ci starts bisection 2022-08-25 12:38:52.43318756 +0000 UTC m=+84131.582081842
bisecting fixing commit since 6e764bcd1cf72a2846c0e53d3975a09b242c04c9
building syzkaller on b599f2fcc734e2183016a340d4f6fc2891d8e41f
testing commit 6e764bcd1cf72a2846c0e53d3975a09b242c04c9
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 1b9ea4f8307567f718d4cc4a0f26ca80cd878a1ae637818290ddc7eedabbaf98
all runs: crashed: INFO: task hung in pn533_finalize_setup
testing current HEAD c40e8341e3b3bb27e3a65b06b5b454626234c4f0
testing commit c40e8341e3b3bb27e3a65b06b5b454626234c4f0
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 5e7ddde6b5956fa817995923cfcb272f86fdb6ae62aed3ce916d3cadd458326b
all runs: crashed: INFO: task hung in pn533_finalize_setup
revisions tested: 2, total time: 27m51.415507903s (build: 15m9.261667954s, test: 11m37.456185038s)
the crash still happens on HEAD
commit msg: Merge tag 'cgroup-for-6.0-rc2-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup
crash: INFO: task hung in pn533_finalize_setup
INFO: task kworker/1:1:26 blocked for more than 143 seconds.
Not tainted 6.0.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1 state:D stack:25632 pid: 26 ppid: 2 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5182 [inline]
__schedule+0x916/0x27c0 kernel/sched/core.c:6494
schedule+0xda/0x1b0 kernel/sched/core.c:6570
schedule_timeout+0x19d/0x250 kernel/time/timer.c:1911
do_wait_for_common kernel/sched/completion.c:85 [inline]
__wait_for_common+0x1be/0x530 kernel/sched/completion.c:106
pn533_send_cmd_sync drivers/nfc/pn533/pn533.c:631 [inline]
pn533_get_firmware_version drivers/nfc/pn533/pn533.c:2519 [inline]
pn533_finalize_setup+0xec/0x130 drivers/nfc/pn533/pn533.c:2716
pn533_usb_probe+0x846/0xf00 drivers/nfc/pn533/usb.c:544
usb_probe_interface+0x274/0x6a0 drivers/usb/core/driver.c:396
call_driver_probe drivers/base/dd.c:530 [inline]
really_probe+0x5a6/0xa50 drivers/base/dd.c:609
__driver_probe_device+0x186/0x460 drivers/base/dd.c:748
driver_probe_device+0x44/0x110 drivers/base/dd.c:778
__device_attach_driver+0x185/0x250 drivers/base/dd.c:901
bus_for_each_drv+0x11e/0x1a0 drivers/base/bus.c:427
__device_attach+0x19e/0x440 drivers/base/dd.c:973
bus_probe_device+0x19d/0x250 drivers/base/bus.c:487
device_add+0xa14/0x1b80 drivers/base/core.c:3517
usb_set_configuration+0xa01/0x18a0 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x74/0xa0 drivers/usb/core/generic.c:238
usb_probe_device+0x94/0x230 drivers/usb/core/driver.c:293
call_driver_probe drivers/base/dd.c:530 [inline]
really_probe+0x5a6/0xa50 drivers/base/dd.c:609
__driver_probe_device+0x186/0x460 drivers/base/dd.c:748
driver_probe_device+0x44/0x110 drivers/base/dd.c:778
__device_attach_driver+0x185/0x250 drivers/base/dd.c:901
bus_for_each_drv+0x11e/0x1a0 drivers/base/bus.c:427
__device_attach+0x19e/0x440 drivers/base/dd.c:973
bus_probe_device+0x19d/0x250 drivers/base/bus.c:487
device_add+0xa14/0x1b80 drivers/base/core.c:3517
usb_new_device.cold+0x600/0xf02 drivers/usb/core/hub.c:2573
hub_port_connect drivers/usb/core/hub.c:5353 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5497 [inline]
port_event drivers/usb/core/hub.c:5653 [inline]
hub_event+0x1c5b/0x3af0 drivers/usb/core/hub.c:5735
process_one_work+0x865/0x13d0 kernel/workqueue.c:2289
worker_thread+0x598/0xec0 kernel/workqueue.c:2436
kthread+0x294/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff8b17ca30 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507
1 lock held by rcu_tasks_trace/13:
#0: ffffffff8b17c730 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507
5 locks held by kworker/1:1/26:
#0: ffff888016500538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888016500538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888016500538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888016500538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888016500538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888016500538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x13d0 kernel/workqueue.c:2260
#1: ffffc90000a1fdb8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7b7/0x13d0 kernel/workqueue.c:2264
#2: ffff88814790b190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline]
#2: ffff88814790b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x127/0x3af0 drivers/usb/core/hub.c:5681
#3: ffff8880781fc190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline]
#3: ffff8880781fc190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x71/0x440 drivers/base/dd.c:948
#4: ffff88801b098118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline]
#4: ffff88801b098118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x71/0x440 drivers/base/dd.c:948
1 lock held by khungtaskd/28:
#0: ffffffff8b17d580 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6492
5 locks held by kworker/u4:3/48:
#0: ffff8880b9e39ed8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:544 [inline]
#0: ffff8880b9e39ed8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1355 [inline]
#0: ffff8880b9e39ed8 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1653 [inline]
#0: ffff8880b9e39ed8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x236/0x27c0 kernel/sched/core.c:6411
#1: ffff8880b9e277c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3e7/0x4e0 kernel/sched/psi.c:885
#2: ffff8880b9e283d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x49/0x1a0 kernel/time/timer.c:999
#3: ffffffff8fb02538 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x12e/0x3e0 lib/debugobjects.c:658
#4: ffffffff8b048008 (text_mutex){+.+.}-{3:3}, at: arch_jump_label_transform_apply+0xe/0x20 arch/x86/kernel/jump_label.c:145
1 lock held by syslogd/2987:
#0: ffff8880b9e39ed8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x1e/0x30 kernel/sched/core.c:544
2 locks held by getty/3315:
#0: ffff888017438098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:244
#1: ffffc900029232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xb6e/0x1030 drivers/tty/n_tty.c:2177
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x57/0x7d lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x30/0xca lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x154/0x180 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline]
watchdog+0x88c/0xbf0 kernel/hung_task.c:369
kthread+0x294/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 8 Comm: kworker/u4:0 Not tainted 6.0.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:insn_get_prefixes.part.0+0x66d/0xf20 arch/x86/lib/insn.c:240
Code: 38 d0 7f 08 84 c0 0f 85 f8 07 00 00 49 8d 7f 04 41 c6 47 14 01 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 <48> 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 e6 07 00 00 41 c6 47 04
RSP: 0018:ffffc900000d7968 EFLAGS: 00000a07
RAX: 0000000000000000 RBX: 0000000000000000 RCX: fffff5200001af60
RDX: 1ffff9200001af56 RSI: 0000000000000000 RDI: ffffc900000d7ab4
RBP: ffffc900000d7b03 R08: 0000000000000001 R09: ffffffff81afa924
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: ffffffff81afa920 R14: 00000000000000e9 R15: ffffc900000d7ab0
FS: 0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000322a708 CR3: 000000000ae8e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
insn_get_prefixes arch/x86/lib/insn.c:131 [inline]
insn_get_opcode arch/x86/lib/insn.c:272 [inline]
insn_get_modrm+0x500/0x640 arch/x86/lib/insn.c:343
insn_get_sib+0x202/0x280 arch/x86/lib/insn.c:421
insn_get_displacement+0x263/0x580 arch/x86/lib/insn.c:464
insn_get_immediate arch/x86/lib/insn.c:632 [inline]
insn_get_length arch/x86/lib/insn.c:707 [inline]
insn_decode+0x25a/0x2a0 arch/x86/lib/insn.c:747
arch_jump_entry_size+0xa0/0x110 arch/x86/kernel/jump_label.c:24
__jump_label_patch+0x80/0x330 arch/x86/kernel/jump_label.c:45
arch_jump_label_transform_queue+0x63/0x100 arch/x86/kernel/jump_label.c:137
__jump_label_update+0xea/0x330 kernel/jump_label.c:447
static_key_disable_cpuslocked+0x100/0x160 kernel/jump_label.c:207
static_key_disable+0x11/0x20 kernel/jump_label.c:215
toggle_allocation_gate mm/kfence/core.c:825 [inline]
toggle_allocation_gate+0x154/0x310 mm/kfence/core.c:803
process_one_work+0x865/0x13d0 kernel/workqueue.c:2289
worker_thread+0x598/0xec0 kernel/workqueue.c:2436
kthread+0x294/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306