INFO: task kworker/0:4:4373 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:4     state:D stack:0     pid:4373  ppid:2      flags:0x00000008
Workqueue: usb_hub_wq hub_event
Call trace:
 __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5246 [inline]
 __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
 schedule+0xc4/0x170 kernel/sched/core.c:6639
 schedule_timeout+0xc8/0x2f4 kernel/time/timer.c:2144
 do_wait_for_common+0x28c/0x3ec kernel/sched/completion.c:85
 __wait_for_common kernel/sched/completion.c:106 [inline]
 wait_for_common kernel/sched/completion.c:117 [inline]
 wait_for_completion+0x44/0x5c kernel/sched/completion.c:138
 __flush_work+0x140/0x1ec kernel/workqueue.c:3076
 __cancel_work_timer+0x2f8/0x450 kernel/workqueue.c:3163
 cancel_delayed_work_sync+0x24/0x38 kernel/workqueue.c:3304
 __mmc_stop_host drivers/mmc/core/core.c:2303 [inline]
 mmc_stop_host+0xd4/0x3b8 drivers/mmc/core/core.c:2308
 mmc_remove_host+0x20/0x68 drivers/mmc/core/host.c:651
 vub300_disconnect+0x120/0x278 drivers/mmc/host/vub300.c:2388
 usb_unbind_interface+0x1a4/0x738 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:549 [inline]
 __device_release_driver drivers/base/dd.c:1279 [inline]
 device_release_driver_internal+0x424/0x6e4 drivers/base/dd.c:1305
 device_release_driver+0x28/0x38 drivers/base/dd.c:1328
 bus_remove_device+0x294/0x384 drivers/base/bus.c:531
 device_del+0x580/0x990 drivers/base/core.c:3900
 usb_disable_device+0x33c/0x780 drivers/usb/core/message.c:1472
 usb_disconnect+0x290/0x790 drivers/usb/core/hub.c:2314
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5657 [inline]
 port_event drivers/usb/core/hub.c:5817 [inline]
 hub_event+0x1640/0x3e74 drivers/usb/core/hub.c:5899
 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
 kthread+0x254/0x2e0 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
INFO: task kworker/0:6:4426 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:6     state:D stack:0     pid:4426  ppid:2      flags:0x00000008
Workqueue: events_freezable mmc_rescan
Call trace:
 __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5246 [inline]
 __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
 schedule+0xc4/0x170 kernel/sched/core.c:6639
 schedule_timeout+0xc8/0x2f4 kernel/time/timer.c:2144
 do_wait_for_common+0x28c/0x3ec kernel/sched/completion.c:85
 __wait_for_common kernel/sched/completion.c:106 [inline]
 wait_for_common kernel/sched/completion.c:117 [inline]
 wait_for_completion+0x44/0x5c kernel/sched/completion.c:138
 mmc_wait_for_req_done+0x40/0x3e0 drivers/mmc/core/core.c:402
 mmc_wait_for_req+0x198/0x224 drivers/mmc/core/core.c:612
 mmc_wait_for_cmd+0x130/0x218 drivers/mmc/core/core.c:638
 mmc_io_rw_direct_host drivers/mmc/core/sdio_ops.c:83 [inline]
 sdio_reset+0x1cc/0x334 drivers/mmc/core/sdio_ops.c:215
 mmc_rescan_try_freq drivers/mmc/core/core.c:2076 [inline]
 mmc_rescan+0x528/0xc08 drivers/mmc/core/core.c:2259
 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
 kthread+0x254/0x2e0 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850

Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
 #0: ffff800015567db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517
1 lock held by rcu_tasks_trace/13:
 #0: ffff8000155685d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517
1 lock held by khungtaskd/28:
 #0: ffff800015567440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349
2 locks held by getty/4084:
 #0: ffff0000d6bc1098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340
 #1: ffff800020abb2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 drivers/tty/n_tty.c:2198
1 lock held by syz-executor/4328:
 #0: ffff80001556d0f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline]
 #0: ffff80001556d0f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3f8/0x780 kernel/rcu/tree_exp.h:962
5 locks held by kworker/0:4/4373:
 #0: ffff0000c45ba138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
 #1: ffff800021307c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
 #2: ffff0000d1d15190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline]
 #2: ffff0000d1d15190 (&dev->mutex){....}-{3:3}, at: hub_event+0x134/0x3e74 drivers/usb/core/hub.c:5845
 #3: ffff0000f69e4190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline]
 #3: ffff0000f69e4190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xdc/0x790 drivers/usb/core/hub.c:2305
 #4: ffff0000cdb0c118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline]
 #4: ffff0000cdb0c118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1099 [inline]
 #4: ffff0000cdb0c118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x9c/0x6e4 drivers/base/dd.c:1302
2 locks held by kworker/1:4/4374:
 #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
 #1: ffff800021317c40 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
2 locks held by kworker/0:6/4426:
 #0: ffff0000c0021538 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
 #1: ffff800021537c40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
2 locks held by kworker/u4:38/8643:
 #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
 #1: ffff800023177c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
3 locks held by kworker/u4:41/9028:

=============================================