INFO: task khidpd_15c20002:8853 blocked for more than 143 seconds.
Not tainted 6.12.0-rc7-syzkaller-00135-g8ffade77b633 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:khidpd_15c20002 state:D stack:26008 pid:8853 tgid:8853 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0x184f/0x4c30 kernel/sched/core.c:6693
__schedule_loop kernel/sched/core.c:6770 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6785
schedule_timeout+0xb0/0x310 kernel/time/timer.c:2591
do_wait_for_common kernel/sched/completion.c:95 [inline]
__wait_for_common kernel/sched/completion.c:116 [inline]
wait_for_common kernel/sched/completion.c:127 [inline]
wait_for_completion+0x355/0x620 kernel/sched/completion.c:148
__flush_work+0xa37/0xc50 kernel/workqueue.c:4217
__cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4337
hidp_session_remove+0x64/0x260 net/bluetooth/hidp/core.c:1169
l2cap_unregister_user+0x19c/0x1c0 net/bluetooth/l2cap_core.c:1732
hidp_session_thread+0x450/0x490 net/bluetooth/hidp/core.c:1304
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Showing all locks held in the system:
1 lock held by khungtaskd/30:
#0:
ffffffff8e937da0
(rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
(rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
(rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6720
6 locks held by kworker/u8:2/35:
#0:
ffff88801baed948
((wq_completion)netns
){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline]
){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 kernel/workqueue.c:3310
#1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3205 [inline]
#1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 kernel/workqueue.c:3310
#2: ffffffff8fcc7110 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:580
#3: ffffffff8fcd3c48 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 drivers/net/wireguard/device.c:414
#4: ffff8880572f5428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_netns_pre_exit+0xba/0x1e0 drivers/net/wireguard/device.c:419
#5: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline]
#5: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:976
2 locks held by getty/5595:
#0:
ffff8880317020a0
(
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1:
ffffc900032532f0
(&ldata->atomic_read_lock
){+.+.}-{3:3}
, at: n_tty_read+0x6a6/0x1e00 drivers/tty/n_tty.c:2211
8 locks held by kworker/1:3/5887:
3 locks held by kworker/u8:8/6836:
#0:
ffff88801ac89148
((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline]
((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 kernel/workqueue.c:3310
#1:
ffffc9000c5cfd00
(
(linkwatch_work).work
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3205 [inline]
, at: process_scheduled_works+0x976/0x1850 kernel/workqueue.c:3310
#2:
ffffffff8fcd3c48
(
rtnl_mutex
){+.+.}-{3:3}
, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276
2 locks held by khidpd_15c20002/8853:
#0:
ffff8880347c4078
(
&hdev->lock
){+.+.}-{3:3}
, at: l2cap_unregister_user+0x6a/0x1c0 net/bluetooth/l2cap_core.c:1726
#1:
ffffffff8fe68890
(
hidp_session_sem
){++++}-{3:3}
, at: hidp_session_remove+0x2d/0x260 net/bluetooth/hidp/core.c:1165
1 lock held by syz.0.991/9353:
#0:
ffffffff8fe68890
(
hidp_session_sem
){++++}-{3:3}
, at: hidp_session_find+0x1c/0x110 net/bluetooth/hidp/core.c:1026
3 locks held by syz-executor/9451:
#0:
ffff888061324d80
(
&hdev->req_lock
){+.+.}-{3:3}
, at: hci_dev_do_close net/bluetooth/hci_core.c:481 [inline]
, at: hci_unregister_dev+0x203/0x510 net/bluetooth/hci_core.c:2698
#1:
ffff888061324078
(
&hdev->lock){+.+.}-{3:3}
, at: hci_dev_close_sync+0x5c8/0x11c0 net/bluetooth/hci_sync.c:5193
#2:
ffffffff8fe405a8
(
hci_cb_list_lock
){+.+.}-{3:3}
, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:1972 [inline]
, at: hci_conn_hash_flush+0xa6/0x240 net/bluetooth/hci_conn.c:2592
3 locks held by syz.4.1032/9508:
#0:
ffff888071bc0258
(sk_lock-AF_BLUETOOTH-BTPROTO_HCI
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1611 [inline]
, at: hci_sock_sendmsg+0x57a/0x11c0 net/bluetooth/hci_sock.c:1816
#1:
ffffffff8fe4ef68
(
mgmt_chan_list_lock
){+.+.}-{3:3}
, at: hci_sock_sendmsg+0x617/0x11c0 net/bluetooth/hci_sock.c:1829
#2: ffff8880347c4078
(
&hdev->lock
){+.+.}-{3:3}
, at: set_debug_keys+0xd9/0x620 net/bluetooth/mgmt.c:6945
2 locks held by syz.1.1047/9564:
#0:
ffff88806440b258
(
sk_lock-AF_BLUETOOTH-BTPROTO_HCI
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1611 [inline]
, at: hci_sock_bind+0x149/0x1150 net/bluetooth/hci_sock.c:1202
#1:
ffffffff8fe4ef68
(
mgmt_chan_list_lock
){+.+.}-{3:3}
, at: hci_mgmt_chan_find net/bluetooth/hci_sock.c:860 [inline]
, at: hci_sock_bind+0x3b2/0x1150 net/bluetooth/hci_sock.c:1406
3 locks held by kworker/u8:9/9870:
#0:
ffff888030b81148
(
(wq_completion)ipv6_addrconf
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3204 [inline]
, at: process_scheduled_works+0x93b/0x1850 kernel/workqueue.c:3310
#1:
ffffc9000457fd00
((work_completion)(&(&ifa->dad_work)->work)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3205 [inline]
, at: process_scheduled_works+0x976/0x1850 kernel/workqueue.c:3310
#2: ffffffff8fcd3c48
(
rtnl_mutex
){+.+.}-{3:3}
, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4196
2 locks held by syz.7.1203/10224:
#0:
ffff888063c2d258
(
sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1611 [inline]
sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_bind+0x149/0x1150 net/bluetooth/hci_sock.c:1202
#1: ffffffff8fe4ef68 (mgmt_chan_list_lock){+.+.}-{3:3}, at: hci_mgmt_chan_find net/bluetooth/hci_sock.c:860 [inline]
#1: ffffffff8fe4ef68 (mgmt_chan_list_lock){+.+.}-{3:3}, at: hci_sock_bind+0x3b2/0x1150 net/bluetooth/hci_sock.c:1406
1 lock held by syz-executor/10404:
#0: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:329 [inline]
#0: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:976
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00135-g8ffade77b633 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xff4/0x1040 kernel/hung_task.c:379
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5887 Comm: kworker/1:3 Not tainted 6.12.0-rc7-syzkaller-00135-g8ffade77b633 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
Workqueue: events hidp_session_dev_work
RIP: 0010:io_serial_in+0x76/0xb0 drivers/tty/serial/8250/8250_port.c:406
Code: 80 a1 49 fc 89 e9 41 d3 e6 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 c1 7d b3 fc 44 03 33 44 89 f2 ec <0f> b6 c0 5b 41 5e 41 5f 5d c3 cc cc cc cc 89 e9 80 e1 07 38 c1 7c
RSP: 0018:ffffc900042b6c78 EFLAGS: 00000002
RAX: 1ffffffff34e3900 RBX: ffffffff9a71cee0 RCX: 0000000000000000
RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
RBP: 0000000000000000 R08: ffffffff854b4886 R09: 1ffff11004911046
R10: dffffc0000000000 R11: ffffffff854b4840 R12: dffffc0000000000
R13: ffffffff9a417ef0 R14: 00000000000003fd R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffffffff7000000 CR3: 000000000e734000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
serial_in drivers/tty/serial/8250/8250.h:137 [inline]
serial_lsr_in drivers/tty/serial/8250/8250.h:159 [inline]
wait_for_lsr drivers/tty/serial/8250/8250_port.c:2068 [inline]
serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3315 [inline]
serial8250_console_write+0x1373/0x1ed0 drivers/tty/serial/8250/8250_port.c:3393
console_emit_next_record kernel/printk/printk.c:3092 [inline]
console_flush_all+0x869/0xeb0 kernel/printk/printk.c:3180
__console_flush_and_unlock kernel/printk/printk.c:3239 [inline]
console_unlock+0x14f/0x3b0 kernel/printk/printk.c:3279
vprintk_emit+0x730/0xa10 kernel/printk/printk.c:2407
dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4942
dev_printk_emit+0xdd/0x120 drivers/base/core.c:4953
_dev_warn+0x122/0x170 drivers/base/core.c:5009
hid_parser_main+0x71f/0xaa0 drivers/hid/hid-core.c:632
hid_open_report+0xafa/0x14a0 drivers/hid/hid-core.c:1276
hid_parse include/linux/hid.h:1120 [inline]
hid_generic_probe+0x3d/0x90 drivers/hid/hid-generic.c:63
__hid_device_probe drivers/hid/hid-core.c:2699 [inline]
hid_device_probe+0x26e/0x4f0 drivers/hid/hid-core.c:2736
really_probe+0x2b8/0xad0 drivers/base/dd.c:658
__driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800
driver_probe_device+0x50/0x430 drivers/base/dd.c:830
__device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958
bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:459
__device_attach+0x333/0x520 drivers/base/dd.c:1030
bus_probe_device+0x189/0x260 drivers/base/bus.c:534
device_add+0x856/0xbf0 drivers/base/core.c:3672
hid_add_device+0x3b6/0x520 drivers/hid/hid-core.c:2882
hidp_session_dev_add net/bluetooth/hidp/core.c:856 [inline]
hidp_session_dev_work+0x46/0x160 net/bluetooth/hidp/core.c:895
process_one_work kernel/workqueue.c:3229 [inline]
process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
worker_thread+0x870/0xd30 kernel/workqueue.c:3391
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244