syzbot

INFO: task kworker/0:0:7 blocked for more than 143 seconds.
      Not tainted 6.1.115-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:0     state:D stack:22592 pid:7     ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5241 [inline]
 __schedule+0x143f/0x4570 kernel/sched/core.c:6558
 schedule+0xbf/0x180 kernel/sched/core.c:6634
 usb_kill_urb+0x1c5/0x300 drivers/usb/core/urb.c:728
 usb_start_wait_urb+0x1ac/0x510 drivers/usb/core/message.c:64
 usb_internal_control_msg drivers/usb/core/message.c:102 [inline]
 usb_control_msg+0x2ad/0x4c0 drivers/usb/core/message.c:153
 get_bMaxPacketSize0 drivers/usb/core/hub.c:4758 [inline]
 hub_port_init+0x12d7/0x2940 drivers/usb/core/hub.c:5026
 hub_port_connect drivers/usb/core/hub.c:5406 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5617 [inline]
 port_event drivers/usb/core/hub.c:5773 [inline]
 hub_event+0x2b31/0x5730 drivers/usb/core/hub.c:5855
 process_one_work+0x8a9/0x11d0 kernel/workqueue.c:2292
 worker_thread+0xa47/0x1200 kernel/workqueue.c:2439
 kthread+0x28d/0x320 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>

Showing all locks held in the system:
5 locks held by kworker/0:0/7:
 #0: 
ffff88801e29c938
 (
(wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
 #1: 
ffffc900000c7d20
 (
(work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
 #2: 
ffff888145f9a190
 (&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:837 [inline]
, at: hub_event+0x1fe/0x5730 drivers/usb/core/hub.c:5801
 #3: 
ffff888145f9d4f8
 (
&port_dev->status_lock
){+.+.}-{3:3}
, at: usb_lock_port drivers/usb/core/hub.c:3159 [inline]
, at: hub_port_connect drivers/usb/core/hub.c:5373 [inline]
, at: hub_port_connect_change drivers/usb/core/hub.c:5617 [inline]
, at: port_event drivers/usb/core/hub.c:5773 [inline]
, at: hub_event+0x2471/0x5730 drivers/usb/core/hub.c:5855
 #4: 
ffff888028f9a268
 (hcd->address0_mutex
){+.+.}-{3:3}
, at: hub_port_connect drivers/usb/core/hub.c:5374 [inline]
, at: hub_port_connect_change drivers/usb/core/hub.c:5617 [inline]
, at: port_event drivers/usb/core/hub.c:5773 [inline]
, at: hub_event+0x249e/0x5730 drivers/usb/core/hub.c:5855
1 lock held by rcu_tasks_kthre/12:
 #0: 
ffffffff8d32b1d0
 (
rcu_tasks.tasks_gp_mutex
){+.+.}-{3:3}
, at: rcu_tasks_one_gp+0x29/0xe30 kernel/rcu/tasks.h:517
1 lock held by rcu_tasks_trace/13:
 #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 kernel/rcu/tasks.h:517
1 lock held by khungtaskd/28:
 #0: 
ffffffff8d32b000 (rcu_read_lock
){....}-{1:2}
, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:791 [inline]
, at: debug_show_all_locks+0x51/0x290 kernel/locking/lockdep.c:6510
2 locks held by getty/4000:
 #0: 
ffff88814cea5098
 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244
 #1: ffffc900032462f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 drivers/tty/n_tty.c:2198
4 locks held by syz-executor304/4241:

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.115-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106
 nmi_cpu_backtrace+0x4e1/0x560 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
 watchdog+0xf88/0xfd0 kernel/hung_task.c:377
 kthread+0x28d/0x320 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 4241 Comm: syz-executor304 Not tainted 6.1.115-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:244 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x80 kernel/kcov.c:313
Code: 89 f8 89 f6 49 ff c2 4c 89 11 48 c7 44 0a 08 03 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 c3 0f 1f 00 4c 8b 04 24 <65> 48 8b 15 84 d8 77 7e 65 8b 05 85 d8 77 7e 25 00 01 ff 00 74 10
RSP: 0018:ffffc90003a7e7a0 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000003032 RCX: ffff888030685940
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a
RBP: 0000000000000002 R08: ffffffff8aa22911 R09: ffffc90003a7e860
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000002
R13: dffffc0000000000 R14: ffffc90003a7e862 R15: ffffc90003a7ec81
FS:  000055556ecf7380(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd13cb7468 CR3: 0000000026b4b000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 put_dec_trunc8+0x1f1/0x330 lib/vsprintf.c:255
 number+0x333/0xf80 lib/vsprintf.c:508
 vsnprintf+0x1361/0x1c70 lib/vsprintf.c:2871
 sprintf+0xd6/0x120 lib/vsprintf.c:3009
 print_time kernel/printk/printk.c:1274 [inline]
 info_print_prefix+0x167/0x300 kernel/printk/printk.c:1300
 record_print_text kernel/printk/printk.c:1349 [inline]
 console_emit_next_record+0x74f/0x1000 kernel/printk/printk.c:2760
 console_unlock+0x278/0x7c0 kernel/printk/printk.c:2906
 vprintk_emit+0x523/0x740 kernel/printk/printk.c:2303
 _printk+0xd1/0x111 kernel/printk/printk.c:2328
 _erofs_err+0x137/0x180 fs/erofs/super.c:35
 z_erofs_pcluster_readmore+0x300/0x450 fs/erofs/zdata.c:1678
 z_erofs_read_folio+0x330/0x760 fs/erofs/zdata.c:1706
 filemap_read_folio+0x199/0x780 mm/filemap.c:2489
 do_read_cache_folio+0x2ee/0x810 mm/filemap.c:3626
 erofs_bread+0x19d/0x6b0 fs/erofs/data.c:50
 erofs_find_target_block fs/erofs/namei.c:102 [inline]
 erofs_namei+0x278/0xef0 fs/erofs/namei.c:175
 erofs_lookup+0x1d6/0x4d0 fs/erofs/namei.c:204
 lookup_open fs/namei.c:3460 [inline]
 open_last_lookups fs/namei.c:3550 [inline]
 path_openat+0x10fb/0x2e60 fs/namei.c:3780
 do_filp_open+0x230/0x480 fs/namei.c:3810
 do_sys_openat2+0x13b/0x4f0 fs/open.c:1318
 do_sys_open fs/open.c:1334 [inline]
 __do_sys_openat fs/open.c:1350 [inline]
 __se_sys_openat fs/open.c:1345 [inline]
 __x64_sys_openat+0x243/0x290 fs/open.c:1345
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f816c7d3889
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc9c3d7198 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f816c7d3889
RDX: 0000000000101042 RSI: 0000000020000040 RDI: 00000000ffffff9c
RBP: 0000000000001090 R08: 00000000000001e3 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9c3d71d0
R13: 00007ffc9c3d72b0 R14: 431bde82d7b634db R15: 00007ffc9c3d71b0
 </TASK>