INFO: task kworker/1:2:47 blocked for more than 143 seconds. Not tainted 6.9.0-rc7-syzkaller-00158-g51474ab44abf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:2 state:D stack:22832 pid:47 tgid:47 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0xca6/0x3170 kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6838 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6895 rwsem_down_write_slowpath kernel/locking/rwsem.c:1178 [inline] __down_write_common+0x950/0x13f0 kernel/locking/rwsem.c:1306 kernfs_add_one+0xb1/0x520 fs/kernfs/dir.c:778 __kernfs_create_file+0x295/0x350 fs/kernfs/file.c:1063 sysfs_add_file_mode_ns+0x1ff/0x3b0 fs/sysfs/file.c:307 create_files fs/sysfs/group.c:76 [inline] internal_create_group+0x565/0xe50 fs/sysfs/group.c:180 usb_probe+0x11a2/0x17b0 drivers/input/misc/yealink.c:979 usb_probe_interface+0x309/0x9d0 drivers/usb/core/driver.c:399 call_driver_probe drivers/base/dd.c:578 [inline] really_probe+0x23e/0xa90 drivers/base/dd.c:656 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:798 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:828 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:956 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1028 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532 device_add+0x1188/0x1ab0 drivers/base/core.c:3720 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294 call_driver_probe drivers/base/dd.c:578 [inline] really_probe+0x23e/0xa90 drivers/base/dd.c:656 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:798 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:828 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:956 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1028 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532 device_add+0x1188/0x1ab0 drivers/base/core.c:3720 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2e66/0x4f50 drivers/usb/core/hub.c:5903 process_one_work+0x9a9/0x1ac0 kernel/workqueue.c:3267 process_scheduled_works kernel/workqueue.c:3348 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3429 kthread+0x2c1/0x3a0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task jbd2/sda1-8:2367 blocked for more than 144 seconds. Not tainted 6.9.0-rc7-syzkaller-00158-g51474ab44abf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jbd2/sda1-8 state:D stack:26112 pid:2367 tgid:2367 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0xca6/0x3170 kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6838 io_schedule+0xbf/0x130 kernel/sched/core.c:9044 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:209 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xda/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:101 [inline] __wait_on_buffer+0x64/0x70 fs/buffer.c:123 wait_on_buffer include/linux/buffer_head.h:389 [inline] journal_wait_on_commit_record fs/jbd2/commit.c:171 [inline] jbd2_journal_commit_transaction+0x4824/0x65d0 fs/jbd2/commit.c:888 kjournald2+0x1f8/0x8f0 fs/jbd2/journal.c:201 kthread+0x2c1/0x3a0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task udevd:2404 blocked for more than 145 seconds. Not tainted 6.9.0-rc7-syzkaller-00158-g51474ab44abf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:26416 pid:2404 tgid:2404 ppid:1 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0xca6/0x3170 kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6838 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6895 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:861 [inline] d_revalidate fs/namei.c:858 [inline] lookup_fast+0x239/0x540 fs/namei.c:1653 walk_component+0x5b/0x5b0 fs/namei.c:2000 link_path_walk.part.0.constprop.0+0x77f/0xcd0 fs/namei.c:2331 link_path_walk fs/namei.c:2255 [inline] path_lookupat+0x93/0x770 fs/namei.c:2484 filename_lookup+0x1e5/0x5b0 fs/namei.c:2514 user_path_at_empty+0x42/0x60 fs/namei.c:2921 do_readlinkat+0xdd/0x310 fs/stat.c:499 __do_sys_readlink fs/stat.c:532 [inline] __se_sys_readlink fs/stat.c:529 [inline] __x64_sys_readlink+0x78/0xc0 fs/stat.c:529 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x260 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4f8fdc5d47 RSP: 002b:00007ffd9be8ecc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 RAX: ffffffffffffffda RBX: 00007ffd9be8ecd8 RCX: 00007f4f8fdc5d47 RDX: 0000000000000400 RSI: 00007ffd9be8ecd8 RDI: 00007ffd9be8f1b8 RBP: 0000000000000400 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9be8f1b8 R13: 00007ffd9be8f128 R14: 0000564376fad910 R15: 0000000000000000 INFO: task syz-executor.1:2526 blocked for more than 145 seconds. Not tainted 6.9.0-rc7-syzkaller-00158-g51474ab44abf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:24880 pid:2526 tgid:2526 ppid:1 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0xca6/0x3170 kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6838 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6895 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:861 [inline] d_revalidate fs/namei.c:858 [inline] lookup_fast+0x239/0x540 fs/namei.c:1653 walk_component+0x5b/0x5b0 fs/namei.c:2000 link_path_walk.part.0.constprop.0+0x77f/0xcd0 fs/namei.c:2331 link_path_walk fs/namei.c:2256 [inline] path_openat+0x22f/0x2990 fs/namei.c:3795 do_filp_open+0x1dc/0x430 fs/namei.c:3826 do_sys_openat2+0x17a/0x1e0 fs/open.c:1406 do_sys_open fs/open.c:1421 [inline] __do_sys_openat fs/open.c:1437 [inline] __se_sys_openat fs/open.c:1432 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1432 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x260 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7d4f6a4941 RSP: 002b:00007ffc70efb400 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f7d4f6a4941 RDX: 0000000000090800 RSI: 00007f7d4f6f03da RDI: 00000000ffffff9c RBP: 00007ffc70efb4cc R08: 000000000000005b R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000015a23 R14: 0000000000015a23 R15: 0000000000000000 INFO: task syz-executor.4:2527 blocked for more than 146 seconds. Not tainted 6.9.0-rc7-syzkaller-00158-g51474ab44abf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:22576 pid:2527 tgid:2527 ppid:1 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0xca6/0x3170 kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6838 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6895 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:861 [inline] d_revalidate fs/namei.c:858 [inline] lookup_fast+0x239/0x540 fs/namei.c:1653 walk_component+0x5b/0x5b0 fs/namei.c:2000 link_path_walk.part.0.constprop.0+0x77f/0xcd0 fs/namei.c:2331 link_path_walk fs/namei.c:2256 [inline] path_openat+0x22f/0x2990 fs/namei.c:3795 do_filp_open+0x1dc/0x430 fs/namei.c:3826 do_sys_openat2+0x17a/0x1e0 fs/open.c:1406 do_sys_open fs/open.c:1421 [inline] __do_sys_openat fs/open.c:1437 [inline] __se_sys_openat fs/open.c:1432 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1432 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x260 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc681804941 RSP: 002b:00007ffd4270be40 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fc681804941 RDX: 0000000000090800 RSI: 00007fc6818503da RDI: 00000000ffffff9c RBP: 00007ffd4270bf0c R08: 000000000000005d R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000016182 R14: 00000000000160b0 R15: 0000000000000002 INFO: task syz-executor.2:2528 blocked for more than 147 seconds. Not tainted 6.9.0-rc7-syzkaller-00158-g51474ab44abf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:25424 pid:2528 tgid:2528 ppid:1 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0xca6/0x3170 kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6838 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6895 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:861 [inline] d_revalidate fs/namei.c:858 [inline] lookup_fast+0x239/0x540 fs/namei.c:1653 walk_component+0x5b/0x5b0 fs/namei.c:2000 link_path_walk.part.0.constprop.0+0x77f/0xcd0 fs/namei.c:2331 link_path_walk fs/namei.c:2256 [inline] path_openat+0x22f/0x2990 fs/namei.c:3795 do_filp_open+0x1dc/0x430 fs/namei.c:3826 do_sys_openat2+0x17a/0x1e0 fs/open.c:1406 do_sys_open fs/open.c:1421 [inline] __do_sys_openat fs/open.c:1437 [inline] __se_sys_openat fs/open.c:1432 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1432 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x260 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f51fb5f4941 RSP: 002b:00007ffd58b69fc0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f51fb5f4941 RDX: 0000000000090800 RSI: 00007f51fb6403da RDI: 00000000ffffff9c RBP: 00007ffd58b6a08c R08: 000000000000005a R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 000000000001560e R14: 000000000001560e R15: 0000000000000000 INFO: task syz-executor.0:2532 blocked for more than 147 seconds. Not tainted 6.9.0-rc7-syzkaller-00158-g51474ab44abf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:23904 pid:2532 tgid:2532 ppid:1 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0xca6/0x3170 kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6838 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6895 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:861 [inline] d_revalidate fs/namei.c:858 [inline] lookup_fast+0x239/0x540 fs/namei.c:1653 walk_component+0x5b/0x5b0 fs/namei.c:2000 link_path_walk.part.0.constprop.0+0x77f/0xcd0 fs/namei.c:2331 link_path_walk fs/namei.c:2256 [inline] path_openat+0x22f/0x2990 fs/namei.c:3795 do_filp_open+0x1dc/0x430 fs/namei.c:3826 do_sys_openat2+0x17a/0x1e0 fs/open.c:1406 do_sys_open fs/open.c:1421 [inline] __do_sys_openat fs/open.c:1437 [inline] __se_sys_openat fs/open.c:1432 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1432 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x260 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fab4ddc9941 RSP: 002b:00007ffe50d6bee0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fab4ddc9941 RDX: 0000000000090800 RSI: 00007fab4de153da RDI: 00000000ffffff9c RBP: 00007ffe50d6bfac R08: 0000000000000059 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 00000000000153a4 R14: 00000000000153a4 R15: 0000000000000000 INFO: task syz-executor.3:2537 blocked for more than 148 seconds. Not tainted 6.9.0-rc7-syzkaller-00158-g51474ab44abf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:25424 pid:2537 tgid:2537 ppid:1 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0xca6/0x3170 kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6838 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6895 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:861 [inline] d_revalidate fs/namei.c:858 [inline] lookup_fast+0x239/0x540 fs/namei.c:1653 walk_component+0x5b/0x5b0 fs/namei.c:2000 link_path_walk.part.0.constprop.0+0x77f/0xcd0 fs/namei.c:2331 link_path_walk fs/namei.c:2256 [inline] path_openat+0x22f/0x2990 fs/namei.c:3795 do_filp_open+0x1dc/0x430 fs/namei.c:3826 do_sys_openat2+0x17a/0x1e0 fs/open.c:1406 do_sys_open fs/open.c:1421 [inline] __do_sys_openat fs/open.c:1437 [inline] __se_sys_openat fs/open.c:1432 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1432 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x260 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f352a112941 RSP: 002b:00007ffda430ed50 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f352a112941 RDX: 0000000000090800 RSI: 00007f352a15e3da RDI: 00000000ffffff9c RBP: 00007ffda430ee1c R08: 000000000000005b R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000015b6d R14: 0000000000015b42 R15: 0000000000000003 INFO: task syz-executor.2:4870 blocked for more than 149 seconds. Not tainted 6.9.0-rc7-syzkaller-00158-g51474ab44abf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:27568 pid:4870 tgid:4870 ppid:2528 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0xca6/0x3170 kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6838 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6895 rwsem_down_write_slowpath kernel/locking/rwsem.c:1178 [inline] __down_write_common+0x950/0x13f0 kernel/locking/rwsem.c:1306 kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 sysfs_remove_file include/linux/sysfs.h:749 [inline] driver_remove_file drivers/base/driver.c:198 [inline] driver_remove_file+0x4a/0x60 drivers/base/driver.c:194 remove_bind_files drivers/base/bus.c:600 [inline] bus_remove_driver+0x224/0x2c0 drivers/base/bus.c:731 driver_unregister+0x76/0xb0 drivers/base/driver.c:274 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1733 raw_release+0x1a9/0x2f0 drivers/usb/gadget/legacy/raw_gadget.c:462 __fput+0x270/0xb80 fs/file_table.c:422 task_work_run+0x14e/0x250 kernel/task_work.c:180 exit_task_work include/linux/task_work.h:38 [inline] do_exit+0xa7d/0x2b80 kernel/exit.c:878 do_group_exit+0xd3/0x2a0 kernel/exit.c:1027 get_signal+0x2618/0x2710 kernel/signal.c:2911 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x141/0x250 kernel/entry/common.c:218 do_syscall_64+0xdc/0x260 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f51fb5f4ee9 RSP: 002b:00007ffd58b69e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffdfc RBX: 0000000000015618 RCX: 00007f51fb5f4ee9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f51fb723f8c RBP: 00007ffd58b69f50 R08: 0000000000000001 R09: 0000000000001082 R10: 00007ffd58b69f30 R11: 0000000000000246 R12: 0000000000016202 R13: 00007f51fb723f8c R14: 00007ffd58b69f30 R15: 0000000000000bea Showing all locks held in the system: 5 locks held by kworker/1:0/23: #0: ffff888105285d48 ((wq_completion)usb_hub_wq ){+.+.}-{0:0} , at: process_one_work+0x1296/0x1ac0 kernel/workqueue.c:3242 #1: ffffc9000018fd80 ( (work_completion)(&hub->events) ){+.+.}-{0:0} , at: process_one_work+0x906/0x1ac0 kernel/workqueue.c:3243 #2: ffff8881097eb190 ( &dev->mutex ){....}-{3:3} , at: device_lock include/linux/device.h:990 [inline] , at: hub_event+0x1be/0x4f50 drivers/usb/core/hub.c:5849 #3: ffff888105eec190 (&dev->mutex ){....}-{3:3} , at: device_lock include/linux/device.h:990 [inline] , at: usb_disconnect+0x10a/0x920 drivers/usb/core/hub.c:2295 #4: ffff888100aae948 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 1 lock held by khungtaskd/29: #0: ffffffff884b4560 ( rcu_read_lock ){....}-{1:2} , at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] , at: rcu_read_lock include/linux/rcupdate.h:781 [inline] , at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6614 10 locks held by kworker/1:2/47: 3 locks held by kworker/0:2/724: 1 lock held by udevd/2404: #0: ffff888100aae948 (&root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 2 locks held by getty/2462: #0: ffff88810129b0a0 ( &tty->ldisc_sem ){++++}-{0:0} , at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900000432f0 (&ldata->atomic_read_lock ){+.+.}-{3:3} , at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2201 1 lock held by syz-executor.1/2526: #0: ffffffff884bfc78 ( rcu_state.exp_mutex ){+.+.}-{3:3} , at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline] , at: synchronize_rcu_expedited+0x682/0x7a0 kernel/rcu/tree_exp.h:939 1 lock held by syz-executor.4/2527: #0: ffff888100aae948 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141 1 lock held by syz-executor.2/2528: #0: ffff888100aae948 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141 1 lock held by syz-executor.0/2532: #0: ffff888100aae948 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141 1 lock held by syz-executor.3/2537: #0: ffff888100aae948 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141 4 locks held by udevd/4782: #0: ffff88811a8531c8 ( &p->lock ){+.+.}-{3:3} , at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182 #1: ffff88813580a488 (&of->mutex #2 ){+.+.}-{3:3} , at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154 #2: ffff88811955e4b8 ( kn->active #18 ){.+.+}-{0:0} , at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155 #3: ffff8881102ff190 ( &dev->mutex ){....}-{3:3} , at: device_lock_interruptible include/linux/device.h:995 [inline] , at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 4 locks held by udevd/4789: #0: ffff88811a8932f0 ( &p->lock ){+.+.}-{3:3} , at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182 #1: ffff88810ebc8488 (&of->mutex #2 ){+.+.}-{3:3} , at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154 #2: ffff88811af64b48 ( kn->active #18 ){.+.+}-{0:0} , at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155 #3: ffff8881062ea190 ( &dev->mutex ){....}-{3:3} , at: device_lock_interruptible include/linux/device.h:995 [inline] , at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 5 locks held by kworker/1:3/4807: 5 locks held by kworker/1:4/4841: 7 locks held by kworker/1:5/4848: 1 lock held by syz-executor.0/4863: #0: ffff888100aae948 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 3 locks held by kworker/1:7/4872: #0: ffff888100081948 ( (wq_completion)events_power_efficient ){+.+.}-{0:0} , at: process_one_work+0x1296/0x1ac0 kernel/workqueue.c:3242 #1: ffffc900022bfd80 ( (work_completion)(&(&hub->init_work)->work) ){+.+.}-{0:0} , at: process_one_work+0x906/0x1ac0 kernel/workqueue.c:3243 #2: ffff888104a8a190 (&dev->mutex ){....}-{3:3} , at: device_lock include/linux/device.h:990 [inline] , at: hub_activate+0xed5/0x1d70 drivers/usb/core/hub.c:1088 1 lock held by syz-executor.3/4878: #0: ffffffff884bfc78 ( rcu_state.exp_mutex ){+.+.}-{3:3} , at: exp_funnel_lock kernel/rcu/tree_exp.h:323 [inline] , at: synchronize_rcu_expedited+0x403/0x7a0 kernel/rcu/tree_exp.h:939 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.9.0-rc7-syzkaller-00158-g51474ab44abf #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xf86/0x1240 kernel/hung_task.c:380 kthread+0x2c1/0x3a0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: yealink 4-1:36.0: urb_ctl_callback - urb status -71 NMI backtrace for cpu 1 CPU: 1 PID: 47 Comm: kworker/1:2 Not tainted 6.9.0-rc7-syzkaller-00158-g51474ab44abf #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:200 Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 64 e8 b0 7e 65 8b 05 65 e8 b0 7e a9 00 01 RSP: 0018:ffffc900001a80e0 EFLAGS: 00000046 RAX: 0000000080010004 RBX: ffffc900001a84c7 RCX: ffffffff8685f6ff RDX: ffff8881007c1d00 RSI: 000000000000000a RDI: 0000000000000001 RBP: 000000000000000a R08: 0000000000000001 R09: 000000000000000a R10: 000000000000000a R11: 00000000001926b0 R12: 00000000000d313a R13: 000000000000000a R14: ffffc900801a84bf R15: 0000000000000010 FS: 0000000000000000(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31623000 CR3: 000000000829e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: number+0x99d/0xb80 lib/vsprintf.c:511 vsnprintf+0x92a/0x1880 lib/vsprintf.c:2890 sprintf+0xcd/0x110 lib/vsprintf.c:3028 print_time kernel/printk/printk.c:1330 [inline] info_print_prefix+0x25c/0x350 kernel/printk/printk.c:1356 record_print_text+0x141/0x400 kernel/printk/printk.c:1405 printk_get_next_message+0x2a6/0x670 kernel/printk/printk.c:2840 console_emit_next_record kernel/printk/printk.c:2880 [inline] console_flush_all+0x3b2/0xd70 kernel/printk/printk.c:2979 console_unlock+0xae/0x290 kernel/printk/printk.c:3048 vprintk_emit kernel/printk/printk.c:2348 [inline] vprintk_emit+0x11a/0x5a0 kernel/printk/printk.c:2303 dev_vprintk_emit drivers/base/core.c:4950 [inline] dev_printk_emit+0xfb/0x140 drivers/base/core.c:4961 __dev_printk+0xf5/0x270 drivers/base/core.c:4973 _dev_err+0xe5/0x120 drivers/base/core.c:5016 urb_ctl_callback+0x1eb/0x2f0 drivers/input/misc/yealink.c:454 __usb_hcd_giveback_urb+0x364/0x5c0 drivers/usb/core/hcd.c:1648 usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1732 dummy_timer+0x17f6/0x3900 drivers/usb/gadget/udc/dummy_hcd.c:1987 __run_hrtimer kernel/time/hrtimer.c:1692 [inline] __hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1756 hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1818 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x10f/0x450 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x8b/0xb0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:194 Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 4b a1 fa 48 89 df e8 ae c7 a1 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 35 96 fa 65 8b 05 d6 db 73 79 85 c0 74 16 5b RSP: 0018:ffffc90000326fb8 EFLAGS: 00000246 RAX: 0000000000000002 RBX: ffff888118ba89b0 RCX: 1ffffffff1953877 RDX: 0000000000000000 RSI: ffffffff86c7cf00 RDI: ffffffff86e73ce0 RBP: 0000000000000206 R08: 0000000000000001 R09: fffffbfff194f3ae R10: ffffffff8ca79d77 R11: 0000000000000004 R12: 0000000000000003 R13: ffff888118ba8018 R14: ffff888118ba89b0 R15: ffff888100aae930 class_raw_spinlock_irqsave_destructor include/linux/spinlock.h:553 [inline] try_to_wake_up+0x139/0x10b0 kernel/sched/core.c:4262 wake_up_process kernel/sched/core.c:4510 [inline] wake_up_q+0x91/0x140 kernel/sched/core.c:1029 rwsem_wake.isra.0+0xc6/0x120 kernel/locking/rwsem.c:1214 __up_write kernel/locking/rwsem.c:1376 [inline] up_write+0x202/0x520 kernel/locking/rwsem.c:1632 kernfs_add_one+0x2f4/0x520 fs/kernfs/dir.c:809 __kernfs_create_file+0x295/0x350 fs/kernfs/file.c:1063 sysfs_add_file_mode_ns+0x1ff/0x3b0 fs/sysfs/file.c:307 sysfs_create_file_ns+0x13e/0x1d0 fs/sysfs/file.c:368 sysfs_create_file include/linux/sysfs.h:743 [inline] device_create_file+0xf2/0x1e0 drivers/base/core.c:3086 device_add+0x2de/0x1ab0 drivers/base/core.c:3667 usb_create_ep_devs+0x160/0x2b0 drivers/usb/core/endpoint.c:169 create_intf_ep_devs.isra.0+0x161/0x200 drivers/usb/core/message.c:1252 usb_set_configuration+0x10ed/0x1c50 drivers/usb/core/message.c:2216 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294 call_driver_probe drivers/base/dd.c:578 [inline] really_probe+0x23e/0xa90 drivers/base/dd.c:656 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:798 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:828 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:956 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1028 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532 device_add+0x1188/0x1ab0 drivers/base/core.c:3720 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2e66/0x4f50 drivers/usb/core/hub.c:5903 process_one_work+0x9a9/0x1ac0 kernel/workqueue.c:3267