INFO: task udevd:2543 blocked for more than 143 seconds.
Not tainted 6.11.0-rc1-syzkaller-00033-g25f51b76f90f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd state:D
stack:24720 pid:2543 tgid:2543 ppid:1 flags:0x00000002
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0xcda/0x2f80 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086
rcu_dynticks_curr_cpu_in_eqs include/linux/context_tracking.h:122 [inline]
rcu_is_watching+0x12/0xc0 kernel/rcu/tree.c:726
INFO: task udevd:4911 blocked for more than 144 seconds.
Not tainted 6.11.0-rc1-syzkaller-00033-g25f51b76f90f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd state:D
stack:23968 pid:4911 tgid:4911 ppid:2543 flags:0x00000002
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0xcda/0x2f80 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
device_lock include/linux/device.h:1009 [inline]
uevent_show+0x188/0x3b0 drivers/base/core.c:2743
dev_attr_show+0x53/0xe0 drivers/base/core.c:2437
sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
seq_read_iter+0x4fa/0x12c0 fs/seq_file.c:230
kernfs_fop_read_iter+0x41a/0x590 fs/kernfs/file.c:279
new_sync_read fs/read_write.c:395 [inline]
vfs_read+0x869/0xbd0 fs/read_write.c:476
ksys_read+0x12f/0x260 fs/read_write.c:619
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff9a4ca2b6a
RSP: 002b:00007ffd88c0ae18 EFLAGS: 00000246
ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055907797d6f0 RCX: 00007ff9a4ca2b6a
RDX: 0000000000001000 RSI: 00005590779d3bd0 RDI: 0000000000000008
RBP: 000055907797d6f0 R08: 0000000000000008 R09: 0000000000002000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffd88c0b2f8 R15: 000000000000000a
INFO: task kworker/1:4:4934 blocked for more than 144 seconds.
Not tainted 6.11.0-rc1-syzkaller-00033-g25f51b76f90f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:4 state:D
stack:22432 pid:4934 tgid:4934 ppid:2 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0xcda/0x2f80 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178
__down_write_common kernel/locking/rwsem.c:1306 [inline]
__down_write kernel/locking/rwsem.c:1315 [inline]
down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580
kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689
sysfs_remove_file include/linux/sysfs.h:773 [inline]
device_remove_file drivers/base/core.c:3061 [inline]
device_remove_file+0x28/0x30 drivers/base/core.c:3057
usb_remove_sysfs_intf_files+0x62/0xa0 drivers/usb/core/sysfs.c:1364
usb_bus_notify+0xf7/0x110 drivers/usb/core/usb.c:1047
notifier_call_chain+0xb9/0x410 kernel/notifier.c:93
blocking_notifier_call_chain kernel/notifier.c:388 [inline]
blocking_notifier_call_chain+0x69/0xa0 kernel/notifier.c:376
bus_notify+0x56/0x70 drivers/base/bus.c:994
device_del+0x199/0x9f0 drivers/base/core.c:3841
usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2304
hub_port_connect drivers/usb/core/hub.c:5361 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
port_event drivers/usb/core/hub.c:5821 [inline]
hub_event+0x1be4/0x4f50 drivers/usb/core/hub.c:5903
process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
process_scheduled_works kernel/workqueue.c:3312 [inline]
worker_thread+0x6c8/0xf20 kernel/workqueue.c:3390
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
INFO: task udevd:5032 blocked for more than 145 seconds.
Not tainted 6.11.0-rc1-syzkaller-00033-g25f51b76f90f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd state:D
stack:26400 pid:5032 tgid:5032 ppid:2543 flags:0x00000002
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0xcda/0x2f80 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
device_lock include/linux/device.h:1009 [inline]
uevent_show+0x188/0x3b0 drivers/base/core.c:2743
dev_attr_show+0x53/0xe0 drivers/base/core.c:2437
sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
seq_read_iter+0x4fa/0x12c0 fs/seq_file.c:230
kernfs_fop_read_iter+0x41a/0x590 fs/kernfs/file.c:279
new_sync_read fs/read_write.c:395 [inline]
vfs_read+0x869/0xbd0 fs/read_write.c:476
ksys_read+0x12f/0x260 fs/read_write.c:619
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff9a4ca2b6a
RSP: 002b:00007ffd88c0ae18 EFLAGS: 00000246
ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055907797d6f0 RCX: 00007ff9a4ca2b6a
RDX: 0000000000001000 RSI: 00005590779bec20 RDI: 0000000000000008
RBP: 000055907797d6f0 R08: 0000000000000008 R09: 0000000000000010
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffd88c0b2f8 R15: 000000000000000a
Showing all locks held in the system:
5 locks held by kworker/0:1/9:
2 locks held by kworker/u8:1/28:
#0:
ffff888100089148
((wq_completion)events_unbound
){+.+.}-{0:0}
, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
#1: ffffc900001e7d80
(
connector_reaper_work
){+.+.}-{0:0}
, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
1 lock held by khungtaskd/30:
#0: ffffffff88cb68a0
(
rcu_read_lock
){....}-{1:2}
, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6620
2 locks held by kworker/u8:3/46:
#0:
ffff888100089148
((wq_completion)events_unbound
){+.+.}-{0:0}
, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
#1:
ffffc90000517d80
(
(reaper_work).work
){+.+.}-{0:0}
, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
7 locks held by kworker/0:2/800:
2 locks held by getty/2601:
#0:
ffff88810eb560a0
(
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1:
ffffc900000432f0
(&ldata->atomic_read_lock
){+.+.}-{3:3}
, at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2211
1 lock held by syz-executor/2644:
#0:
ffff888100abc148
(&root->kernfs_rwsem
){++++}-{3:3}
, at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141
1 lock held by syz-executor/2645:
#0:
ffff888100abc148
(&root->kernfs_rwsem
){++++}-{3:3}
, at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141
1 lock held by syz-executor/2648:
#0:
ffff888100abc148
(&root->kernfs_rwsem
){++++}-{3:3}
, at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141
1 lock held by syz-executor/2649:
1 lock held by syz-executor/2654:
1 lock held by udevd/4906:
4 locks held by udevd/4911:
#0:
ffff88811767e540
(&p->lock
){+.+.}-{3:3}
, at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182
#1:
ffff888119460888
(
&of->mutex
){+.+.}-{3:3}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
#2:
ffff8881157673c8
(
kn->active
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
#3: ffff888134070190
(
&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2743
1 lock held by udevd/4915:
3 locks held by kworker/1:3/4917:
3 locks held by kworker/1:4/4934:
1 lock held by udevd/4980:
#0:
ffff888100abc148
(
&root->kernfs_rwsem
){++++}-{3:3}
, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159
4 locks held by udevd/5032:
#0: ffff88811a9adc30
(
&p->lock
){+.+.}-{3:3}
, at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182
#1:
ffff88810eb91c88
(&of->mutex
){+.+.}-{3:3}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
#2:
ffff888112d56c38
(kn->active
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
#3:
ffff88811d000160
(
&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2743
3 locks held by kworker/1:5/5097:
4 locks held by udevd/5494:
#0:
ffff88811a9ad9e0
(
&p->lock
){+.+.}-{3:3}
, at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182
#1:
ffff88810eb92488
(
&of->mutex){+.+.}-{3:3}
, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
#2:
ffff888108b26698
(kn->active
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
#3: ffff888109327190
(
&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2743
1 lock held by syz-executor/5917:
1 lock held by syz-executor/5918:
2 locks held by syz-executor/5919:
4 locks held by syz-executor/5920:
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00033-g25f51b76f90f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
Call Trace:
__dump_stack lib/dump_stack.c:93 [inline]
dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:119
nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xf4e/0x1280 kernel/hung_task.c:379
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 1 to CPUs 0:
yealink 2-1:36.0: urb_irq_callback - urb status -71
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 5920 Comm: syz-executor Not tainted 6.11.0-rc1-syzkaller-00033-g25f51b76f90f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:io_serial_out+0x8f/0xb0 drivers/tty/serial/8250/8250_port.c:413
Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d c3 cc cc cc cc e8 c1 c9 0f ff eb a0 e8 4a ca 0f
RSP: 0018:ffffc900000075a0 EFLAGS: 00000002
RAX: 000000000000005b RBX: 00000000000003f8 RCX: 0000000000000000
RDX: 00000000000003f8 RSI: ffffffff82988b85 RDI: ffffffff8dfc8700
RBP: ffffffff8dfc86c0 R08: 0000000000000001 R09: 000000000000001f
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 000000000000005b R14: ffffffff82988b20 R15: 0000000000000000
FS: 0000555566bc6500(0000) GS:ffff8881f6200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005590779b4078 CR3: 0000000111e40000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
serial_out drivers/tty/serial/8250/8250.h:142 [inline]
serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3322 [inline]
serial8250_console_write+0xce7/0x1090 drivers/tty/serial/8250/8250_port.c:3393
console_emit_next_record kernel/printk/printk.c:2983 [inline]
console_flush_all+0x53c/0xd70 kernel/printk/printk.c:3049
console_unlock+0xae/0x290 kernel/printk/printk.c:3118
vprintk_emit kernel/printk/printk.c:2348 [inline]
vprintk_emit+0x11a/0x5a0 kernel/printk/printk.c:2303
dev_vprintk_emit drivers/base/core.c:4909 [inline]
dev_printk_emit+0xfb/0x140 drivers/base/core.c:4920
__dev_printk+0xf5/0x270 drivers/base/core.c:4932
_dev_err+0xe5/0x120 drivers/base/core.c:4975
urb_irq_callback+0x454/0x700 drivers/input/misc/yealink.c:418
__usb_hcd_giveback_urb+0x466/0x6e0 drivers/usb/core/hcd.c:1650
usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1734
dummy_timer+0x17c3/0x38d0 drivers/usb/gadget/udc/dummy_hcd.c:1987
__run_hrtimer kernel/time/hrtimer.c:1689 [inline]
__hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1753
hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1815
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
__sysvec_apic_timer_interrupt+0x10f/0x450 arch/x86/kernel/apic/apic.c:1049
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0x8b/0xb0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 kernel/kcov.c:303
Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff
RSP: 0018:ffffc900014bf5a8 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffffc900014bf5d8 RCX: ffffffff8115578c
RDX: 1ffff92000297ec4 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900014bf620
R13: ffffffff813f29c0 R14: ffffc900014bf698 R15: ffff888113b89d00
unwind_get_return_address+0x87/0xe0 arch/x86/kernel/unwind_orc.c:369
arch_stack_walk+0xc1/0x170 arch/x86/kernel/stacktrace.c:26
stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
save_stack+0x162/0x1f0 mm/page_owner.c:156
__set_page_owner+0x8b/0x560 mm/page_owner.c:320
set_page_owner include/linux/page_owner.h:32 [inline]
post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1493
prep_new_page mm/page_alloc.c:1501 [inline]
get_page_from_freelist+0x1311/0x25f0 mm/page_alloc.c:3442
__alloc_pages_noprof+0x21e/0x2290 mm/page_alloc.c:4700
alloc_pages_mpol_noprof+0xeb/0x400 mm/mempolicy.c:2263
vm_area_alloc_pages mm/vmalloc.c:3584 [inline]
__vmalloc_area_node mm/vmalloc.c:3660 [inline]
__vmalloc_node_range_noprof+0xa6a/0x1520 mm/vmalloc.c:3841
vmalloc_user_noprof+0x6b/0x90 mm/vmalloc.c:3995
kcov_ioctl+0x4f/0x730 kernel/kcov.c:706
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:907 [inline]
__se_sys_ioctl fs/ioctl.c:893 [inline]
__x64_sys_ioctl+0x193/0x220 fs/ioctl.c:893
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f172eb895fb
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007ffd0385a940 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f172eb895fb
RDX: 0000000000040000 RSI: ffffffff80086301 RDI: 00000000000000d8
RBP: 00007f172ed26018 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009