70 drivers/usb/core/hub.c:5274 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Showing all locks held in the system: 5 locks held by kworker/0:0/3: #0: ("usb_hub_wq"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2087 #1: ((&hub->events)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2091 #2: (&dev->mutex){....}, at: [] device_lock include/linux/device.h:1081 [inline] #2: (&dev->mutex){....}, at: [] hub_event+0x108/0x3d70 drivers/usb/core/hub.c:5220 #3: (&port_dev->status_lock){+.+.}, at: [] usb_lock_port drivers/usb/core/hub.c:2934 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_port_connect drivers/usb/core/hub.c:4904 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_port_connect_change drivers/usb/core/hub.c:5088 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] port_event drivers/usb/core/hub.c:5194 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_event+0x18e8/0x3d70 drivers/usb/core/hub.c:5274 #4: (hcd->address0_mutex){+.+.}, at: [] hub_port_init+0x15b/0x2970 drivers/usb/core/hub.c:4429 1 lock held by khungtaskd/1533: #0: (tasklist_lock){.+.?}, at: [] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4548 3 locks held by kworker/1:3/8429: #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2087 #1: ((linkwatch_work).work){+.+.}, at: [] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2091 #2: (rtnl_mutex){+.+.}, at: [] linkwatch_event+0xa/0x50 net/core/link_watch.c:236 2 locks held by syz-executor.2/22686: #0: (&sb->s_type->i_mutex_key#13){+.+.}, at: [] inode_lock include/linux/fs.h:719 [inline] #0: (&sb->s_type->i_mutex_key#13){+.+.}, at: [] __sock_release+0x86/0x2b0 net/socket.c:601 #1: (rtnl_mutex){+.+.}, at: [] ip6mr_sk_done+0x3a/0x230 net/ipv6/ip6mr.c:1623 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1533 Comm: khungtaskd Not tainted 4.14.230-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x13a/0x180 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline] watchdog+0x5b9/0xb40 kernel/hung_task.c:274 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4627 Comm: systemd-udevd Not tainted 4.14.230-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff88809a8d0200 task.stack: ffff88809a8d8000 RIP: 0010:on_stack arch/x86/include/asm/stacktrace.h:41 [inline] RIP: 0010:unwind_next_frame+0xded/0x17d0 arch/x86/kernel/unwind_orc.c:491 RSP: 0018:ffff88809a8df7b0 EFLAGS: 00000246 RAX: dffffc0000000000 RBX: 1ffff1101351befd RCX: ffffffff8a6a617a RDX: ffff88809a8df878 RSI: ffff88809a8df760 RDI: ffff88809a8df878 RBP: ffff88809a8dfdf8 R08: 0000000000000001 R09: 0000000000000001 R10: ffff88809a8dfdf8 R11: 0000000000000001 R12: ffff88809a8df8a5 R13: ffff88809a8df8a8 R14: ffff88809a8df8c0 R15: ffff88809a8df870 FS: 00007fd2f4a738c0(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0b6fb64020 CR3: 000000009a4b2000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __save_stack_trace+0x90/0x160 arch/x86/kernel/stacktrace.c:44 save_stack mm/kasan/kasan.c:447 [inline] set_track mm/kasan/kasan.c:459 [inline] kasan_kmalloc+0xeb/0x160 mm/kasan/kasan.c:551 slab_post_alloc_hook mm/slab.h:442 [inline] slab_alloc mm/slab.c:3390 [inline] kmem_cache_alloc+0x111/0x3c0 mm/slab.c:3550 anon_vma_chain_alloc mm/rmap.c:129 [inline] anon_vma_clone+0xe0/0x5b0 mm/rmap.c:269 anon_vma_fork+0x82/0x580 mm/rmap.c:332 dup_mmap kernel/fork.c:664 [inline] dup_mm kernel/fork.c:1199 [inline] copy_mm kernel/fork.c:1254 [inline] copy_process.part.0+0x4c64/0x71c0 kernel/fork.c:1790 copy_process kernel/fork.c:1605 [inline] _do_fork+0x184/0xc80 kernel/fork.c:2091 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7fd2f38c238b RSP: 002b:00007ffe8f607890 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007ffe8f607890 RCX: 00007fd2f38c238b RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 00007ffe8f6078e0 R08: 00007fd2f4a738c0 R09: 0000000000000210 R10: 00007fd2f4a73b90 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000020 R14: 0000000000000000 R15: 0000000000000000 Code: 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 c1 07 00 00 49 8d 7f 08 49 8b 6f 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa <48> c1 ea 03 80 3c 02 00 0f 85 94 07 00 00 49 8d 7f 10 4d 8b 67