usb-fuzzer-gadget dummy_udc.3: failed to start USB fuzzer: -22 INFO: task kworker/1:5:5699 blocked for more than 143 seconds. Not tainted 5.1.0-rc4-319354-g9a33b36 #3 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/1:5 D24512 5699 2 0x80000000 Workqueue: usb_hub_wq hub_event Call Trace: schedule+0x8f/0x180 kernel/sched/core.c:3562 schedule_preempt_disabled+0x11/0x20 kernel/sched/core.c:3620 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x800/0x12b0 kernel/locking/mutex.c:1072 i2c_add_adapter+0x1e/0x110 drivers/i2c/i2c-core-base.c:1356 dvb_usb_i2c_init+0x1e5/0x2b0 drivers/media/usb/dvb-usb/dvb-usb-i2c.c:30 dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:162 [inline] dvb_usb_device_init.cold+0x3e2/0x10b3 drivers/media/usb/dvb-usb/dvb-usb-init.c:277 dtv5100_probe drivers/media/usb/dvb-usb/dtv5100.c:163 [inline] dtv5100_probe+0x1db/0x232 drivers/media/usb/dvb-usb/dtv5100.c:145 usb_probe_interface+0x31d/0x820 drivers/usb/core/driver.c:361 really_probe+0x2da/0xb10 drivers/base/dd.c:509 driver_probe_device+0x21d/0x350 drivers/base/dd.c:671 __device_attach_driver+0x1d8/0x290 drivers/base/dd.c:778 bus_for_each_drv+0x163/0x1e0 drivers/base/bus.c:454 __device_attach+0x223/0x3a0 drivers/base/dd.c:844 bus_probe_device+0x1f1/0x2a0 drivers/base/bus.c:514 device_add+0xad2/0x16e0 drivers/base/core.c:2106 usb_set_configuration+0xdf7/0x1740 drivers/usb/core/message.c:2021 generic_probe+0xa2/0xda drivers/usb/core/generic.c:210 usb_probe_device+0xc0/0x150 drivers/usb/core/driver.c:266 really_probe+0x2da/0xb10 drivers/base/dd.c:509 driver_probe_device+0x21d/0x350 drivers/base/dd.c:671 __device_attach_driver+0x1d8/0x290 drivers/base/dd.c:778 bus_for_each_drv+0x163/0x1e0 drivers/base/bus.c:454 __device_attach+0x223/0x3a0 drivers/base/dd.c:844 bus_probe_device+0x1f1/0x2a0 drivers/base/bus.c:514 device_add+0xad2/0x16e0 drivers/base/core.c:2106 usb_new_device.cold+0x537/0xccf drivers/usb/core/hub.c:2534 hub_port_connect drivers/usb/core/hub.c:5089 [inline] hub_port_connect_change drivers/usb/core/hub.c:5204 [inline] port_event drivers/usb/core/hub.c:5350 [inline] hub_event+0x138e/0x3b00 drivers/usb/core/hub.c:5432 process_one_work+0x90f/0x1580 kernel/workqueue.c:2269 process_scheduled_works kernel/workqueue.c:2331 [inline] worker_thread+0x7b0/0xe20 kernel/workqueue.c:2417 kthread+0x313/0x420 kernel/kthread.c:253 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Showing all locks held in the system: 6 locks held by kworker/1:1/21: #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 000000007040191b ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 00000000d2011f1c (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 00000000d2011f1c (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 00000000cb1e4ef8 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #3: 00000000cb1e4ef8 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #4: 000000007a1a8eb6 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #4: 000000007a1a8eb6 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #5: 0000000054772c61 (core_lock){+.+.}, at: i2c_add_adapter+0x1e/0x110 drivers/i2c/i2c-core-base.c:1356 1 lock held by khungtaskd/23: #0: 00000000c41d8f8d (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:5059 3 locks held by kworker/1:2/535: usb-fuzzer-gadget dummy_udc.3: failed to start USB fuzzer: -22 #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 00000000483098f3 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 000000003a7f3179 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 000000003a7f3179 (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 1 lock held by rsyslogd/5275: 2 locks held by getty/5365: #0: 000000008467d7a5 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 000000007b990806 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5366: #0: 0000000016385ed0 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000968f199f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5367: #0: 00000000dd1c8172 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 000000009716b209 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5368: #0: 0000000044ad25ab (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 000000006c655290 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5369: #0: 0000000048fdc67e (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000f6263e72 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5370: #0: 0000000063213d5f (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000b71bfa7e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5371: #0: 00000000ec029d2c (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 0000000019a7d668 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 3 locks held by kworker/1:3/5479: #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 00000000f0b57097 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 000000001e71eaea (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 000000001e71eaea (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 9 locks held by kworker/1:4/5480: #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 0000000078e4acc4 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 000000009f1c3fca (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 000000009f1c3fca (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 0000000014689280 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #3: 0000000014689280 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #4: 00000000fb51562d (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #4: 00000000fb51562d (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #5: 00000000ab7d9cc6 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #5: 00000000ab7d9cc6 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #6: 0000000054772c61 (core_lock){+.+.}, at: i2c_register_adapter+0x507/0xb30 drivers/i2c/i2c-core-base.c:1292 #7: 0000000003149ef0 (i2c_register_adapter){+.+.}, at: i2c_lock_bus include/linux/i2c.h:739 [inline] #7: 0000000003149ef0 (i2c_register_adapter){+.+.}, at: i2c_smbus_xfer+0x79/0x130 drivers/i2c/i2c-core-smbus.c:533 #8: 0000000025fb088f (&vb->lock){+.+.}, at: vprbrd_i2c_xfer+0x1a3/0x1b9e drivers/i2c/busses/i2c-viperboard.c:291 3 locks held by kworker/u4:5/5519: #0: 000000002d961caf (&rq->lock){-.-.}, at: rq_lock kernel/sched/sched.h:1168 [inline] #0: 000000002d961caf (&rq->lock){-.-.}, at: __schedule+0x1ed/0x1d00 kernel/sched/core.c:3456 #1: 00000000c41d8f8d (rcu_read_lock){....}, at: trace_sched_stat_runtime include/trace/events/sched.h:428 [inline] #1: 00000000c41d8f8d (rcu_read_lock){....}, at: update_curr+0x302/0x8c0 kernel/sched/fair.c:842 #2: 000000003a46a1d5 (&base->lock){..-.}, at: lock_timer_base+0x5a/0x1a0 kernel/time/timer.c:937 6 locks held by kworker/1:5/5699: #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 000000003da2b478 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 00000000529dac18 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 00000000529dac18 (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 00000000cfe01f46 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #3: 00000000cfe01f46 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #4: 000000009df332c7 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #4: 000000009df332c7 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #5: 0000000054772c61 (core_lock){+.+.}, at: i2c_add_adapter+0x1e/0x110 drivers/i2c/i2c-core-base.c:1356 6 locks held by kworker/1:6/5704: #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000fb8c5050 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 00000000cd0887e9 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 00000000215f12c0 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 00000000215f12c0 (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 000000004c265c5d (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #3: 000000004c265c5d (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #4: 000000004bfd0e4d (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #4: 000000004bfd0e4d (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #5: 000000001daeb19c (&d->usb_mutex){+.+.}, at: rtl28xxu_ctrl_msg+0x59/0x6a0 drivers/media/usb/dvb-usb-v2/rtl28xxu.c:37 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 23 Comm: khungtaskd Not tainted 5.1.0-rc4-319354-g9a33b36 #3 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xe8/0x16e lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x48/0x87 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1a6/0x1bd lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline] watchdog+0x98e/0xe20 kernel/hung_task.c:288 kthread+0x313/0x420 kernel/kthread.c:253 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 497 Comm: kworker/u4:3 Not tainted 5.1.0-rc4-319354-g9a33b36 #3 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: bat_events batadv_nc_worker RIP: 0010:batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:420 [inline] RIP: 0010:batadv_nc_worker+0x16c/0x770 net/batman-adv/network-coding.c:730 Code: 89 e6 e8 47 bb 84 f3 45 84 e4 0f 84 75 03 00 00 e8 09 ba 84 f3 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 0f 85 61 05 00 00 4d 8b 3f 45 e8 ed b9 84 f3 49 81 ef 88 01 00 00 74 46 e8 df b9 84 f3 48 RSP: 0018:ffff8880a0d07d00 EFLAGS: 00000246 RAX: 1ffff1101314b0c8 RBX: ffff8880a7c014b0 RCX: ffffffff8ded0eed RDX: 0000000000000000 RSI: ffffffff8ded0b67 RDI: 0000000000000001 RBP: ffff888098a5ab80 R08: ffff8880a0d83100 R09: ffffed1015a05c28 R10: ffffed1015a05c27 R11: ffff8880ad02e13b R12: 0000000000000001 R13: 00000000000000c8 R14: dffffc0000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880ad000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f254a9d1db8 CR3: 000000007474a000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: process_one_work+0x90f/0x1580 kernel/workqueue.c:2269 worker_thread+0x9b/0xe20 kernel/workqueue.c:2415 kthread+0x313/0x420 kernel/kthread.c:253 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352