INFO: task kworker/0:0:8 blocked for more than 143 seconds.
      Not tainted 6.13.0-rc1-syzkaller-gcdd30ebb1b9f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:0     state:R
  running task    
 stack:21600 pid:8     tgid:8     ppid:2      flags:0x00004000
Workqueue: events usb_gadget_state_work

Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x102c/0x34b0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6848
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1084
 __down_read_common kernel/locking/rwsem.c:1248 [inline]
 __down_read kernel/locking/rwsem.c:1261 [inline]
 down_read+0x124/0x330 kernel/locking/rwsem.c:1526
 kernfs_find_and_get_ns+0x71/0xc0 fs/kernfs/dir.c:918
 kernfs_find_and_get include/linux/kernfs.h:604 [inline]
 sysfs_notify+0x98/0xf0 fs/sysfs/file.c:208
 usb_gadget_state_work+0x48/0x60 drivers/usb/gadget/udc/core.c:1120
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

Showing all locks held in the system:
3 locks held by kworker/0:1/9:
 #0: ffff8881062fad48
 ((wq_completion)usb_hub_wq){+.+.}-{0:0}
, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204
 #1: ffffc9000009fd80 ((work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
 #2: ffff88810af29190
 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1014 [inline]
 (&dev->mutex){....}-{4:4}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
1 lock held by khungtaskd/30:
 #0: 
ffffffff88ebc400 (rcu_read_lock){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6744
4 locks held by kworker/1:2/1118:
2 locks held by getty/2901:
 #0: 
ffff8881122390a0 (
&tty->ldisc_sem){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: 
ffffc900000432f0
 (&ldata->atomic_read_lock
){+.+.}-{4:4}
, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211
4 locks held by kworker/1:5/5225:
 #0: 
ffff8881062fad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204
 #1: ffffc9000202fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}
, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
 #2: ffff88810b736190 (&dev->mutex
){....}-{4:4}, at: device_lock include/linux/device.h:1014 [inline]
){....}-{4:4}, at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849
 #3: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}
, at: kernfs_add_one+0xb1/0x520 fs/kernfs/dir.c:778
7 locks held by kworker/1:6/8196:
6 locks held by kworker/0:4/8775:
1 lock held by syz-executor/10377:
 #0: 
ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141
2 locks held by kworker/u8:4/10379:
 #0: ffff888100089148 ((wq_completion)events_unbound
){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204
 #1: 
ffffc90014a67d80 (
(work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
1 lock held by syz-executor/10394:
 #0: ffff888100abc148 (&root->kernfs_rwsem
){++++}-{4:4}
, at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141
1 lock held by syz-executor/10400:
 #0: ffff888100abc148
 (
&root->kernfs_rwsem
){++++}-{4:4}, at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141
1 lock held by syz-executor/10403:
 #0: ffff888100abc148 (&root->kernfs_rwsem
){++++}-{4:4}
, at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141
1 lock held by udevd/11764:
 #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159
1 lock held by udevd/12367:
 #0: 
ffff888100abc148
 (
&root->kernfs_rwsem){++++}-{4:4}
, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159
1 lock held by syz-executor/16733:
 #0: 
ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}
, at: kernfs_dop_revalidate+0x39e/0x5a0 fs/kernfs/dir.c:1141
3 locks held by kworker/0:8/17369:
 #0: 
ffff888100080948
 ((wq_completion)events
){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204
 #1: ffffc900077b7d80 ((work_completion)(&gadget->work)){+.+.}-{0:0}
, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
 #2: ffff888100abc148
 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_find_and_get_ns+0x71/0xc0 fs/kernfs/dir.c:918
1 lock held by syz-executor/17478:
 #0: 
ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}
, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159
1 lock held by syz-executor/17479:
 #0: ffff888100abc148
 (&root->kernfs_rwsem){++++}-{4:4}
, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159
1 lock held by syz-executor/17480:
 #0: ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}
, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159
1 lock held by syz-executor/17481:
 #0: 
ffff888100abc148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159
1 lock held by modprobe/17485:

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-syzkaller-gcdd30ebb1b9f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:234 [inline]
 watchdog+0xf14/0x1240 kernel/hung_task.c:397
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 8196 Comm: kworker/1:6 Not tainted 6.13.0-rc1-syzkaller-gcdd30ebb1b9f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events legacy_dvb_usb_read_remote_control
RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline]
RIP: 0010:write_comp_data+0x38/0x90 kernel/kcov.c:246
Code: 6d a8 7e 65 8b 05 50 6d a8 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 54 15 00 00 <85> c0 74 4f 8b 82 30 15 00 00 83 f8 03 75 44 48 8b 82 38 15 00 00
RSP: 0018:ffffc900001b8b28 EFLAGS: 00000046
RAX: 0000000000000000 RBX: ffff88812387c000 RCX: ffffffff811b4fea
RDX: ffff88811c70d7c0 RSI: ffff88812387c000 RDI: 0000000000000006
RBP: ffff8881a387c000 R08: 0000000000000006 R09: ffff88812387c000
R10: ffff8881a387c000 R11: 0000000000000003 R12: 0000000000000000
R13: 0000000000112008 R14: ffff888100041a00 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881f5900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4171c94440 CR3: 0000000008ca0000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 __phys_addr+0x2a/0x150 arch/x86/mm/physaddr.c:20
 virt_to_folio include/linux/mm.h:1294 [inline]
 virt_to_slab mm/slab.h:211 [inline]
 check_slab_allocation+0x15/0x130 mm/kasan/common.c:219
 kasan_slab_pre_free include/linux/kasan.h:198 [inline]
 slab_free_hook mm/slub.c:2283 [inline]
 slab_free mm/slub.c:4598 [inline]
 kfree+0xff/0x470 mm/slub.c:4746
 dummy_timer+0x177d/0x3930 drivers/usb/gadget/udc/dummy_hcd.c:1987
 __run_hrtimer kernel/time/hrtimer.c:1739 [inline]
 __hrtimer_run_queues+0x20a/0xae0 kernel/time/hrtimer.c:1803
 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1820
 handle_softirqs+0x206/0x8d0 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xfa/0x160 kernel/softirq.c:655
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:console_trylock_spinning kernel/printk/printk.c:2061 [inline]
RIP: 0010:vprintk_emit+0x621/0x6f0 kernel/printk/printk.c:2431
Code: 85 ed 0f 85 81 00 00 00 e8 6c 22 20 00 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 c8 24 20 00 4d 85 e4 0f 85 8d 00 00 00 <e8> 4a 22 20 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00
RSP: 0018:ffffc90001d9fa30 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000017 RCX: ffffffff813b308e
RDX: ffff88811c70d7c0 RSI: ffffffff813b3098 RDI: 0000000000000007
RBP: 1ffff920003b3f48 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000000
R13: 0000000000000200 R14: ffff888101e957c0 R15: ffffc90001d9fb18
 vprintk+0x7f/0xa0 kernel/printk/printk_safe.c:86
 _printk+0xc8/0x100 kernel/printk/printk.c:2457
 m920x_read drivers/media/usb/dvb-usb/m920x.c:40 [inline]
 m920x_rc_query+0x496/0x770 drivers/media/usb/dvb-usb/m920x.c:193
 legacy_dvb_usb_read_remote_control+0x10a/0x500 drivers/media/usb/dvb-usb/dvb-usb-remote.c:123
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored