INFO: task syz.5.21:521 blocked for more than 122 seconds.
Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.21 state:D stack:0 pid:521 tgid:521 ppid:476 task_flags:0x400040 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5396 [inline]
__schedule+0xfd2/0x1c60 kernel/sched/core.c:6785
__schedule_loop kernel/sched/core.c:6863 [inline]
schedule+0xe0/0x280 kernel/sched/core.c:6878
schedule_timeout+0xb1/0x230 kernel/time/sleep_timeout.c:75
do_wait_for_common kernel/sched/completion.c:95 [inline]
__wait_for_common kernel/sched/completion.c:116 [inline]
wait_for_common kernel/sched/completion.c:127 [inline]
wait_for_completion+0x23a/0x4b0 kernel/sched/completion.c:148
__flush_work+0x6a0/0x860 kernel/workqueue.c:4246
__cancel_work_sync kernel/workqueue.c:4366 [inline]
cancel_work_sync+0xac/0xe0 kernel/workqueue.c:4403
uhid_dev_destroy drivers/hid/uhid.c:584 [inline]
uhid_char_release+0xa7/0x600 drivers/hid/uhid.c:662
__fput+0x3e8/0xa50 fs/file_table.c:465
____fput+0x20/0x30 fs/file_table.c:493
task_work_run+0x1e2/0x250 kernel/task_work.c:227
resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
exit_to_user_mode_loop+0xa3/0xd0 kernel/entry/common.c:114
exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]
syscall_exit_to_user_mode_work include/linux/entry-common.h:414 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:449 [inline]
do_syscall_64+0x134/0x160 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fa21578e929
RSP: 002b:00007ffe84814458 EFLAGS: 00000246
ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 000000000000d710 RCX: 00007fa21578e929
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007fa2159b7ba0 R08: 0000000000000001 R09: 000000038481474f
R10: 00007fa215600000 R11: 0000000000000246 R12: 00007fa2159b5fac
R13: 00007fa2159b5fa0 R14: ffffffffffffffff R15: 00007ffe84814570
INFO: task syz.2.18:525 blocked for more than 123 seconds.
Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.18 state:D
stack:0 pid:525 tgid:525 ppid:478 task_flags:0x400040 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5396 [inline]
__schedule+0xfd2/0x1c60 kernel/sched/core.c:6785
__schedule_loop kernel/sched/core.c:6863 [inline]
schedule+0xe0/0x280 kernel/sched/core.c:6878
schedule_timeout+0xb1/0x230 kernel/time/sleep_timeout.c:75
do_wait_for_common kernel/sched/completion.c:95 [inline]
__wait_for_common kernel/sched/completion.c:116 [inline]
wait_for_common kernel/sched/completion.c:127 [inline]
wait_for_completion+0x23a/0x4b0 kernel/sched/completion.c:148
__flush_work+0x6a0/0x860 kernel/workqueue.c:4246
__cancel_work_sync kernel/workqueue.c:4366 [inline]
cancel_work_sync+0xac/0xe0 kernel/workqueue.c:4403
uhid_dev_destroy drivers/hid/uhid.c:584 [inline]
uhid_char_release+0xa7/0x600 drivers/hid/uhid.c:662
__fput+0x3e8/0xa50 fs/file_table.c:465
____fput+0x20/0x30 fs/file_table.c:493
task_work_run+0x1e2/0x250 kernel/task_work.c:227
resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
exit_to_user_mode_loop+0xa3/0xd0 kernel/entry/common.c:114
exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]
syscall_exit_to_user_mode_work include/linux/entry-common.h:414 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:449 [inline]
do_syscall_64+0x134/0x160 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f3b8b38e929
RSP: 002b:00007fff3ded65e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 000000000000d725 RCX: 00007f3b8b38e929
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007f3b8b5b7ba0 R08: 0000000000000001 R09: 000000033ded68df
R10: 00007f3b8b200000 R11: 0000000000000246 R12: 00007f3b8b5b5fac
R13: 00007f3b8b5b5fa0 R14: ffffffffffffffff R15: 00007fff3ded6700
INFO: task syz.4.17:530 blocked for more than 124 seconds.
Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.17 state:D
stack:0 pid:530 tgid:530 ppid:477 task_flags:0x400040 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5396 [inline]
__schedule+0xfd2/0x1c60 kernel/sched/core.c:6785
__schedule_loop kernel/sched/core.c:6863 [inline]
schedule+0xe0/0x280 kernel/sched/core.c:6878
schedule_timeout+0xb1/0x230 kernel/time/sleep_timeout.c:75
do_wait_for_common kernel/sched/completion.c:95 [inline]
__wait_for_common kernel/sched/completion.c:116 [inline]
wait_for_common kernel/sched/completion.c:127 [inline]
wait_for_completion+0x23a/0x4b0 kernel/sched/completion.c:148
__flush_work+0x6a0/0x860 kernel/workqueue.c:4246
__cancel_work_sync kernel/workqueue.c:4366 [inline]
cancel_work_sync+0xac/0xe0 kernel/workqueue.c:4403
uhid_dev_destroy drivers/hid/uhid.c:584 [inline]
uhid_char_release+0xa7/0x600 drivers/hid/uhid.c:662
__fput+0x3e8/0xa50 fs/file_table.c:465
____fput+0x20/0x30 fs/file_table.c:493
task_work_run+0x1e2/0x250 kernel/task_work.c:227
resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
exit_to_user_mode_loop+0xa3/0xd0 kernel/entry/common.c:114
exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]
syscall_exit_to_user_mode_work include/linux/entry-common.h:414 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:449 [inline]
do_syscall_64+0x134/0x160 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7ff78298e929
RSP: 002b:00007ffd76ac4318 EFLAGS: 00000246
ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 000000000000d747 RCX: 00007ff78298e929
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007ff782bb7ba0 R08: 0000000000000001 R09: 0000000376ac460f
R10: 00007ff782800000 R11: 0000000000000246 R12: 00007ff782bb5fac
R13: 00007ff782bb5fa0 R14: ffffffffffffffff R15: 00007ffd76ac4430
INFO: task syz.0.24:532 blocked for more than 126 seconds.
Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.24 state:D
stack:0 pid:532 tgid:532 ppid:475 task_flags:0x400040 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5396 [inline]
__schedule+0xfd2/0x1c60 kernel/sched/core.c:6785
__schedule_loop kernel/sched/core.c:6863 [inline]
schedule+0xe0/0x280 kernel/sched/core.c:6878
schedule_timeout+0xb1/0x230 kernel/time/sleep_timeout.c:75
do_wait_for_common kernel/sched/completion.c:95 [inline]
__wait_for_common kernel/sched/completion.c:116 [inline]
wait_for_common kernel/sched/completion.c:127 [inline]
wait_for_completion+0x23a/0x4b0 kernel/sched/completion.c:148
__flush_work+0x6a0/0x860 kernel/workqueue.c:4246
__cancel_work_sync kernel/workqueue.c:4366 [inline]
cancel_work_sync+0xac/0xe0 kernel/workqueue.c:4403
uhid_dev_destroy drivers/hid/uhid.c:584 [inline]
uhid_char_release+0xa7/0x600 drivers/hid/uhid.c:662
__fput+0x3e8/0xa50 fs/file_table.c:465
____fput+0x20/0x30 fs/file_table.c:493
task_work_run+0x1e2/0x250 kernel/task_work.c:227
resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
exit_to_user_mode_loop+0xa3/0xd0 kernel/entry/common.c:114
exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]
syscall_exit_to_user_mode_work include/linux/entry-common.h:414 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:449 [inline]
do_syscall_64+0x134/0x160 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f3affb8e929
RSP: 002b:00007ffc24ffa148 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 000000000000d759 RCX: 00007f3affb8e929
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007f3affdb7ba0 R08: 0000000000000001 R09: 0000000324ffa43f
R10: 00007f3affa00000 R11: 0000000000000246 R12: 00007f3affdb5fac
R13: 00007f3affdb5fa0 R14: ffffffffffffffff R15: 00007ffc24ffa260
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT bb63ab65bdf5d656ad66d7b0b0b6f8ec46702b47
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
__dump_stack+0x21/0x30 lib/dump_stack.c:94
dump_stack_lvl+0x10b/0x180 lib/dump_stack.c:120
dump_stack+0x19/0x20 lib/dump_stack.c:129
nmi_cpu_backtrace+0x2bd/0x2d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41
trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:307 [inline]
watchdog+0x1043/0x1090 kernel/hung_task.c:470
kthread+0x6f7/0x880 kernel/kthread.c:464
ret_from_fork+0x147/0x1f0 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 1032 Comm: kworker/0:9 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT bb63ab65bdf5d656ad66d7b0b0b6f8ec46702b47
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: events uhid_device_add_worker
RIP: 0010:format_decode+0x23/0xe30 lib/vsprintf.c:2598
Code: 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 d5 49 89 f7 49 89 fe e8 71 e5 14 fc 41 0f b6 df <48> 89 df 48 c7 c6 90 20 9f 87 e8 de ea 14 fc 80 fb 02 4c 89 6d c8
RSP: 0018:ffffc900030c6960 EFLAGS: 00000293
RAX: ffffffff859015ef RBX: 0000000000000000 RCX: ffff888135a0b3c0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff85a95d01
RBP: ffffc900030c69b8 R08: ffffc900030c6ca0 R09: 1ffff92000618d94
R10: dffffc0000000000 R11: fffff52000618d95 R12: ffffc900030c6ca1
R13: ffffc900030c6a18 R14: ffffffff85a95d01 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff88826e785000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2840d81178 CR3: 000000011d07c000 CR4: 00000000003526b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
vsnprintf+0xf7/0xea0 lib/vsprintf.c:2817
sprintf+0xd9/0x120 lib/vsprintf.c:3037
print_time kernel/printk/printk.c:1381 [inline]
info_print_prefix+0x155/0x320 kernel/printk/printk.c:1407
record_print_text+0x154/0x430 kernel/printk/printk.c:1456
printk_get_next_message+0x26d/0x7c0 kernel/printk/printk.c:3024
console_emit_next_record kernel/printk/printk.c:3092 [inline]
console_flush_all+0x3a3/0xaa0 kernel/printk/printk.c:3226
__console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
console_unlock+0xe8/0x270 kernel/printk/printk.c:3325
vprintk_emit+0x27b/0x630 kernel/printk/printk.c:2450
dev_vprintk_emit+0x337/0x3f0 drivers/base/core.c:4917
dev_printk_emit+0xe0/0x130 drivers/base/core.c:4928
__dev_printk+0x179/0x1b0 drivers/base/core.c:4940
_dev_warn+0x10a/0x160 drivers/base/core.c:4984
hid_parser_main+0x8c4/0xe00 drivers/hid/hid-core.c:-1
hid_open_report+0x878/0x1140 drivers/hid/hid-core.c:1328
hid_parse include/linux/hid.h:1133 [inline]
hid_generic_probe+0x42/0x90 drivers/hid/hid-generic.c:66
__hid_device_probe drivers/hid/hid-core.c:2724 [inline]
hid_device_probe+0x3b6/0x750 drivers/hid/hid-core.c:2761
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x2cc/0x880 drivers/base/dd.c:657
__driver_probe_device+0x195/0x280 drivers/base/dd.c:799
driver_probe_device+0x54/0x3f0 drivers/base/dd.c:829
__device_attach_driver+0x2f1/0x4b0 drivers/base/dd.c:957
bus_for_each_drv+0x25e/0x2f0 drivers/base/bus.c:462
__device_attach+0x2b5/0x3a0 drivers/base/dd.c:1029
device_initial_probe+0x1e/0x30 drivers/base/dd.c:1078
bus_probe_device+0x188/0x270 drivers/base/bus.c:537
device_add+0x803/0xbf0 drivers/base/core.c:3692
hid_add_device+0x39b/0x560 drivers/hid/hid-core.c:2907
uhid_device_add_worker+0x49/0xf0 drivers/hid/uhid.c:73
process_one_work kernel/workqueue.c:3238 [inline]
process_scheduled_works+0x7d2/0x1040 kernel/workqueue.c:3321
worker_thread+0xc4e/0x1270 kernel/workqueue.c:3402
kthread+0x6f7/0x880 kernel/kthread.c:464
ret_from_fork+0x147/0x1f0 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245