INFO: task kworker/1:1:63 blocked for more than 143 seconds. Not tainted 6.13.0-rc3-syzkaller-g362a7993ed01 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:1 state:D stack:20048 pid:63 tgid:63 ppid:2 flags:0x00004000 Workqueue: events usb_gadget_state_work Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x102c/0x34b0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1526 kernfs_find_and_get_ns+0x71/0xc0 fs/kernfs/dir.c:918 kernfs_find_and_get include/linux/kernfs.h:604 [inline] sysfs_notify+0x98/0xf0 fs/sysfs/file.c:208 usb_gadget_state_work+0x48/0x60 drivers/usb/gadget/udc/core.c:1120 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task kworker/1:2:2935 blocked for more than 143 seconds. Not tainted 6.13.0-rc3-syzkaller-g362a7993ed01 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:2 state:D stack:21040 pid:2935 tgid:2935 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x102c/0x34b0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1176 __down_write_common kernel/locking/rwsem.c:1304 [inline] __down_write kernel/locking/rwsem.c:1313 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1578 kernfs_add_one+0xb1/0x520 fs/kernfs/dir.c:778 kernfs_create_dir_ns+0xf4/0x150 fs/kernfs/dir.c:1071 sysfs_create_dir_ns+0x13b/0x2b0 fs/sysfs/dir.c:59 create_dir lib/kobject.c:73 [inline] kobject_add_internal+0x2c8/0x990 lib/kobject.c:240 kobject_add_varg lib/kobject.c:374 [inline] kobject_add+0x16f/0x240 lib/kobject.c:426 device_add+0x289/0x1a70 drivers/base/core.c:3603 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2e58/0x4f40 drivers/usb/core/hub.c:5903 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task kworker/1:5:5241 blocked for more than 144 seconds. Not tainted 6.13.0-rc3-syzkaller-g362a7993ed01 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:5 state:D stack:21120 pid:5241 tgid:5241 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x102c/0x34b0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1176 __down_write_common kernel/locking/rwsem.c:1304 [inline] __down_write kernel/locking/rwsem.c:1313 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1578 kernfs_add_one+0xb1/0x520 fs/kernfs/dir.c:778 kernfs_create_dir_ns+0xf4/0x150 fs/kernfs/dir.c:1071 sysfs_create_dir_ns+0x13b/0x2b0 fs/sysfs/dir.c:59 create_dir lib/kobject.c:73 [inline] kobject_add_internal+0x2c8/0x990 lib/kobject.c:240 kobject_add_varg lib/kobject.c:374 [inline] kobject_add+0x16f/0x240 lib/kobject.c:426 device_add+0x289/0x1a70 drivers/base/core.c:3603 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2e58/0x4f40 drivers/usb/core/hub.c:5903 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task udevd:6086 blocked for more than 144 seconds. Not tainted 6.13.0-rc3-syzkaller-g362a7993ed01 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21584 pid:6086 tgid:6086 ppid:2845 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x102c/0x34b0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1526 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:927 [inline] d_revalidate fs/namei.c:924 [inline] lookup_fast+0x239/0x540 fs/namei.c:1752 walk_component+0x5b/0x5b0 fs/namei.c:2108 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2477 link_path_walk fs/namei.c:2408 [inline] path_lookupat+0x93/0x770 fs/namei.c:2633 filename_lookup+0x221/0x5f0 fs/namei.c:2663 vfs_statx+0xf8/0x1c0 fs/stat.c:344 vfs_fstatat+0x7b/0xf0 fs/stat.c:366 __do_sys_newfstatat+0xa2/0x130 fs/stat.c:530 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6dcffce5f4 RSP: 002b:00007ffdbd069918 EFLAGS: 00000202 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 000055d8d16a2fe0 RCX: 00007f6dcffce5f4 RDX: 00007ffdbd069928 RSI: 00007ffdbd0699b8 RDI: 00000000ffffff9c RBP: 000055d8d16155cf R08: 000055d8d16155cf R09: 0000000000000000 R10: 0000000000000100 R11: 0000000000000202 R12: 0000000000000000 R13: 000055d8d16a30d0 R14: 00007ffdbd0699b8 R15: 000055d8d0f92160 INFO: task kworker/1:0:9204 blocked for more than 144 seconds. Not tainted 6.13.0-rc3-syzkaller-g362a7993ed01 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:0 state:D stack:22208 pid:9204 tgid:9204 ppid:2 flags:0x00004000 Workqueue: events usb_gadget_state_work Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x102c/0x34b0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1526 kernfs_find_and_get_ns+0x71/0xc0 fs/kernfs/dir.c:918 kernfs_find_and_get include/linux/kernfs.h:604 [inline] sysfs_notify+0x98/0xf0 fs/sysfs/file.c:208 usb_gadget_state_work+0x48/0x60 drivers/usb/gadget/udc/core.c:1120 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz-executor:16653 blocked for more than 145 seconds. Not tainted 6.13.0-rc3-syzkaller-g362a7993ed01 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23440 pid:16653 tgid:16653 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x102c/0x34b0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1526 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:927 [inline] d_revalidate fs/namei.c:924 [inline] lookup_fast+0x239/0x540 fs/namei.c:1752 walk_component+0x5b/0x5b0 fs/namei.c:2108 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2477 link_path_walk fs/namei.c:2409 [inline] path_openat+0x228/0x2d60 fs/namei.c:3983 do_filp_open+0x20c/0x470 fs/namei.c:4014 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402 do_sys_open fs/open.c:1417 [inline] __do_sys_openat fs/open.c:1433 [inline] __se_sys_openat fs/open.c:1428 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1428 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcb50425621 RSP: 002b:00007ffc99d942c0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00000000000000b0 RCX: 00007fcb50425621 RDX: 0000000000090800 RSI: 00007fcb504a1dc8 RDI: 00000000ffffff9c RBP: 00007ffc99d9435c R08: 0000000000043214 R09: 00007fcb5114f000 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 00000000001d400c R14: 00007ffc99d943b0 R15: 000000000000003f INFO: task syz.3.3413:18776 blocked for more than 145 seconds. Not tainted 6.13.0-rc3-syzkaller-g362a7993ed01 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.3413 state:D stack:27848 pid:18776 tgid:18775 ppid:16653 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x102c/0x34b0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1176 __down_write_common kernel/locking/rwsem.c:1304 [inline] __down_write kernel/locking/rwsem.c:1313 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1578 kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 sysfs_remove_file include/linux/sysfs.h:794 [inline] driver_remove_file drivers/base/driver.c:198 [inline] driver_remove_file+0x4a/0x60 drivers/base/driver.c:194 remove_bind_files drivers/base/bus.c:602 [inline] bus_remove_driver+0x224/0x2c0 drivers/base/bus.c:740 driver_unregister+0x76/0xb0 drivers/base/driver.c:274 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1732 raw_release+0x1ae/0x2b0 drivers/usb/gadget/legacy/raw_gadget.c:462 __fput+0x3f8/0xb60 fs/file_table.c:450 task_work_run+0x14e/0x250 kernel/task_work.c:239 exit_task_work include/linux/task_work.h:43 [inline] do_exit+0xadd/0x2ce0 kernel/exit.c:938 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087 get_signal+0x24ed/0x26c0 kernel/signal.c:3017 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x147/0x260 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcb5042592b RSP: 002b:00007fcb4ea94f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fcb5042592b RDX: 00007fcb4ea95fe0 RSI: 0000000080085502 RDI: 0000000000000003 RBP: 00007fcb4ea95fe0 R08: 0000000000000000 R09: 00332e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000020000bc0 R15: 00007fcb504abd08 INFO: task syz.0.3415:18783 blocked for more than 145 seconds. Not tainted 6.13.0-rc3-syzkaller-g362a7993ed01 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.3415 state:D stack:27848 pid:18783 tgid:18782 ppid:14851 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x102c/0x34b0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1176 __down_write_common kernel/locking/rwsem.c:1304 [inline] __down_write kernel/locking/rwsem.c:1313 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1578 kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 sysfs_remove_file include/linux/sysfs.h:794 [inline] driver_remove_file drivers/base/driver.c:198 [inline] driver_remove_file+0x4a/0x60 drivers/base/driver.c:194 remove_bind_files drivers/base/bus.c:602 [inline] bus_remove_driver+0x224/0x2c0 drivers/base/bus.c:740 driver_unregister+0x76/0xb0 drivers/base/driver.c:274 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1732 raw_release+0x1ae/0x2b0 drivers/usb/gadget/legacy/raw_gadget.c:462 __fput+0x3f8/0xb60 fs/file_table.c:450 task_work_run+0x14e/0x250 kernel/task_work.c:239 exit_task_work include/linux/task_work.h:43 [inline] do_exit+0xadd/0x2ce0 kernel/exit.c:938 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087 get_signal+0x24ed/0x26c0 kernel/signal.c:3017 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x147/0x260 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc621e5592b RSP: 002b:00007fc6204c4f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fc621e5592b RDX: 00007fc6204c5fe0 RSI: 0000000080085502 RDI: 0000000000000003 RBP: 00007fc6204c5fe0 R08: 0000000000000000 R09: 00302e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000020000580 R15: 00007fc621edbd08 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff88ebc480 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #0: ffffffff88ebc480 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff88ebc480 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6744 3 locks held by kworker/1:1/63: #0: ffff888100080948 ( (wq_completion)events ){+.+.}-{0:0} , at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204 #1: ffffc90000547d80 ((work_completion)(&gadget->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4} , at: kernfs_find_and_get_ns+0x71/0xc0 fs/kernfs/dir.c:918 2 locks held by getty/2903: #0: ffff88811234b0a0 (&tty->ldisc_sem){++++}-{0:0} , at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900000432f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211 4 locks held by kworker/1:2/2935: #0: ffff8881062fad48 ((wq_completion)usb_hub_wq ){+.+.}-{0:0} , at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204 #1: ffffc90000267d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffff88810b315190 (&dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:1014 [inline] , at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849 #3: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4} , at: kernfs_add_one+0xb1/0x520 fs/kernfs/dir.c:778 5 locks held by kworker/0:0/5238: 4 locks held by kworker/1:5/5241: #0: ffff8881062fad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204 #1: ffffc9000205fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffff88810af69190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1014 [inline] (&dev->mutex){....}-{4:4}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849 #3: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0xb1/0x520 fs/kernfs/dir.c:778 3 locks held by kworker/0:4/5273: 5 locks held by kworker/0:6/5747: 1 lock held by udevd/6086: #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 4 locks held by kworker/0:7/7108: 4 locks held by kworker/0:8/8473: 3 locks held by kworker/1:0/9204: #0: ffff888100080948 ((wq_completion)events){+.+.}-{0:0} , at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204 #1: ffffc90004c87d80 ((work_completion)(&gadget->work)){+.+.}-{0:0} , at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4} , at: kernfs_find_and_get_ns+0x71/0xc0 fs/kernfs/dir.c:918 1 lock held by syz-executor/14851: #0: ffff888100abc148 ( &root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 1 lock held by syz-executor/15521: #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 1 lock held by syz-executor/16112: #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4} , at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 1 lock held by syz-executor/16653: #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 1 lock held by syz-executor/17214: #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4} , at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 1 lock held by syz.3.3413/18776: #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4} , at: kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 1 lock held by syz.0.3415/18783: #0: ffff888100abc148 (&root->kernfs_rwsem ){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 1 lock held by syz.1.3417/18791: #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4} , at: kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 1 lock held by syz.4.3419/18794: #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 1 lock held by syz.2.3418/18793: #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 1 lock held by syz-executor/18795: #0: ffff888100abc148 (&root->kernfs_rwsem ){++++}-{4:4}, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 1 lock held by syz-executor/18796: #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4} , at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 1 lock held by syz-executor/18797: #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 1 lock held by syz-executor/18798: #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4} , at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 1 lock held by syz-executor/18799: #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4} , at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-g362a7993ed01 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:234 [inline] watchdog+0xf14/0x1240 kernel/hung_task.c:397 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 8473 Comm: kworker/0:8 Not tainted 6.13.0-rc3-syzkaller-g362a7993ed01 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: events legacy_dvb_usb_read_remote_control RIP: 0010:write_comp_data+0x0/0x90 kernel/kcov.c:240 Code: 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 c3 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 4f 65 a8 7e 65 8b 05 50 65 RSP: 0018:ffffc90000007d90 EFLAGS: 00000046 RAX: dffffc0000000000 RBX: ffff88810ab9c418 RCX: ffffffff86ececf0 RDX: ffff88810ab9c418 RSI: 0000000000000001 RDI: 0000000000000006 RBP: ffff8881f582cad0 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000003 R12: 0000000000000001 R13: 0000000000000000 R14: ffff8881f582c800 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8881f5800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5c357b1000 CR3: 0000000008ca0000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: timerqueue_del+0x40/0x150 lib/timerqueue.c:55 __remove_hrtimer+0x99/0x290 kernel/time/hrtimer.c:1109 __run_hrtimer kernel/time/hrtimer.c:1719 [inline] __hrtimer_run_queues+0x50b/0xae0 kernel/time/hrtimer.c:1803 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1820 handle_softirqs+0x206/0x8d0 kernel/softirq.c:561 __do_softirq kernel/softirq.c:595 [inline] invoke_softirq kernel/softirq.c:435 [inline] __irq_exit_rcu+0xfa/0x160 kernel/softirq.c:662 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:console_trylock_spinning kernel/printk/printk.c:2061 [inline] RIP: 0010:vprintk_emit+0x621/0x6f0 kernel/printk/printk.c:2431 Code: 85 ed 0f 85 81 00 00 00 e8 ec 21 20 00 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 48 24 20 00 4d 85 e4 0f 85 8d 00 00 00 ca 21 20 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 RSP: 0018:ffffc90013927a30 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 0000000000000017 RCX: ffffffff813b390e RDX: ffff8881358c9d40 RSI: ffffffff813b3918 RDI: 0000000000000007 RBP: 1ffff92002724f48 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000000 R13: 0000000000000200 R14: ffff888101e957c0 R15: ffffc90013927b18 vprintk+0x7f/0xa0 kernel/printk/printk_safe.c:86 _printk+0xc8/0x100 kernel/printk/printk.c:2457 m920x_read drivers/media/usb/dvb-usb/m920x.c:40 [inline] m920x_rc_query+0x496/0x770 drivers/media/usb/dvb-usb/m920x.c:193 legacy_dvb_usb_read_remote_control+0x10a/0x500 drivers/media/usb/dvb-usb/dvb-usb-remote.c:123 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored