Extracting prog: 7m20.704446652s
Minimizing prog: 12m19.492572463s
Simplifying prog options: 12m18.027577947s
Extracting C: 5m15.950165865s
Simplifying C: 0s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program did not crash
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program crashed: INFO: rcu detected stall in worker_thread
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES64], 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program crashed: INFO: rcu detected stall in worker_thread
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program crashed: INFO: rcu detected stall in worker_thread
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)
program crashed: INFO: task hung in __input_unregister_device
validation run: crashed=true
reproducing took 1h34m43.244849661s
repro crashed as (corrupted=false):
INFO: task kworker/1:1:29 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1 state:D
stack:23600 pid:29 tgid:29 ppid:2 task_flags:0x4288060 flags:0x00080000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
__schedule_loop kernel/sched/core.c:7311 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7326
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383
__mutex_lock_common kernel/locking/mutex.c:726 [inline]
__mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821
class_mutex_constructor include/linux/mutex.h:253 [inline]
__input_unregister_device+0x2d8/0x650 drivers/input/input.c:2204
input_unregister_device+0x9b/0x100 drivers/input/input.c:2438
usb_cleanup+0x7b/0x1c0 drivers/input/misc/yealink.c:784
usb_disconnect+0x42/0x70 drivers/input/misc/yealink.c:802
usb_unbind_interface+0x295/0x9f0 drivers/usb/core/driver.c:458
device_remove drivers/base/dd.c:618 [inline]
__device_release_driver drivers/base/dd.c:1349 [inline]
device_release_driver_internal+0x4f5/0x880 drivers/base/dd.c:1372
bus_remove_device+0x444/0x560 drivers/base/bus.c:664
device_del+0x524/0x8f0 drivers/base/core.c:3961
usb_disable_device+0x3d4/0x8d0 drivers/usb/core/message.c:1478
usb_disconnect+0x346/0x9a0 drivers/usb/core/hub.c:2345
hub_port_connect drivers/usb/core/hub.c:5415 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5715 [inline]
port_event drivers/usb/core/hub.c:5879 [inline]
hub_event+0x1bbb/0x4d30 drivers/usb/core/hub.c:5961
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
INFO: task kworker/0:9:6017 blocked for more than 144 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:9 state:D
stack:25200 pid:6017 tgid:6017 ppid:2 task_flags:0x4208060 flags:0x00080000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
__schedule_loop kernel/sched/core.c:7311 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7326
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383
rwsem_down_write_slowpath+0x87d/0x1080 kernel/locking/rwsem.c:1215
__down_write_common kernel/locking/rwsem.c:1347 [inline]
__down_write kernel/locking/rwsem.c:1356 [inline]
down_write+0x1bc/0x200 kernel/locking/rwsem.c:1632
kernfs_add_one+0x41/0x5e0 fs/kernfs/dir.c:825
__kernfs_create_file+0x22b/0x2e0 fs/kernfs/file.c:1079
sysfs_add_file_mode_ns+0x237/0x300 fs/sysfs/file.c:316
create_files fs/sysfs/group.c:82 [inline]
internal_create_group+0x679/0x1180 fs/sysfs/group.c:189
internal_create_groups fs/sysfs/group.c:229 [inline]
sysfs_create_groups+0x59/0x120 fs/sysfs/group.c:255
device_add_groups drivers/base/core.c:2907 [inline]
device_add_attrs+0x1b1/0x600 drivers/base/core.c:2982
device_add+0x488/0xb80 drivers/base/core.c:3711
usb_set_configuration+0x1ad8/0x2180 drivers/usb/core/message.c:2268
usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:250
usb_probe_device+0x1c3/0x3b0 drivers/usb/core/driver.c:291
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x254/0xae0 drivers/base/dd.c:706
__driver_probe_device+0x1e8/0x360 drivers/base/dd.c:868
driver_probe_device+0x4f/0x240 drivers/base/dd.c:898
__device_attach_driver+0x270/0x410 drivers/base/dd.c:1026
bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500
__device_attach+0x2c4/0x450 drivers/base/dd.c:1098
device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1153
bus_probe_device+0x12a/0x220 drivers/base/bus.c:620
device_add+0x7d7/0xb80 drivers/base/core.c:3772
usb_new_device+0x9aa/0x1690 drivers/usb/core/hub.c:2703
hub_port_connect drivers/usb/core/hub.c:5575 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5715 [inline]
port_event drivers/usb/core/hub.c:5879 [inline]
hub_event+0x28e8/0x4d30 drivers/usb/core/hub.c:5961
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Showing all locks held in the system:
6 locks held by kworker/0:1/10:
4 locks held by kworker/1:0/24:
#0:
ffff8880552ae940
(
(wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
(wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc900001e7c40
(
(work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffff88802d53d440
(&wg->static_identity.lock
){++++}-{4:4}
, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598
#3: ffff8880347b5270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 drivers/net/wireguard/noise.c:632
6 locks held by kworker/1:1/29:
#0:
ffff8880202ce140
((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc90000a47c40
(
(work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffff88802a7051d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5907
#3:
ffff88803565e1d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: usb_disconnect+0xfc/0x9a0 drivers/usb/core/hub.c:2336
#4:
ffff88802c5151a0
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: __device_driver_lock drivers/base/dd.c:1171 [inline]
, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369
#5:
ffffffff8faa04e0
(
input_mutex
){+.+.}-{4:4}
, at: class_mutex_constructor include/linux/mutex.h:253 [inline]
, at: __input_unregister_device+0x2d8/0x650 drivers/input/input.c:2204
6 locks held by kworker/1:2/30:
#0:
ffff8880202ce140 (
(wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc90000a67c40
(
(work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffff88802a9e41d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5907
#3:
ffff8880547d21d8
(
&dev->mutex
){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
#4:
ffff8880569dc1a0
(
&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
#5:
ffffffff8faa04e0
(
input_mutex
){+.+.}-{4:4}
, at: class_mutex_intr_constructor include/linux/mutex.h:255 [inline]
, at: input_register_device+0xa7f/0x1150 drivers/input/input.c:2394
1 lock held by khungtaskd/32:
#0:
ffffffff8eb59c60
(
rcu_read_lock
){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
3 locks held by kworker/u8:4/65:
#0:
ffff888031b74140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
ffff888031b74140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc9000203fc40
(
(work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
(work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2: ffffffff900283c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#2: ffffffff900283c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4769
3 locks held by kworker/u8:8/1105:
#0: ffff88801b064140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
#0: ffff88801b064140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc90005547c40
(
(linkwatch_work).work
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffffffff900283c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313
4 locks held by kworker/u8:9/1145:
#0:
ffff888036baa940
((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc90005687c40
(
(work_completion)(&peer->transmit_handshake_work)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2: ffff88802d53d440 (&wg->static_identity.lock
){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 drivers/net/wireguard/noise.c:529
#3:
ffff8880347b5270
(&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 drivers/net/wireguard/noise.c:530
2 locks held by kworker/0:2/1209:
1 lock held by udevd/4974:
#0: ffff88801c28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 fs/kernfs/dir.c:1217
2 locks held by kworker/0:3/5340:
2 locks held by getty/5366:
#0:
ffff88803683e0a0
(
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1:
ffffc900032332e8
(
&ldata->atomic_read_lock
){+.+.}-{4:4}
, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211
1 lock held by udevd/5635:
#0:
ffff88801c28d180
(
&root->kernfs_rwsem
){++++}-{4:4}
, at: kernfs_dop_revalidate+0x9e/0x650 fs/kernfs/dir.c:1217
4 locks held by udevd/5649:
#0:
ffff8880212d6878
(&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 fs/seq_file.c:183
#1: ffff88802dd8bc80 (&of->mutex#2){+.+.}-{4:4}
, at: kernfs_seq_start+0x5d/0x420 fs/kernfs/file.c:165
#2:
ffff8880728f8a58
(
kn->active
#30
){.+.+}-{0:0}
, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline]
, at: kernfs_seq_start+0xb2/0x420 fs/kernfs/file.c:166
#3:
ffff88803565e1d8
(
&dev->mutex){....}-{4:4}, at: device_lock_interruptible include/linux/device.h:1109 [inline]
&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
4 locks held by udevd/5678:
#0:
ffff888078abb098
(
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xa4/0xca0 fs/seq_file.c:183
#1:
ffff88805260e480
(
&of->mutex
#2
){+.+.}-{4:4}
, at: kernfs_seq_start+0x5d/0x420 fs/kernfs/file.c:165
#2: ffff8880729c7c38 (kn->active#30){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline]
#2: ffff8880729c7c38 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 fs/kernfs/file.c:166
#3: ffff8880565e71d8 (&dev->mutex){....}-{4:4}, at: device_lock_interruptible include/linux/device.h:1109 [inline]
#3: ffff8880565e71d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
1 lock held by syz-executor/5747:
#0:
ffff8880550c0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline]
ffff8880550c0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678
1 lock held by syz-executor/5754:
#0:
ffff88801c28d180
(
&root->kernfs_rwsem
){++++}-{4:4}
, at: kernfs_dop_revalidate+0x9e/0x650 fs/kernfs/dir.c:1217
2 locks held by syz-executor/5761:
#0:
ffff8880550d4ea0
(&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline]
(&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678
#1:
ffffffff8eb5ff68
(
rcu_state.exp_mutex
){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline]
){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 kernel/rcu/tree_exp.h:961
1 lock held by syz-executor/5766:
#0:
ffff888055114ea0 (&hdev->req_lock){+.+.}-{4:4}
, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline]
, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678
1 lock held by syz-executor/5769:
#0:
ffff8880550f4ea0
(
&hdev->req_lock
){+.+.}-{4:4}
, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline]
, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678
3 locks held by kworker/0:5/5901:
6 locks held by kworker/1:4/5914:
#0:
ffff8880202ce140
(
(wq_completion)usb_hub_wq
){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc9000379fc40 ((work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffff88802a93b1d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5907
#3:
ffff8880770e11d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
#4:
ffff888070b0f1a0
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
#5:
ffffffff8faa04e0
(
input_mutex
){+.+.}-{4:4}
, at: class_mutex_intr_constructor include/linux/mutex.h:255 [inline]
, at: input_register_device+0xa7f/0x1150 drivers/input/input.c:2394
12 locks held by kworker/0:6/5921:
6 locks held by kworker/1:5/5930:
#0:
ffff8880202ce140
(
(wq_completion)usb_hub_wq
){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1: ffffc9000371fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
#1: ffffc9000371fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffff88802a6ab1d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5907
#3:
ffff8880356581d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: usb_disconnect+0xfc/0x9a0 drivers/usb/core/hub.c:2336
#4: ffff88802d3af1a0 (&dev->mutex){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: __device_driver_lock drivers/base/dd.c:1171 [inline]
, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369
#5: ffffffff8faa04e0 (input_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline]
#5: ffffffff8faa04e0 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x2d8/0x650 drivers/input/input.c:2204
6 locks held by kworker/1:6/5999:
#0:
ffff8880202ce140
(
(wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc9000362fc40
(
(work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffff88802a35d1d8
(
&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5907
#3:
ffff8880565e71d8 (&dev->mutex){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: usb_disconnect+0xfc/0x9a0 drivers/usb/core/hub.c:2336
#4:
ffff8880305381a0 (&dev->mutex){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: __device_driver_lock drivers/base/dd.c:1171 [inline]
, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369
#5:
ffffffff8faa04e0
(
input_mutex
){+.+.}-{4:4}
, at: class_mutex_constructor include/linux/mutex.h:253 [inline]
, at: __input_unregister_device+0x2d8/0x650 drivers/input/input.c:2204
4 locks held by kworker/1:7/6001:
#0:
ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1: ffffc9000361fc40 (kernfs_notify_work){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2: ffff88801c28d2a0 (
&root->kernfs_supers_rwsem
){++++}-{4:4}
, at: kernfs_notify_workfn+0xf0/0x600 fs/kernfs/file.c:925
#3:
ffff88801c28d180
(
&root->kernfs_rwsem
){++++}-{4:4}
, at: kernfs_notify_workfn+0x104/0x600 fs/kernfs/file.c:926
4 locks held by udevd/6014:
#0:
ffff88801bfd7ab8
(
&p->lock
){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 fs/seq_file.c:183
#1:
ffff888052a87c80
(
&of->mutex
#2
){+.+.}-{4:4}
, at: kernfs_seq_start+0x5d/0x420 fs/kernfs/file.c:165
#2:
ffff888035614698
final repro crashed as (corrupted=false):
INFO: task kworker/1:1:29 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1 state:D
stack:23600 pid:29 tgid:29 ppid:2 task_flags:0x4288060 flags:0x00080000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
__schedule_loop kernel/sched/core.c:7311 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7326
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383
__mutex_lock_common kernel/locking/mutex.c:726 [inline]
__mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821
class_mutex_constructor include/linux/mutex.h:253 [inline]
__input_unregister_device+0x2d8/0x650 drivers/input/input.c:2204
input_unregister_device+0x9b/0x100 drivers/input/input.c:2438
usb_cleanup+0x7b/0x1c0 drivers/input/misc/yealink.c:784
usb_disconnect+0x42/0x70 drivers/input/misc/yealink.c:802
usb_unbind_interface+0x295/0x9f0 drivers/usb/core/driver.c:458
device_remove drivers/base/dd.c:618 [inline]
__device_release_driver drivers/base/dd.c:1349 [inline]
device_release_driver_internal+0x4f5/0x880 drivers/base/dd.c:1372
bus_remove_device+0x444/0x560 drivers/base/bus.c:664
device_del+0x524/0x8f0 drivers/base/core.c:3961
usb_disable_device+0x3d4/0x8d0 drivers/usb/core/message.c:1478
usb_disconnect+0x346/0x9a0 drivers/usb/core/hub.c:2345
hub_port_connect drivers/usb/core/hub.c:5415 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5715 [inline]
port_event drivers/usb/core/hub.c:5879 [inline]
hub_event+0x1bbb/0x4d30 drivers/usb/core/hub.c:5961
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
INFO: task kworker/0:9:6017 blocked for more than 144 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:9 state:D
stack:25200 pid:6017 tgid:6017 ppid:2 task_flags:0x4208060 flags:0x00080000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
__schedule_loop kernel/sched/core.c:7311 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7326
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383
rwsem_down_write_slowpath+0x87d/0x1080 kernel/locking/rwsem.c:1215
__down_write_common kernel/locking/rwsem.c:1347 [inline]
__down_write kernel/locking/rwsem.c:1356 [inline]
down_write+0x1bc/0x200 kernel/locking/rwsem.c:1632
kernfs_add_one+0x41/0x5e0 fs/kernfs/dir.c:825
__kernfs_create_file+0x22b/0x2e0 fs/kernfs/file.c:1079
sysfs_add_file_mode_ns+0x237/0x300 fs/sysfs/file.c:316
create_files fs/sysfs/group.c:82 [inline]
internal_create_group+0x679/0x1180 fs/sysfs/group.c:189
internal_create_groups fs/sysfs/group.c:229 [inline]
sysfs_create_groups+0x59/0x120 fs/sysfs/group.c:255
device_add_groups drivers/base/core.c:2907 [inline]
device_add_attrs+0x1b1/0x600 drivers/base/core.c:2982
device_add+0x488/0xb80 drivers/base/core.c:3711
usb_set_configuration+0x1ad8/0x2180 drivers/usb/core/message.c:2268
usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:250
usb_probe_device+0x1c3/0x3b0 drivers/usb/core/driver.c:291
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x254/0xae0 drivers/base/dd.c:706
__driver_probe_device+0x1e8/0x360 drivers/base/dd.c:868
driver_probe_device+0x4f/0x240 drivers/base/dd.c:898
__device_attach_driver+0x270/0x410 drivers/base/dd.c:1026
bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500
__device_attach+0x2c4/0x450 drivers/base/dd.c:1098
device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1153
bus_probe_device+0x12a/0x220 drivers/base/bus.c:620
device_add+0x7d7/0xb80 drivers/base/core.c:3772
usb_new_device+0x9aa/0x1690 drivers/usb/core/hub.c:2703
hub_port_connect drivers/usb/core/hub.c:5575 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5715 [inline]
port_event drivers/usb/core/hub.c:5879 [inline]
hub_event+0x28e8/0x4d30 drivers/usb/core/hub.c:5961
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Showing all locks held in the system:
6 locks held by kworker/0:1/10:
4 locks held by kworker/1:0/24:
#0:
ffff8880552ae940
(
(wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
(wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc900001e7c40
(
(work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffff88802d53d440
(&wg->static_identity.lock
){++++}-{4:4}
, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598
#3: ffff8880347b5270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 drivers/net/wireguard/noise.c:632
6 locks held by kworker/1:1/29:
#0:
ffff8880202ce140
((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc90000a47c40
(
(work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffff88802a7051d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5907
#3:
ffff88803565e1d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: usb_disconnect+0xfc/0x9a0 drivers/usb/core/hub.c:2336
#4:
ffff88802c5151a0
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: __device_driver_lock drivers/base/dd.c:1171 [inline]
, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369
#5:
ffffffff8faa04e0
(
input_mutex
){+.+.}-{4:4}
, at: class_mutex_constructor include/linux/mutex.h:253 [inline]
, at: __input_unregister_device+0x2d8/0x650 drivers/input/input.c:2204
6 locks held by kworker/1:2/30:
#0:
ffff8880202ce140 (
(wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc90000a67c40
(
(work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffff88802a9e41d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5907
#3:
ffff8880547d21d8
(
&dev->mutex
){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
#4:
ffff8880569dc1a0
(
&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
#5:
ffffffff8faa04e0
(
input_mutex
){+.+.}-{4:4}
, at: class_mutex_intr_constructor include/linux/mutex.h:255 [inline]
, at: input_register_device+0xa7f/0x1150 drivers/input/input.c:2394
1 lock held by khungtaskd/32:
#0:
ffffffff8eb59c60
(
rcu_read_lock
){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
3 locks held by kworker/u8:4/65:
#0:
ffff888031b74140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
ffff888031b74140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc9000203fc40
(
(work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
(work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2: ffffffff900283c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#2: ffffffff900283c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4769
3 locks held by kworker/u8:8/1105:
#0: ffff88801b064140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
#0: ffff88801b064140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc90005547c40
(
(linkwatch_work).work
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffffffff900283c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313
4 locks held by kworker/u8:9/1145:
#0:
ffff888036baa940
((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc90005687c40
(
(work_completion)(&peer->transmit_handshake_work)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2: ffff88802d53d440 (&wg->static_identity.lock
){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 drivers/net/wireguard/noise.c:529
#3:
ffff8880347b5270
(&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 drivers/net/wireguard/noise.c:530
2 locks held by kworker/0:2/1209:
1 lock held by udevd/4974:
#0: ffff88801c28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 fs/kernfs/dir.c:1217
2 locks held by kworker/0:3/5340:
2 locks held by getty/5366:
#0:
ffff88803683e0a0
(
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1:
ffffc900032332e8
(
&ldata->atomic_read_lock
){+.+.}-{4:4}
, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211
1 lock held by udevd/5635:
#0:
ffff88801c28d180
(
&root->kernfs_rwsem
){++++}-{4:4}
, at: kernfs_dop_revalidate+0x9e/0x650 fs/kernfs/dir.c:1217
4 locks held by udevd/5649:
#0:
ffff8880212d6878
(&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 fs/seq_file.c:183
#1: ffff88802dd8bc80 (&of->mutex#2){+.+.}-{4:4}
, at: kernfs_seq_start+0x5d/0x420 fs/kernfs/file.c:165
#2:
ffff8880728f8a58
(
kn->active
#30
){.+.+}-{0:0}
, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline]
, at: kernfs_seq_start+0xb2/0x420 fs/kernfs/file.c:166
#3:
ffff88803565e1d8
(
&dev->mutex){....}-{4:4}, at: device_lock_interruptible include/linux/device.h:1109 [inline]
&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
4 locks held by udevd/5678:
#0:
ffff888078abb098
(
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xa4/0xca0 fs/seq_file.c:183
#1:
ffff88805260e480
(
&of->mutex
#2
){+.+.}-{4:4}
, at: kernfs_seq_start+0x5d/0x420 fs/kernfs/file.c:165
#2: ffff8880729c7c38 (kn->active#30){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline]
#2: ffff8880729c7c38 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 fs/kernfs/file.c:166
#3: ffff8880565e71d8 (&dev->mutex){....}-{4:4}, at: device_lock_interruptible include/linux/device.h:1109 [inline]
#3: ffff8880565e71d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
1 lock held by syz-executor/5747:
#0:
ffff8880550c0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline]
ffff8880550c0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678
1 lock held by syz-executor/5754:
#0:
ffff88801c28d180
(
&root->kernfs_rwsem
){++++}-{4:4}
, at: kernfs_dop_revalidate+0x9e/0x650 fs/kernfs/dir.c:1217
2 locks held by syz-executor/5761:
#0:
ffff8880550d4ea0
(&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline]
(&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678
#1:
ffffffff8eb5ff68
(
rcu_state.exp_mutex
){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline]
){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 kernel/rcu/tree_exp.h:961
1 lock held by syz-executor/5766:
#0:
ffff888055114ea0 (&hdev->req_lock){+.+.}-{4:4}
, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline]
, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678
1 lock held by syz-executor/5769:
#0:
ffff8880550f4ea0
(
&hdev->req_lock
){+.+.}-{4:4}
, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline]
, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678
3 locks held by kworker/0:5/5901:
6 locks held by kworker/1:4/5914:
#0:
ffff8880202ce140
(
(wq_completion)usb_hub_wq
){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc9000379fc40 ((work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffff88802a93b1d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5907
#3:
ffff8880770e11d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
#4:
ffff888070b0f1a0
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
#5:
ffffffff8faa04e0
(
input_mutex
){+.+.}-{4:4}
, at: class_mutex_intr_constructor include/linux/mutex.h:255 [inline]
, at: input_register_device+0xa7f/0x1150 drivers/input/input.c:2394
12 locks held by kworker/0:6/5921:
6 locks held by kworker/1:5/5930:
#0:
ffff8880202ce140
(
(wq_completion)usb_hub_wq
){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1: ffffc9000371fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
#1: ffffc9000371fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffff88802a6ab1d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5907
#3:
ffff8880356581d8
(
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: usb_disconnect+0xfc/0x9a0 drivers/usb/core/hub.c:2336
#4: ffff88802d3af1a0 (&dev->mutex){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: __device_driver_lock drivers/base/dd.c:1171 [inline]
, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369
#5: ffffffff8faa04e0 (input_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline]
#5: ffffffff8faa04e0 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x2d8/0x650 drivers/input/input.c:2204
6 locks held by kworker/1:6/5999:
#0:
ffff8880202ce140
(
(wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1:
ffffc9000362fc40
(
(work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2:
ffff88802a35d1d8
(
&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5907
#3:
ffff8880565e71d8 (&dev->mutex){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: usb_disconnect+0xfc/0x9a0 drivers/usb/core/hub.c:2336
#4:
ffff8880305381a0 (&dev->mutex){....}-{4:4}
, at: device_lock include/linux/device.h:1104 [inline]
, at: __device_driver_lock drivers/base/dd.c:1171 [inline]
, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369
#5:
ffffffff8faa04e0
(
input_mutex
){+.+.}-{4:4}
, at: class_mutex_constructor include/linux/mutex.h:253 [inline]
, at: __input_unregister_device+0x2d8/0x650 drivers/input/input.c:2204
4 locks held by kworker/1:7/6001:
#0:
ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1: ffffc9000361fc40 (kernfs_notify_work){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3297 [inline]
, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2: ffff88801c28d2a0 (
&root->kernfs_supers_rwsem
){++++}-{4:4}
, at: kernfs_notify_workfn+0xf0/0x600 fs/kernfs/file.c:925
#3:
ffff88801c28d180
(
&root->kernfs_rwsem
){++++}-{4:4}
, at: kernfs_notify_workfn+0x104/0x600 fs/kernfs/file.c:926
4 locks held by udevd/6014:
#0:
ffff88801bfd7ab8
(
&p->lock
){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 fs/seq_file.c:183
#1:
ffff888052a87c80
(
&of->mutex
#2
){+.+.}-{4:4}
, at: kernfs_seq_start+0x5d/0x420 fs/kernfs/file.c:165
#2:
ffff888035614698