INFO: task kworker/1:1:37 blocked for more than 143 seconds.
      Not tainted 6.11.0-rc7-syzkaller-00152-g68d4209158f4 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1     state:D stack:21472 pid:37    tgid:37    ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event

Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xcda/0x2f80 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178
 __down_write_common kernel/locking/rwsem.c:1306 [inline]
 __down_write kernel/locking/rwsem.c:1315 [inline]
 down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580
 kernfs_remove+0x71/0xa0 fs/kernfs/dir.c:1527
 sysfs_remove_dir+0xc8/0x100 fs/sysfs/dir.c:101
 __kobject_del+0xe2/0x1f0 lib/kobject.c:604
 kobject_del lib/kobject.c:627 [inline]
 kobject_del+0x3f/0x60 lib/kobject.c:619
 device_del+0x64e/0x9f0 drivers/base/core.c:3891
 usb_disable_device+0x36c/0x7f0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x920 drivers/usb/core/hub.c:2304
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/30:
 #0: ffffffff88ebb660
 (
rcu_read_lock
){....}-{1:2}
, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6626
5 locks held by kworker/1:1/37:
 #0: ffff88810668b548
 (
(wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: 
ffffc90000277d80
 ((work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: 
ffff8881097ec190 (
&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: ffff88811e237190
 (
&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #4: 
ffffffff8a426c28 (
uevent_sock_mutex
){+.+.}-{3:3}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
, at: kobject_uevent_env+0xb21/0x1860 lib/kobject_uevent.c:608
2 locks held by getty/2603:
 #0: 
ffff88810ebc60a0
 (&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc900000432f0
 (
&ldata->atomic_read_lock
){+.+.}-{3:3}
, at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2211
6 locks held by kworker/0:4/4930:
6 locks held by kworker/1:5/5012:
8 locks held by kworker/1:6/5057:
 #0: 
ffff88810668b548
 ((wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc9000eed7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}
, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: ffff88810973f190 (&dev->mutex){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: ffff888114d30190
 (&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: usb_disconnect+0x10a/0x920 drivers/usb/core/hub.c:2295
 #4: ffff88811b3c6160 (&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #5: 
ffff888111a19a20
 (
&dev->mutex){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #6: ffffffff89f41510
 (
minors_rwsem){+.+.}-{3:3}
, at: hidraw_disconnect+0x3e/0x60 drivers/hid/hidraw.c:609
 #7: ffffffff8a426c28
 (
uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_env+0xb21/0x1860 lib/kobject_uevent.c:608
4 locks held by udevd/5548:
 #0: ffff8881017ee790
 (
&p->lock){+.+.}-{3:3}
, at: seq_read_iter+0xde/0x12c0 fs/seq_file.c:182
 #1: ffff88811de74888 (&of->mutex
#2
){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154
 #2: 
ffff88810eb1a5a8
 (kn->active
#18
){++++}-{0:0}
, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155
 #3: ffff888107f45190 (&dev->mutex
){....}-{3:3}
, at: device_lock_interruptible include/linux/device.h:1014 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
3 locks held by kworker/u8:0/9627:
 #0: 
ffff888100abb148
 (
(wq_completion)netns){+.+.}-{0:0}
, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc9001064fd80 (net_cleanup_work){+.+.}-{0:0}
, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: 
ffffffff8a161d50
 (pernet_ops_rwsem
){++++}-{3:3}
, at: cleanup_net+0xbb/0xbb0 net/core/net_namespace.c:594
6 locks held by kworker/0:5/10347:
 #0: 
ffff88810668b548 (
(wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc9000ee17d80 ((work_completion)(&hub->events)){+.+.}-{0:0}
, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
 #2: ffff88810976d190 (
&dev->mutex
){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
){....}-{3:3}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: 
ffff888107f45190
 (
&dev->mutex){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: usb_disconnect+0x10a/0x920 drivers/usb/core/hub.c:2295
 #4: ffff88812c240160 (&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #5: 
ffffffff89bab988 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x136/0x450 drivers/input/input.c:2275
2 locks held by kworker/u8:1/13402:
 #0: ffff888100089148
 (
(wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: 
ffffc90011a4fd80
 (
(work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
1 lock held by syz-executor/17752:
 #0: ffffffff88ec6df8
 (
rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:328
2 locks held by kworker/u8:4/21885:
 #0: ffff888100089148
 ((wq_completion)events_unbound){+.+.}-{0:0}
, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: 
ffffc9001083fd80 (
(work_completion)(&sub_info->work)
){+.+.}-{0:0}
, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
2 locks held by kworker/0:3/24737:
 #0: 
ffff888100080948
 ((wq_completion)events
){+.+.}-{0:0}
, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: 
ffffc90011e1fd80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
2 locks held by syz.0.4746/24762:
 #0: ffff888102eacd78
 (
&dev->mutex){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #1: ffffffff8a426c28
 (
uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_env+0xb21/0x1860 lib/kobject_uevent.c:608
2 locks held by syz.4.4747/24764:
 #0: ffff88810974cd78 (&dev->mutex){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #1: ffffffff8a426c28 (uevent_sock_mutex){+.+.}-{3:3}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
, at: kobject_uevent_env+0xb21/0x1860 lib/kobject_uevent.c:608
2 locks held by syz.2.4749/24768:
 #0: ffff888109744d78
 (
&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #1: 
ffffffff8a426c28 (uevent_sock_mutex){+.+.}-{3:3}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
, at: kobject_uevent_env+0xb21/0x1860 lib/kobject_uevent.c:608
2 locks held by syz.1.4750/24770:
 #0: 
ffff888109740d78
 (
&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1292
 #1: 
ffffffff8a426c28
 (
uevent_sock_mutex){+.+.}-{3:3}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
, at: kobject_uevent_env+0xb21/0x1860 lib/kobject_uevent.c:608
2 locks held by syz.3.4751/24773:
 #0: 
ffff888109748d78
 (&dev->mutex){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
, at: __driver_attach+0x278/0x580 drivers/base/dd.c:1214
 #1: 
ffffffff8a426c28 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
ffffffff8a426c28 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
ffffffff8a426c28 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_env+0xb21/0x1860 lib/kobject_uevent.c:608
1 lock held by syz-executor/24787:
 #0: 
ffffffff88ec6df8 (rcu_state.exp_mutex){+.+.}-{3:3}
, at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:328
2 locks held by kworker/u8:2/24791:
 #0: ffff888100089148 (
(wq_completion)events_unbound){+.+.}-{0:0}
, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc900014dfd80
 (
(work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
2 locks held by kworker/u8:5/24798:
 #0: ffff888100089148 (
(wq_completion)events_unbound
){+.+.}-{0:0}
, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc90011ce7d80 ((work_completion)(&sub_info->work)){+.+.}-{0:0}
, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
2 locks held by kworker/u8:6/24841:
 #0: 
ffff888100089148
 ((wq_completion)events_unbound){+.+.}-{0:0}
, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206
 #1: ffffc900129afd80 (
(work_completion)(&sub_info->work)
){+.+.}-{0:0}
, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207
1 lock held by modprobe/24907:
1 lock held by modprobe/24908:
 #0: 
ffff8881f583d718
 (
&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:560 [inline]
&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1415 [inline]
&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1714 [inline]
&rq->__lock){-.-.}-{2:2}, at: __schedule+0x28e/0x2f80 kernel/sched/core.c:6436
1 lock held by modprobe/24915:
1 lock held by modprobe/24916:
1 lock held by modprobe/24917:

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00152-g68d4209158f4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:93 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:119
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
 watchdog+0xf0c/0x1240 kernel/hung_task.c:379
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 5844 Comm: kworker/0:7 Not tainted 6.11.0-rc7-syzkaller-00152-g68d4209158f4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: events dvb_usb_read_remote_control
RIP: 0010:lock_release+0x2c/0x6f0 kernel/locking/lockdep.c:5767
Code: 1e fa 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 41 55 41 54 49 89 fc 55 53 48 81 ec 90 00 00 00 48 8d 5c 24 10 48 89 74 24 08 <48> c7 44 24 10 b3 8a b5 41 48 c1 eb 03 48 c7 44 24 18 b8 86 77 88
RSP: 0018:ffffc90000007970 EFLAGS: 00000082
RAX: dffffc0000000000 RBX: ffffc90000007980 RCX: ffffffff813341ad
RDX: 1ffff1102000bc8e RSI: ffffffff8253ddad RDI: ffffffff934bafb8
RBP: 0000000000000006 R08: 0000000000000001 R09: 0000000000000006
R10: 0000000000000003 R11: ffffffff872a6b20 R12: ffffffff934bafb8
R13: ffffffff9364ac00 R14: 1ffff92000000f4e R15: ffffffff934baf98
FS:  0000000000000000(0000) GS:ffff8881f5800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd9aa5c8440 CR3: 0000000115672000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:149 [inline]
 _raw_spin_unlock_irqrestore+0x1a/0x80 kernel/locking/spinlock.c:194
 debug_object_activate+0x34d/0x540 lib/debugobjects.c:727
 debug_timer_activate kernel/time/timer.c:836 [inline]
 __mod_timer+0x81d/0xdc0 kernel/time/timer.c:1171
 call_timer_fn+0x1a0/0x610 kernel/time/timer.c:1792
 expire_timers kernel/time/timer.c:1843 [inline]
 __run_timers+0x74b/0xaf0 kernel/time/timer.c:2417
 __run_timer_base kernel/time/timer.c:2428 [inline]
 __run_timer_base kernel/time/timer.c:2421 [inline]
 run_timer_base+0x111/0x190 kernel/time/timer.c:2437
 run_timer_softirq+0x24/0x40 kernel/time/timer.c:2448
 handle_softirqs+0x209/0x8e0 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0xac/0x110 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:console_trylock_spinning kernel/printk/printk.c:2010 [inline]
RIP: 0010:vprintk_emit+0x396/0x600 kernel/printk/printk.c:2347
Code: 00 4d 85 e4 0f 85 04 02 00 00 e8 a5 ce 1e 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 03 d1 1e 00 48 85 ed 0f 85 10 02 00 00 <e8> 85 ce 1e 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00
RSP: 0018:ffffc90010287b78 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 000000000000003e RCX: ffffffff8135c706
RDX: ffff88811db19d40 RSI: ffffffff8135c710 RDI: 0000000000000007
RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000200
R13: ffff8881026b1d40 R14: ffffffff87c487e0 R15: ffffc90010287bf8
 vprintk+0x7f/0xa0 kernel/printk/printk_safe.c:45
 _printk+0xc8/0x100 kernel/printk/printk.c:2373
 dvb_usb_read_remote_control+0x174/0x1c0 drivers/media/usb/dvb-usb/dvb-usb-remote.c:263
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xed0 kernel/workqueue.c:3389
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>