syzbot


INFO: task hung in snd_seq_device_dev_free

Status: auto-obsoleted due to no activity on 2024/10/22 03:37
Subsystems: sound
[Documentation on labels]
First crash: 199d, last: 199d

Sample crash report:
INFO: task kworker/1:2:58 blocked for more than 143 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:2     state:D stack:20664 pid:58    tgid:58    ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 schedule_timeout+0xb0/0x310 kernel/time/timer.c:2557
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common kernel/sched/completion.c:116 [inline]
 wait_for_common kernel/sched/completion.c:127 [inline]
 wait_for_completion+0x355/0x620 kernel/sched/completion.c:148
 __flush_work+0xaa9/0xd00 kernel/workqueue.c:4208
 __cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4328
 cancel_autoload_drivers sound/core/seq_device.c:139 [inline]
 snd_seq_device_dev_free+0x44/0xa0 sound/core/seq_device.c:158
 __snd_device_free+0x1d0/0x2e0 sound/core/device.c:76
 snd_device_free_all+0xcd/0x180 sound/core/device.c:233
 snd_card_do_free sound/core/init.c:587 [inline]
 release_card_device+0x72/0x1c0 sound/core/init.c:153
 device_release+0x99/0x1c0
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x22f/0x480 lib/kobject.c:737
 usb_audio_disconnect+0x5f8/0x700 sound/usb/card.c:999
 usb_unbind_interface+0x25e/0x940 drivers/usb/core/driver.c:461
 device_remove drivers/base/dd.c:568 [inline]
 __device_release_driver drivers/base/dd.c:1270 [inline]
 device_release_driver_internal+0x503/0x7c0 drivers/base/dd.c:1293
 bus_remove_device+0x34f/0x420 drivers/base/bus.c:574
 device_del+0x57a/0x9b0 drivers/base/core.c:3868
 usb_disable_device+0x3bf/0x850 drivers/usb/core/message.c:1418
 usb_disconnect+0x340/0x950 drivers/usb/core/hub.c:2304
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x1eb9/0x5150 drivers/usb/core/hub.c:5903
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/0:3:5104 blocked for more than 143 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:3     state:D stack:21200 pid:5104  tgid:5104  ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 schedule_timeout+0xb0/0x310 kernel/time/timer.c:2557
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common kernel/sched/completion.c:116 [inline]
 wait_for_common kernel/sched/completion.c:127 [inline]
 wait_for_completion+0x355/0x620 kernel/sched/completion.c:148
 __flush_work+0xaa9/0xd00 kernel/workqueue.c:4208
 __cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4328
 cancel_autoload_drivers sound/core/seq_device.c:139 [inline]
 snd_seq_device_dev_free+0x44/0xa0 sound/core/seq_device.c:158
 __snd_device_free+0x1d0/0x2e0 sound/core/device.c:76
 snd_device_free_all+0xcd/0x180 sound/core/device.c:233
 snd_card_do_free sound/core/init.c:587 [inline]
 release_card_device+0x72/0x1c0 sound/core/init.c:153
 device_release+0x99/0x1c0
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x22f/0x480 lib/kobject.c:737
 usb_audio_disconnect+0x5f8/0x700 sound/usb/card.c:999
 usb_unbind_interface+0x25e/0x940 drivers/usb/core/driver.c:461
 device_remove drivers/base/dd.c:568 [inline]
 __device_release_driver drivers/base/dd.c:1270 [inline]
 device_release_driver_internal+0x503/0x7c0 drivers/base/dd.c:1293
 bus_remove_device+0x34f/0x420 drivers/base/bus.c:574
 device_del+0x57a/0x9b0 drivers/base/core.c:3868
 usb_disable_device+0x3bf/0x850 drivers/usb/core/message.c:1418
 usb_disconnect+0x340/0x950 drivers/usb/core/hub.c:2304
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x1eb9/0x5150 drivers/usb/core/hub.c:5903
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/0:6:5161 blocked for more than 144 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:6     state:D stack:22256 pid:5161  tgid:5161  ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 schedule_timeout+0xb0/0x310 kernel/time/timer.c:2557
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common kernel/sched/completion.c:116 [inline]
 wait_for_common kernel/sched/completion.c:127 [inline]
 wait_for_completion+0x355/0x620 kernel/sched/completion.c:148
 __flush_work+0xaa9/0xd00 kernel/workqueue.c:4208
 __cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4328
 cancel_autoload_drivers sound/core/seq_device.c:139 [inline]
 snd_seq_device_dev_free+0x44/0xa0 sound/core/seq_device.c:158
 __snd_device_free+0x1d0/0x2e0 sound/core/device.c:76
 snd_device_free_all+0xcd/0x180 sound/core/device.c:233
 snd_card_do_free sound/core/init.c:587 [inline]
 release_card_device+0x72/0x1c0 sound/core/init.c:153
 device_release+0x99/0x1c0
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x22f/0x480 lib/kobject.c:737
 usb_audio_disconnect+0x5f8/0x700 sound/usb/card.c:999
 usb_unbind_interface+0x25e/0x940 drivers/usb/core/driver.c:461
 device_remove drivers/base/dd.c:568 [inline]
 __device_release_driver drivers/base/dd.c:1270 [inline]
 device_release_driver_internal+0x503/0x7c0 drivers/base/dd.c:1293
 bus_remove_device+0x34f/0x420 drivers/base/bus.c:574
 device_del+0x57a/0x9b0 drivers/base/core.c:3868
 usb_disable_device+0x3bf/0x850 drivers/usb/core/message.c:1418
 usb_disconnect+0x340/0x950 drivers/usb/core/hub.c:2304
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x1eb9/0x5150 drivers/usb/core/hub.c:5903
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task udevd:5220 blocked for more than 144 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:24864 pid:5220  tgid:5220  ppid:4555   flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
 device_lock include/linux/device.h:1009 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2743
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2437
 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
 seq_read_iter+0x445/0xd60 fs/seq_file.c:230
 new_sync_read fs/read_write.c:395 [inline]
 vfs_read+0x9bd/0xbc0 fs/read_write.c:476
 ksys_read+0x1a0/0x2c0 fs/read_write.c:619
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4ade316b6a
RSP: 002b:00007ffc3b1ac468 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 0000564ac61b0590 RCX: 00007f4ade316b6a
RDX: 0000000000001000 RSI: 0000564ac61dd610 RDI: 0000000000000008
RBP: 0000564ac61b0590 R08: 0000000000000008 R09: 0000000000000020
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffc3b1ac948 R15: 000000000000000a
 </TASK>
INFO: task rm:11648 blocked for more than 145 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:rm              state:D stack:23680 pid:11648 tgid:11648 ppid:11619  flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 __wait_on_freeing_inode+0x2a4/0x3f0 fs/inode.c:2300
 find_inode_fast+0x2a0/0x460 fs/inode.c:957
 iget_locked+0xab/0x820 fs/inode.c:1320
 __ext4_iget+0x267/0x4090 fs/ext4/inode.c:4761
 ext4_lookup+0x3e3/0x750 fs/ext4/namei.c:1811
 __lookup_slow+0x28c/0x3f0 fs/namei.c:1718
 lookup_slow+0x53/0x70 fs/namei.c:1735
 walk_component fs/namei.c:2039 [inline]
 link_path_walk+0x99b/0xea0 fs/namei.c:2404
 path_openat+0x25d/0x3470 fs/namei.c:3882
 do_filp_open+0x235/0x490 fs/namei.c:3913
 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416
 do_sys_open fs/open.c:1431 [inline]
 __do_sys_openat fs/open.c:1447 [inline]
 __se_sys_openat fs/open.c:1442 [inline]
 __x64_sys_openat+0x247/0x2a0 fs/open.c:1442
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9f773e3a46
RSP: 002b:00007ffd31661278 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffd316614d8 RCX: 00007f9f773e3a46
RDX: 0000000000080000 RSI: 00007ffd316612f0 RDI: 00000000ffffff9c
RBP: 00007ffd316612e0 R08: 0000000000080000 R09: 00007ffd316612f0
R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffd316612f0
R13: 0000000000000009 R14: 00007ffd316614bf R15: 00000000ffffffff
 </TASK>
INFO: task modprobe:11650 blocked for more than 145 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:modprobe        state:D stack:23680 pid:11650 tgid:11650 ppid:1281   flags:0x00000000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 d_wait_lookup fs/dcache.c:2458 [inline]
 d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540
 __lookup_slow+0x117/0x3f0 fs/namei.c:1703
 lookup_slow+0x53/0x70 fs/namei.c:1735
 walk_component fs/namei.c:2039 [inline]
 link_path_walk+0x99b/0xea0 fs/namei.c:2404
 path_openat+0x25d/0x3470 fs/namei.c:3882
 do_filp_open+0x235/0x490 fs/namei.c:3913
 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416
 do_sys_open fs/open.c:1431 [inline]
 __do_sys_openat fs/open.c:1447 [inline]
 __se_sys_openat fs/open.c:1442 [inline]
 __x64_sys_openat+0x247/0x2a0 fs/open.c:1442
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0f33879a46
RSP: 002b:00007ffedfbd8048 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffedfbd82a8 RCX: 00007f0f33879a46
RDX: 0000000000080000 RSI: 00007ffedfbd80c0 RDI: 00000000ffffff9c
RBP: 00007ffedfbd80b0 R08: 0000000000080000 R09: 00007ffedfbd80c0
R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffedfbd80c0
R13: 0000000000000009 R14: 00007ffedfbd828f R15: 00000000ffffffff
 </TASK>
INFO: task kworker/u8:7:11654 blocked for more than 145 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:7    state:D stack:26800 pid:11654 tgid:11654 ppid:1101   flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 d_wait_lookup fs/dcache.c:2458 [inline]
 d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540
 __lookup_slow+0x117/0x3f0 fs/namei.c:1703
 lookup_slow+0x53/0x70 fs/namei.c:1735
 walk_component fs/namei.c:2039 [inline]
 link_path_walk+0x99b/0xea0 fs/namei.c:2404
 path_openat+0x25d/0x3470 fs/namei.c:3882
 do_filp_open+0x235/0x490 fs/namei.c:3913
 do_open_execat fs/exec.c:972 [inline]
 open_exec+0xc0/0x2a0 fs/exec.c:1010
 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893
 search_binary_handler fs/exec.c:1821 [inline]
 exec_binprm fs/exec.c:1863 [inline]
 bprm_execve+0xaf8/0x1770 fs/exec.c:1914
 kernel_execve+0x931/0xa50 fs/exec.c:2081
 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/u8:6:11671 blocked for more than 146 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:6    state:D stack:26800 pid:11671 tgid:11671 ppid:1094   flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 d_wait_lookup fs/dcache.c:2458 [inline]
 d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540
 __lookup_slow+0x117/0x3f0 fs/namei.c:1703
 lookup_slow+0x53/0x70 fs/namei.c:1735
 walk_component fs/namei.c:2039 [inline]
 link_path_walk+0x99b/0xea0 fs/namei.c:2404
 path_openat+0x25d/0x3470 fs/namei.c:3882
 do_filp_open+0x235/0x490 fs/namei.c:3913
 do_open_execat fs/exec.c:972 [inline]
 open_exec+0xc0/0x2a0 fs/exec.c:1010
 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893
 search_binary_handler fs/exec.c:1821 [inline]
 exec_binprm fs/exec.c:1863 [inline]
 bprm_execve+0xaf8/0x1770 fs/exec.c:1914
 kernel_execve+0x931/0xa50 fs/exec.c:2081
 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/u8:9:11684 blocked for more than 146 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:9    state:D stack:26800 pid:11684 tgid:11684 ppid:2466   flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 d_wait_lookup fs/dcache.c:2458 [inline]
 d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540
 __lookup_slow+0x117/0x3f0 fs/namei.c:1703
 lookup_slow+0x53/0x70 fs/namei.c:1735
 walk_component fs/namei.c:2039 [inline]
 link_path_walk+0x99b/0xea0 fs/namei.c:2404
 path_openat+0x25d/0x3470 fs/namei.c:3882
 do_filp_open+0x235/0x490 fs/namei.c:3913
 do_open_execat fs/exec.c:972 [inline]
 open_exec+0xc0/0x2a0 fs/exec.c:1010
 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893
 search_binary_handler fs/exec.c:1821 [inline]
 exec_binprm fs/exec.c:1863 [inline]
 bprm_execve+0xaf8/0x1770 fs/exec.c:1914
 kernel_execve+0x931/0xa50 fs/exec.c:2081
 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/u8:1:11698 blocked for more than 146 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:1    state:D stack:26800 pid:11698 tgid:11698 ppid:12     flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 d_wait_lookup fs/dcache.c:2458 [inline]
 d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540
 __lookup_slow+0x117/0x3f0 fs/namei.c:1703
 lookup_slow+0x53/0x70 fs/namei.c:1735
 walk_component fs/namei.c:2039 [inline]
 link_path_walk+0x99b/0xea0 fs/namei.c:2404
 path_openat+0x25d/0x3470 fs/namei.c:3882
 do_filp_open+0x235/0x490 fs/namei.c:3913
 do_open_execat fs/exec.c:972 [inline]
 open_exec+0xc0/0x2a0 fs/exec.c:1010
 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893
 search_binary_handler fs/exec.c:1821 [inline]
 exec_binprm fs/exec.c:1863 [inline]
 bprm_execve+0xaf8/0x1770 fs/exec.c:1914
 kernel_execve+0x931/0xa50 fs/exec.c:2081
 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
INFO: task kworker/u8:4:11699 blocked for more than 147 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:4    state:D stack:26800 pid:11699 tgid:11699 ppid:63     flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 d_wait_lookup fs/dcache.c:2458 [inline]
 d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540
 __lookup_slow+0x117/0x3f0 fs/namei.c:1703
 lookup_slow+0x53/0x70 fs/namei.c:1735
 walk_component fs/namei.c:2039 [inline]
 link_path_walk+0x99b/0xea0 fs/namei.c:2404
 path_openat+0x25d/0x3470 fs/namei.c:3882
 do_filp_open+0x235/0x490 fs/namei.c:3913
 do_open_execat fs/exec.c:972 [inline]
 open_exec+0xc0/0x2a0 fs/exec.c:1010
 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893
 search_binary_handler fs/exec.c:1821 [inline]
 exec_binprm fs/exec.c:1863 [inline]
 bprm_execve+0xaf8/0x1770 fs/exec.c:1914
 kernel_execve+0x931/0xa50 fs/exec.c:2081
 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
INFO: task kworker/u8:2:11731 blocked for more than 147 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:2    state:D stack:26752 pid:11731 tgid:11731 ppid:35     flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 d_wait_lookup fs/dcache.c:2458 [inline]
 d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540
 __lookup_slow+0x117/0x3f0 fs/namei.c:1703
 lookup_slow+0x53/0x70 fs/namei.c:1735
 walk_component fs/namei.c:2039 [inline]
 link_path_walk+0x99b/0xea0 fs/namei.c:2404
 path_openat+0x25d/0x3470 fs/namei.c:3882
 do_filp_open+0x235/0x490 fs/namei.c:3913
 do_open_execat fs/exec.c:972 [inline]
 open_exec+0xc0/0x2a0 fs/exec.c:1010
 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893
 search_binary_handler fs/exec.c:1821 [inline]
 exec_binprm fs/exec.c:1863 [inline]
 bprm_execve+0xaf8/0x1770 fs/exec.c:1914
 kernel_execve+0x931/0xa50 fs/exec.c:2081
 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
INFO: task kworker/u8:0:11789 blocked for more than 147 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:0    state:D stack:26752 pid:11789 tgid:11789 ppid:11     flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 d_wait_lookup fs/dcache.c:2458 [inline]
 d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540
 __lookup_slow+0x117/0x3f0 fs/namei.c:1703
 lookup_slow+0x53/0x70 fs/namei.c:1735
 walk_component fs/namei.c:2039 [inline]
 link_path_walk+0x99b/0xea0 fs/namei.c:2404
 path_openat+0x25d/0x3470 fs/namei.c:3882
 do_filp_open+0x235/0x490 fs/namei.c:3913
 do_open_execat fs/exec.c:972 [inline]
 open_exec+0xc0/0x2a0 fs/exec.c:1010
 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893
 search_binary_handler fs/exec.c:1821 [inline]
 exec_binprm fs/exec.c:1863 [inline]
 bprm_execve+0xaf8/0x1770 fs/exec.c:1914
 kernel_execve+0x931/0xa50 fs/exec.c:2081
 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
INFO: task kworker/u8:11:11799 blocked for more than 148 seconds.
      Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:11   state:D stack:26800 pid:11799 tgid:11799 ppid:2849   flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 d_wait_lookup fs/dcache.c:2458 [inline]
 d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540
 __lookup_slow+0x117/0x3f0 fs/namei.c:1703
 lookup_slow+0x53/0x70 fs/namei.c:1735
 walk_component fs/namei.c:2039 [inline]
 link_path_walk+0x99b/0xea0 fs/namei.c:2404
 path_openat+0x25d/0x3470 fs/namei.c:3882
 do_filp_open+0x235/0x490 fs/namei.c:3913
 do_open_execat fs/exec.c:972 [inline]
 open_exec+0xc0/0x2a0 fs/exec.c:1010
 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893
 search_binary_handler fs/exec.c:1821 [inline]
 exec_binprm fs/exec.c:1863 [inline]
 bprm_execve+0xaf8/0x1770 fs/exec.c:1914
 kernel_execve+0x931/0xa50 fs/exec.c:2081
 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings

Showing all locks held in the system:
1 lock held by pool_workqueue_/3:
 #0: ffffffff8e33ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:328 [inline]
 #0: ffffffff8e33ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:958
2 locks held by kworker/u8:0/11:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc90000107d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc90000107d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:1/12:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc90000117d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc90000117d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
1 lock held by khungtaskd/30:
 #0: ffffffff8e337660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline]
 #0: ffffffff8e337660 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
 #0: ffffffff8e337660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6620
2 locks held by kworker/u8:2/35:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc90000ab7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc90000ab7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
5 locks held by kworker/1:2/58:
 #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc9000123fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc9000123fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
 #2: ffff88802377b190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff88802377b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849
 #3: ffff88801c2f9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff88801c2f9190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 drivers/usb/core/hub.c:2295
 #4: ffff88801ce9b160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff88801ce9b160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1093 [inline]
 #4: ffff88801ce9b160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1290
2 locks held by kworker/u8:4/63:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc900015e7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc900015e7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/0:2/928:
 #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc90003e7fd00 (autoload_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc90003e7fd00 (autoload_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:6/1094:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc90004437d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc90004437d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:7/1101:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc900043c7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc900043c7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:8/1281:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc900049b7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc900049b7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:9/2466:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc90009327d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc90009327d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:11/2849:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc90009967d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc90009967d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by getty/4857:
 #0: ffff88802a1f60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211
5 locks held by kworker/0:3/5104:
 #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc900020bfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc900020bfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
 #2: ffff88802383b190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff88802383b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849
 #3: ffff88806aa27190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff88806aa27190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 drivers/usb/core/hub.c:2295
 #4: ffff888029616160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff888029616160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1093 [inline]
 #4: ffff888029616160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1290
5 locks held by kworker/0:6/5161:
 #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc9000384fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc9000384fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
 #2: ffff88802395a190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff88802395a190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849
 #3: ffff88801ffde190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff88801ffde190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 drivers/usb/core/hub.c:2295
 #4: ffff88802dca1160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff88802dca1160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1093 [inline]
 #4: ffff88802dca1160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1290
4 locks held by udevd/5220:
 #0: ffff88805f8ca0a0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182
 #1: ffff888068ab7088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff88806e224e18 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff88806aa27190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff88806aa27190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2743
5 locks held by kworker/1:8/9954:
 #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc90003f57d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc90003f57d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
 #2: ffff8880238a3190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #2: ffff8880238a3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849
 #3: ffff88806595c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #3: ffff88806595c190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 drivers/usb/core/hub.c:2295
 #4: ffff88806c411160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
 #4: ffff88806c411160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1093 [inline]
 #4: ffff88806c411160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1290
1 lock held by rm/11648:
 #0: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #0: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
1 lock held by modprobe/11650:
 #0: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #0: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:7/11654:
 #0: ffff888024f2d648 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff888024f2d648 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:6/11671:
 #0: ffff888024f2c8c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff888024f2c8c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:9/11684:
 #0: ffff88802298bb48 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff88802298bb48 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:1/11698:
 #0: ffff88802298b488 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff88802298b488 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:4/11699:
 #0: ffff888024f2bb48 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff888024f2bb48 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:3/11701:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc9000b17fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc9000b17fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:5/11705:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc9000b2e7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc9000b2e7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:2/11731:
 #0: ffff888022f5dd08 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff888022f5dd08 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:10/11736:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc9000abbfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc9000abbfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:12/11782:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc900034dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc900034dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:0/11789:
 #0: ffff8880212c12c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff8880212c12c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:11/11799:
 #0: ffff888024e5ea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff888024e5ea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:13/11832:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc900042dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc900042dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:14/11889:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc90004427d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc90004427d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:3/11994:
 #0: ffff88802127b488 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff88802127b488 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:15/12027:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc9000d44fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc9000d44fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:16/12043:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc900032e7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc900032e7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:13/12092:
 #0: ffff888025e9ea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff888025e9ea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:17/12093:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc9000b84fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc9000b84fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:15/12111:
 #0: ffff888022858c08 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff888022858c08 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:14/12178:
 #0: ffff888027dcb488 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff888027dcb488 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:12/12309:
 #0: ffff88802f13f808 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff88802f13f808 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:18/12310:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc9000d45fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc9000d45fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:16/12333:
 #0: ffff888025e9bb48 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff888025e9bb48 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:19/12338:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc9000d83fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc9000d83fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:18/12377:
 #0: ffff888022858548 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff888022858548 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:20/12378:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc90003d7fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc90003d7fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:17/12399:
 #0: ffff88802b2eea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff88802b2eea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:21/12431:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc9000315fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc9000315fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:21/12458:
 #0: ffff888026ee1988 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff888026ee1988 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:19/12460:
 #0: ffff8880287eadc8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff8880287eadc8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:5/12462:
 #0: ffff8880287ec208 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff8880287ec208 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:10/12464:
 #0: ffff88802f13ea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff88802f13ea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:23/12473:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc9000374fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc9000374fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
4 locks held by kworker/u8:24/12479:
 #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc900039a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc900039a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
 #2: ffffffff8f5fbc90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594
 #3: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 drivers/net/wireguard/device.c:414
1 lock held by syz-executor/12485:
 #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:698 [inline]
 #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3507
2 locks held by kworker/u8:23/12488:
 #0: ffff88801ba85d08 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff88801ba85d08 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:25/12489:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc90009747d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc90009747d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
1 lock held by syz-executor/12498:
 #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:698 [inline]
 #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3507
2 locks held by kworker/u8:20/12503:
 #0: ffff8880220148c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff8880220148c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
2 locks held by kworker/u8:26/12504:
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc900030cfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc900030cfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
1 lock held by syz-executor/12533:
 #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:698 [inline]
 #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3507
2 locks held by kworker/u8:25/12538:
 #0: ffff888026ecf148 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff888026ecf148 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
1 lock held by syz-executor/12551:
 #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:698 [inline]
 #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3507
2 locks held by kworker/u8:26/12556:
 #0: ffff88802a5c63c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline]
 #0: ffff88802a5c63c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline]
 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734
1 lock held by syz.3.1655/12561:
 #0: ffffffff8e33c900 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:4486
5 locks held by kworker/u8:29/12562:

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:93 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119
 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
 watchdog+0xfee/0x1030 kernel/hung_task.c:379
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 4537 Comm: syslogd Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:preempt_count_add+0x20/0x190 kernel/sched/core.c:5648
Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 89 fb 48 c7 c0 80 a9 7f 94 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df <42> 0f b6 04 38 84 c0 0f 85 ed 00 00 00 83 3d ac c9 1c 13 00 75 07
RSP: 0018:ffffc90002fef7e0 EFLAGS: 00000a06
RAX: 1ffffffff28ff530 RBX: 0000000000000001 RCX: ffffffff947fa903
RDX: dffffc0000000000 RSI: ffff88807edd9e00 RDI: 0000000000000001
RBP: ffffc90002fef950 R08: ffffc90002fef8c7 R09: 0000000000000000
R10: ffffc90002fef8a0 R11: fffff520005fdf19 R12: dffffc0000000000
R13: ffff88802f2f2d18 R14: 0000000000000000 R15: dffffc0000000000
FS:  00007f14e8be0380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055bb2ebf3058 CR3: 000000002930c000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 __mutex_lock_common kernel/locking/mutex.c:607 [inline]
 __mutex_lock+0x112/0xd70 kernel/locking/mutex.c:752
 __unix_dgram_recvmsg+0x246/0x12f0 net/unix/af_unix.c:2439
 sock_recvmsg_nosec net/socket.c:1046 [inline]
 sock_recvmsg+0x22f/0x280 net/socket.c:1068
 sock_read_iter+0x2ca/0x3e0 net/socket.c:1138
 new_sync_read fs/read_write.c:395 [inline]
 vfs_read+0x9bd/0xbc0 fs/read_write.c:476
 ksys_read+0x1a0/0x2c0 fs/read_write.c:619
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f14e8d34b6a
Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffe2bcd5448 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f14e8d34b6a
RDX: 00000000000000ff RSI: 00005641dce99950 RDI: 0000000000000000
RBP: 00005641dce99910 R08: 0000000000000001 R09: 0000000000000000
R10: 00007f14e8ed33a3 R11: 0000000000000246 R12: 00005641dce9998d
R13: 00005641dce99950 R14: 0000000000000000 R15: 00007f14e8f17a80
 </TASK>

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/24 03:29 upstream 28bbe4ea686a 57b2edb1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in snd_seq_device_dev_free
* Struck through repros no longer work on HEAD.