INFO: task udevd:5914 blocked for more than 143 seconds.
Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd state:D
stack:27808 pid:5914 tgid:5914 ppid:4534 flags:0x00000002
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0xf15/0x5d00 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
device_lock include/linux/device.h:1009 [inline]
uevent_show+0x188/0x3b0 drivers/base/core.c:2743
dev_attr_show+0x53/0xe0 drivers/base/core.c:2437
sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59
seq_read_iter+0x4fa/0x12c0 fs/seq_file.c:230
kernfs_fop_read_iter+0x41a/0x590 fs/kernfs/file.c:279
new_sync_read fs/read_write.c:395 [inline]
vfs_read+0x869/0xbd0 fs/read_write.c:476
ksys_read+0x12f/0x260 fs/read_write.c:619
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5d3f516b6a
RSP: 002b:00007ffe45ef27c8 EFLAGS: 00000246
ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 0000564650417e90 RCX: 00007f5d3f516b6a
RDX: 0000000000001000 RSI: 00005646503e79f0 RDI: 0000000000000008
RBP: 0000564650417e90 R08: 0000000000000008 R09: 0000000000000200
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffe45ef2ca8 R15: 000000000000000a
Showing all locks held in the system:
3 locks held by kworker/1:0/25:
1 lock held by khungtaskd/30:
#0:
ffffffff8dbb1920
(
rcu_read_lock
){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline]
){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6614
4 locks held by kworker/u8:3/51:
#0:
ffff8880162d3148
(
(wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
#1: ffffc90000bc7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
#2: ffffffff8f733a90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 net/core/net_namespace.c:594
#3: ffffffff8f748d28 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xae/0x3b0 drivers/net/ppp/ppp_generic.c:1131
8 locks held by kworker/1:1H/57:
3 locks held by kworker/u8:5/762:
#0:
ffff88802a19c148
((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
#1: ffffc900038bfd80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
#2: ffffffff8f748d28 (rtnl_mutex){+.+.}-{3:3}
, at: addrconf_dad_work+0xcf/0x1500 net/ipv6/addrconf.c:4193
3 locks held by kworker/u8:6/966:
#0:
ffff88802adfa148
((wq_completion)bat_events
){+.+.}-{0:0}
, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:559
#1:
ffff8880b9228a08
(
&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900 kernel/sched/psi.c:988
#2: ffffffff94ce6be0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_check_no_obj_freed lib/debugobjects.c:978 [inline]
#2: ffffffff94ce6be0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x1d0/0x600 lib/debugobjects.c:1019
6 locks held by kworker/0:3/1155:
#0: ffff88801bab9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
#1:
ffffc90004767d80
((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
#2:
ffff888023dd5190
(
&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: hub_event+0x1c1/0x4e20 drivers/usb/core/hub.c:5849
#3: ffff88807849f190
(
&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: __device_attach+0x7f/0x4b0 drivers/base/dd.c:1003
#4:
ffff888020736160
(
&dev->mutex){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: __device_attach+0x7f/0x4b0 drivers/base/dd.c:1003
#5: ffffffff8efcfae8 (input_mutex){+.+.}-{3:3}, at: input_register_device+0xa2b/0x1140 drivers/input/input.c:2463
1 lock held by dhcpcd/4748:
#0:
ffffffff8f748d28 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x26e/0x1f10 net/ipv4/devinet.c:1101
2 locks held by getty/4840:
#0:
ffff88802ad690a0
(&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2211
3 locks held by kworker/1:3/5125:
2 locks held by kworker/1:4/5156:
3 locks held by kworker/0:4/5217:
#0:
ffff888015480948
(
(wq_completion)events
){+.+.}-{0:0}
, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
#1:
ffffc90003327d80 (
(linkwatch_work).work
){+.+.}-{0:0}
, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
#2: ffffffff8f748d28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 net/core/link_watch.c:276
4 locks held by udevd/5914:
#0:
ffff888022397418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182
#1: ffff88802524ec88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
#2: ffff888023d9f878 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
#3:
ffff88802d5c3190
(
&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: uevent_show+0x188/0x3b0 drivers/base/core.c:2743
3 locks held by kworker/0:6/5931:
#0:
ffff888015480948
(
(wq_completion)events
){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
#1: ffffc900020bfd80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
#2: ffffffff8f748d28 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104
6 locks held by kworker/1:5/5993:
9 locks held by kworker/1:6/6023:
7 locks held by kworker/1:7/6027:
4 locks held by udevd/6039:
#0:
ffff8880234179e0
(
&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182
#1: ffff88807a50f888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
#2: ffff88801e195e18 (kn->active#19){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
#3: ffff88807849f190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:1014 [inline]
#3: ffff88807849f190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
1 lock held by syz-executor.2/6050:
#0: ffffffff8f748d28 (rtnl_mutex){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:79 [inline]
, at: rtnetlink_rcv_msg+0x372/0xea0 net/core/rtnetlink.c:6632
8 locks held by syz-executor.4/6052:
#0:
ffff88801e174420 (
sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 fs/read_write.c:643
#1: ffff88806725b888
(
&of->mutex
){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x281/0x500 fs/kernfs/file.c:325
#2:
ffff88802298f4b8 (
kn->active#55){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a4/0x500 fs/kernfs/file.c:326
#3: ffffffff8ed83e28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 drivers/net/netdevsim/bus.c:216
#4:
ffff88801f7990e8
(
&dev->mutex){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: __device_driver_lock drivers/base/dd.c:1093 [inline]
, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1290
#5:
ffff888022a3b250
(
&devlink->lock_key#7){+.+.}-{3:3}, at: nsim_drv_remove+0x4a/0x1d0 drivers/net/netdevsim/dev.c:1672
#6:
ffffffff8f748d28
(
rtnl_mutex){+.+.}-{3:3}
, at: nsim_destroy+0x6f/0x6a0 drivers/net/netdevsim/netdev.c:773
#7:
ffffffff8da555d0 (cpu_hotplug_lock){++++}-{0:0}, at: flush_all_backlogs net/core/dev.c:5984 [inline]
ffffffff8da555d0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x531/0x19f0 net/core/dev.c:11201
1 lock held by syz-executor.2/6082:
#0: ffffffff8f748d28
(
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:79 [inline]
, at: rtnetlink_rcv_msg+0x372/0xea0 net/core/rtnetlink.c:6632
1 lock held by syz-executor.4/6083:
#0:
ffffffff8f748d28
(rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline]
(rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 net/core/rtnetlink.c:6632
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114
nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xf86/0x1240 kernel/hung_task.c:379
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 0 to CPUs 1:
yealink 1-1:36.0: urb_ctl_callback - urb status -71
yealink 1-1:36.0: urb_irq_callback - urb status -71
yealink 1-1:36.0: unexpected response 0
NMI backtrace for cpu 1
CPU: 1 PID: 6023 Comm: kworker/1:6 Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Workqueue: events_power_efficient wg_ratelimiter_gc_entries
RIP: 0010:__sanitizer_cov_trace_switch+0x3b/0x90 kernel/kcov.c:341
Code: 53 48 8b 46 08 48 83 f8 20 74 6b 77 48 48 83 f8 08 74 5b 48 83 f8 10 75 2f 41 bd 03 00 00 00 4c 8b 75 00 31 db 4d 85 f6 74 1e <48> 8b 74 dd 10 4c 89 e2 4c 89 ef 48 83 c3 01 48 8b 4c 24 28 e8 8c
RSP: 0018:ffffc90000a16ec0 EFLAGS: 00000002
RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffffffff8ad9ac70
RDX: ffff88801fea9e00 RSI: 0000000000000003 RDI: 0000000000000001
RBP: ffffffff8c81b180 R08: 0000000000000001 R09: 0000000000000003
R10: 0000000000000000 R11: 0000000000140090 R12: 0000000000000000
R13: 0000000000000001 R14: 0000000000000008 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fef43cd62a0 CR3: 000000000d97a000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
vsnprintf+0x160/0x1880 lib/vsprintf.c:2780
sprintf+0xcd/0x110 lib/vsprintf.c:3028
print_time kernel/printk/printk.c:1327 [inline]
info_print_prefix+0x25c/0x350 kernel/printk/printk.c:1353
record_print_text+0x141/0x400 kernel/printk/printk.c:1402
printk_get_next_message+0x2a6/0x670 kernel/printk/printk.c:2855
console_emit_next_record kernel/printk/printk.c:2895 [inline]
console_flush_all+0x3b2/0xd70 kernel/printk/printk.c:2994
console_unlock+0xae/0x290 kernel/printk/printk.c:3063
vprintk_emit kernel/printk/printk.c:2345 [inline]
vprintk_emit+0x11a/0x5a0 kernel/printk/printk.c:2300
dev_vprintk_emit drivers/base/core.c:4909 [inline]
dev_printk_emit+0xfb/0x140 drivers/base/core.c:4920
__dev_printk+0xf5/0x270 drivers/base/core.c:4932
_dev_err+0xe5/0x120 drivers/base/core.c:4975
urb_irq_callback+0x12c/0x700 drivers/input/misc/yealink.c:433
__usb_hcd_giveback_urb+0x389/0x6e0 drivers/usb/core/hcd.c:1650
usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1734
dummy_timer+0x17f6/0x3900 drivers/usb/gadget/udc/dummy_hcd.c:1987
__run_hrtimer kernel/time/hrtimer.c:1687 [inline]
__hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1751
hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1813
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
__sysvec_apic_timer_interrupt+0x10f/0x450 arch/x86/kernel/apic/apic.c:1049
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0x43/0xb0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x60 kernel/kcov.c:203
Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 14 f5 75 7e 65 8b 05 15 f5 75 7e a9 00 01 ff 00 <48> 8b 34 24 74 0f f6 c4 01 74 35 8b 82 1c 16 00 00 85 c0 74 2b 8b
RSP: 0018:ffffc90000a17db0 EFLAGS: 00000206
RAX: 0000000080000304 RBX: ffffc90000a17e38 RCX: ffffffff813cddc1
RDX: ffff88801fea9e00 RSI: 0000000000000009 RDI: 0000000000000001
RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000009
R10: 0000000000000005 R11: ffff8880b93293d8 R12: ffffffff91156040
R13: 0000000000000005 R14: ffffffff91156044 R15: ffffc90000a17e6d
unwind_next_frame+0x6ee/0x23a0 arch/x86/kernel/unwind_orc.c:517
arch_stack_walk+0x100/0x170 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
kasan_save_track+0x14/0x30 mm/kasan/common.c:68
poison_kmalloc_redzone mm/kasan/common.c:370 [inline]
__kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:387
kasan_kmalloc include/linux/kasan.h:211 [inline]
__do_kmalloc_node mm/slub.c:4122 [inline]
__kmalloc_noprof+0x1ec/0x410 mm/slub.c:4135
kmalloc_noprof include/linux/slab.h:664 [inline]
kzalloc_noprof include/linux/slab.h:778 [inline]
ieee802_11_parse_elems_full+0xea/0x15d0 net/mac80211/parse.c:880
ieee802_11_parse_elems_crc net/mac80211/ieee80211_i.h:2332 [inline]
ieee802_11_parse_elems net/mac80211/ieee80211_i.h:2339 [inline]
ieee80211_inform_bss+0xfd/0x1140 net/mac80211/scan.c:79
rdev_inform_bss net/wireless/rdev-ops.h:418 [inline]
cfg80211_inform_single_bss_data+0x87d/0x2080 net/wireless/scan.c:2293
cfg80211_inform_bss_data+0x205/0x39d0 net/wireless/scan.c:3117
cfg80211_inform_bss_frame_data+0x271/0x7c0 net/wireless/scan.c:3207
ieee80211_bss_info_update+0x311/0xab0 net/mac80211/scan.c:226
ieee80211_scan_rx+0x47c/0xad0 net/mac80211/scan.c:340
__ieee80211_rx_handle_packet net/mac80211/rx.c:5222 [inline]
ieee80211_rx_list+0x1be1/0x2e90 net/mac80211/rx.c:5459
ieee80211_rx_napi+0xdd/0x400 net/mac80211/rx.c:5482
ieee80211_rx include/net/mac80211.h:5093 [inline]
ieee80211_handle_queued_frames+0xd5/0x130 net/mac80211/main.c:437
tasklet_action_common.constprop.0+0x24c/0x3e0 kernel/softirq.c:785
handle_softirqs+0x216/0x8f0 kernel/softirq.c:554
__do_softirq kernel/softirq.c:588 [inline]
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu kernel/softirq.c:637 [inline]
irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:rcu_dynticks_curr_cpu_in_eqs include/linux/context_tracking.h:122 [inline]
RIP: 0010:rcu_is_watching+0x41/0xc0 kernel/rcu/tree.c:724
Code: 03 00 83 f8 07 89 c5 0f 87 82 00 00 00 48 8d 3c ed 40 db 4c 8d 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <75> 5c 48 03 1c ed 40 db 4c 8d 48 b8 00 00 00 00 00 fc ff df 48 89
RSP: 0018:ffffc9000380fb80 EFLAGS: 00000246
RAX: dffffc0000000000 RBX: 0000000000037ee8 RCX: ffffffff816bcb99
RDX: 1ffffffff1a99b69 RSI: ffffffff8b8ff8c0 RDI: ffffffff8d4cdb48
RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff1fc887a
R10: ffffffff8fe443d7 R11: 0000000000000002 R12: ffffffff8eb90678
R13: ffffffff8eb904c0 R14: 000000000003d90c R15: 0000000000000109
trace_lock_release include/trace/events/lock.h:69 [inline]
lock_release+0x4cc/0x6c0 kernel/locking/lockdep.c:5765
__raw_spin_unlock include/linux/spinlock_api_smp.h:141 [inline]
_raw_spin_unlock+0x16/0x50 kernel/locking/spinlock.c:186
spin_unlock include/linux/spinlock.h:391 [inline]
wg_ratelimiter_gc_entries+0x2b0/0x520 drivers/net/wireguard/ratelimiter.c:76
process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231
process_scheduled_works kernel/workqueue.c:3312 [inline]
worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
yealink 1-1:36.0: urb_ctl_callback - urb status -71
yealink 1-1:36.0: urb_irq_callback - urb status -71
yealink 1-1:36.0: unexpected response 0
yealink 1-1:36.0: urb_ctl_callback - urb status -71
yealink 1-1:36.0: urb_irq_callback - urb status -71
yealink 1-1:36.0: unexpected response 0
yealink 1-1:36.0: urb_ctl_callback - urb status -71