INFO: task kworker/0:5:4501 blocked for more than 143 seconds. Not tainted 6.2.0-rc3-syzkaller-16387-g9598c377d828 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:5 state:D stack:0 pid:4501 ppid:2 flags:0x00000008 Workqueue: usb_hub_wq hub_event Call trace: __switch_to+0x180/0x298 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5244 [inline] __schedule+0x438/0x5a0 kernel/sched/core.c:6555 schedule+0x64/0xa4 kernel/sched/core.c:6631 usb_kill_urb+0xe0/0x1c8 drivers/usb/core/urb.c:728 usb_start_wait_urb+0xf8/0x1ec drivers/usb/core/message.c:64 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0xd8/0x17c drivers/usb/core/message.c:153 hub_port_init+0x544/0x10a8 drivers/usb/core/hub.c:4872 hub_port_connect+0x5b8/0xe80 drivers/usb/core/hub.c:5334 hub_port_connect_change+0x3d8/0x70c drivers/usb/core/hub.c:5549 port_event+0x7b8/0x938 drivers/usb/core/hub.c:5709 hub_event+0x2f0/0x658 drivers/usb/core/hub.c:5791 process_one_work+0x2d8/0x504 kernel/workqueue.c:2289 worker_thread+0x340/0x610 kernel/workqueue.c:2436 kthread+0x12c/0x158 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:863 INFO: task kworker/0:11:12794 blocked for more than 143 seconds. Not tainted 6.2.0-rc3-syzkaller-16387-g9598c377d828 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:11 state:D stack:0 pid:12794 ppid:2 flags:0x00000008 Workqueue: usb_hub_wq hub_event Call trace: __switch_to+0x180/0x298 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5244 [inline] __schedule+0x438/0x5a0 kernel/sched/core.c:6555 schedule+0x64/0xa4 kernel/sched/core.c:6631 usb_kill_urb+0xe0/0x1c8 drivers/usb/core/urb.c:728 usb_start_wait_urb+0xf8/0x1ec drivers/usb/core/message.c:64 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0xd8/0x17c drivers/usb/core/message.c:153 hub_port_init+0x544/0x10a8 drivers/usb/core/hub.c:4872 hub_port_connect+0x5b8/0xe80 drivers/usb/core/hub.c:5334 hub_port_connect_change+0x3d8/0x70c drivers/usb/core/hub.c:5549 port_event+0x7b8/0x938 drivers/usb/core/hub.c:5709 hub_event+0x2f0/0x658 drivers/usb/core/hub.c:5791 process_one_work+0x2d8/0x504 kernel/workqueue.c:2289 worker_thread+0x340/0x610 kernel/workqueue.c:2436 kthread+0x12c/0x158 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:863 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/11: #0: ffff80000d645648 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x3c/0x450 kernel/rcu/tasks.h:507 1 lock held by rcu_tasks_trace/12: #0: ffff80000d645c98 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x3c/0x450 kernel/rcu/tasks.h:507 1 lock held by khungtaskd/27: #0: ffff80000d645520 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x4/0x48 include/linux/rcupdate.h:324 2 locks held by getty/4081: #0: ffff0000c66f2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x28/0x58 drivers/tty/tty_ldisc.c:244 #1: ffff80000f8562f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x19c/0x89c drivers/tty/n_tty.c:2177 5 locks held by kworker/0:5/4501: #0: ffff0000c0c0e738 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x270/0x504 kernel/workqueue.c:2262 #1: ffff80001310bd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x29c/0x504 kernel/workqueue.c:2264 #2: ffff0000c3bac990 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff0000c3bac990 (&dev->mutex){....}-{3:3}, at: hub_event+0x8c/0x658 drivers/usb/core/hub.c:5737 #3: ffff0000c3bae508 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3145 [inline] #3: ffff0000c3bae508 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect+0x40c/0xe80 drivers/usb/core/hub.c:5301 #4: ffff0000c6492168 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect+0x418/0xe80 drivers/usb/core/hub.c:5302 5 locks held by kworker/0:11/12794: #0: ffff0000c0c0e738 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x270/0x504 kernel/workqueue.c:2262 #1: ffff800018a4bd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x29c/0x504 kernel/workqueue.c:2264 #2: ffff0000c64e6990 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff0000c64e6990 (&dev->mutex){....}-{3:3}, at: hub_event+0x8c/0x658 drivers/usb/core/hub.c:5737 #3: ffff0000c5ee0508 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3145 [inline] #3: ffff0000c5ee0508 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect+0x40c/0xe80 drivers/usb/core/hub.c:5301 #4: ffff0000c63bab68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect+0x418/0xe80 drivers/usb/core/hub.c:5302 1 lock held by syz-executor.1/24143: #0: ffff00011bd8b010 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #0: ffff00011bd8b010 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release net/socket.c:649 [inline] #0: ffff00011bd8b010 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x40/0xf0 net/socket.c:1365 4 locks held by syz-executor.0/24164: 1 lock held by syz-executor.0/24165: #0: ffff000132ae58e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x12c/0x154 fs/file.c:1046 =============================================