INFO: task kworker/1:0:23 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:0     state:D stack:20040 pid:23    ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5381 [inline]
 __schedule+0x1553/0x45a0 kernel/sched/core.c:6700
 schedule+0xbd/0x170 kernel/sched/core.c:6774
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6833
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x6a9/0xcc0 kernel/locking/mutex.c:747
 usb_audio_probe+0x3b3/0x1df0 sound/usb/card.c:813
 usb_probe_interface+0x5c9/0xb20 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x25b/0xb20 drivers/base/dd.c:658
 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:800
 driver_probe_device+0x4f/0x420 drivers/base/dd.c:830
 __device_attach_driver+0x2ca/0x510 drivers/base/dd.c:958
 bus_for_each_drv+0x252/0x2e0 drivers/base/bus.c:459
 __device_attach+0x2c2/0x420 drivers/base/dd.c:1030
 bus_probe_device+0x180/0x260 drivers/base/bus.c:534
 device_add+0x85b/0xc20 drivers/base/core.c:3683
 usb_set_configuration+0x1a79/0x20c0 drivers/usb/core/message.c:2265
 usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:238
 usb_probe_device+0x13d/0x270 drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x25b/0xb20 drivers/base/dd.c:658
 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:800
 driver_probe_device+0x4f/0x420 drivers/base/dd.c:830
 __device_attach_driver+0x2ca/0x510 drivers/base/dd.c:958
 bus_for_each_drv+0x252/0x2e0 drivers/base/bus.c:459
 __device_attach+0x2c2/0x420 drivers/base/dd.c:1030
 bus_probe_device+0x180/0x260 drivers/base/bus.c:534
 device_add+0x85b/0xc20 drivers/base/core.c:3683
 usb_new_device+0xa3c/0x1660 drivers/usb/core/hub.c:2660
 hub_port_connect drivers/usb/core/hub.c:5529 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5669 [inline]
 port_event drivers/usb/core/hub.c:5833 [inline]
 hub_event+0x29bf/0x49f0 drivers/usb/core/hub.c:5915
 process_one_work kernel/workqueue.c:2653 [inline]
 process_scheduled_works+0xa5d/0x15d0 kernel/workqueue.c:2730
 worker_thread+0xa55/0xfc0 kernel/workqueue.c:2811
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>
INFO: task kworker/1:1:30380 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1     state:D stack:23752 pid:30380 ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5381 [inline]
 __schedule+0x1553/0x45a0 kernel/sched/core.c:6700
 schedule+0xbd/0x170 kernel/sched/core.c:6774
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6833
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x6a9/0xcc0 kernel/locking/mutex.c:747
 usb_audio_probe+0x3b3/0x1df0 sound/usb/card.c:813
 usb_probe_interface+0x5c9/0xb20 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x25b/0xb20 drivers/base/dd.c:658
 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:800
 driver_probe_device+0x4f/0x420 drivers/base/dd.c:830
 __device_attach_driver+0x2ca/0x510 drivers/base/dd.c:958
 bus_for_each_drv+0x252/0x2e0 drivers/base/bus.c:459
 __device_attach+0x2c2/0x420 drivers/base/dd.c:1030
 bus_probe_device+0x180/0x260 drivers/base/bus.c:534
 device_add+0x85b/0xc20 drivers/base/core.c:3683
 usb_set_configuration+0x1a79/0x20c0 drivers/usb/core/message.c:2265
 usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:238
 usb_probe_device+0x13d/0x270 drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x25b/0xb20 drivers/base/dd.c:658
 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:800
 driver_probe_device+0x4f/0x420 drivers/base/dd.c:830
 __device_attach_driver+0x2ca/0x510 drivers/base/dd.c:958
 bus_for_each_drv+0x252/0x2e0 drivers/base/bus.c:459
 __device_attach+0x2c2/0x420 drivers/base/dd.c:1030
 bus_probe_device+0x180/0x260 drivers/base/bus.c:534
 device_add+0x85b/0xc20 drivers/base/core.c:3683
 usb_new_device+0xa3c/0x1660 drivers/usb/core/hub.c:2660
 hub_port_connect drivers/usb/core/hub.c:5529 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5669 [inline]
 port_event drivers/usb/core/hub.c:5833 [inline]
 hub_event+0x29bf/0x49f0 drivers/usb/core/hub.c:5915
 process_one_work kernel/workqueue.c:2653 [inline]
 process_scheduled_works+0xa5d/0x15d0 kernel/workqueue.c:2730
 worker_thread+0xa55/0xfc0 kernel/workqueue.c:2811
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>

Showing all locks held in the system:
6 locks held by kworker/1:0/23:
 #0: ffff8881400e3d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
 #0: ffff8881400e3d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 kernel/workqueue.c:2730
 #1: ffffc900001d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
 #1: ffffc900001d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 kernel/workqueue.c:2730
 #2: ffff888024d32190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:995 [inline]
 #2: ffff888024d32190 (&dev->mutex){....}-{3:3}, at: hub_event+0x180/0x49f0 drivers/usb/core/hub.c:5861
 #3: 
ffff888053200190
 (
&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:995 [inline]
&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420 drivers/base/dd.c:1005
 #4: 
ffff88807a47e160
 (
&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:995 [inline]
, at: __device_attach+0x89/0x420 drivers/base/dd.c:1005
 #5: 
ffffffff8e364ba8
 (
register_mutex#6){+.+.}-{3:3}, at: usb_audio_probe+0x3b3/0x1df0 sound/usb/card.c:813
1 lock held by khungtaskd/29:
 #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:334 [inline]
 #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:786 [inline]
 #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 kernel/locking/lockdep.c:6633
2 locks held by getty/5529:
 #0: 
ffff88823bd940a0
 (
&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 drivers/tty/n_tty.c:2217
10 locks held by kworker/0:2/13785:
4 locks held by udevd/19697:
 #0: ffff888063f60790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb1/0xd50 fs/seq_file.c:182
 #1: ffff88805c529488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x5c/0x410 fs/kernfs/file.c:172
 #2: ffff88814d8eee90 (kn->active#19){++++}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814d8eee90 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x410 fs/kernfs/file.c:173
 #3: ffff888053202190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:1000 [inline]
 #3: ffff888053202190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
4 locks held by udevd/19811:
 #0: ffff8880697739e0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb1/0xd50 fs/seq_file.c:182
 #1: ffff88806bb78c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x5c/0x410 fs/kernfs/file.c:172
 #2: ffff88805e363ca0 (kn->active#19){++++}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88805e363ca0 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x410 fs/kernfs/file.c:173
 #3: 
ffff88802df86190
 (
&dev->mutex
){....}-{3:3}
, at: device_lock_interruptible include/linux/device.h:1000 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
4 locks held by udevd/24903:
 #0: ffff888074f12418 (&p->lock
){+.+.}-{3:3}
, at: seq_read_iter+0xb1/0xd50 fs/seq_file.c:182
 #1: 
ffff888027a86088
 (
&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x5c/0x410 fs/kernfs/file.c:172
 #2: ffff88814d7483e8 (kn->active#19){++++}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814d7483e8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x410 fs/kernfs/file.c:173
 #3: ffff888053200190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:1000 [inline]
 #3: ffff888053200190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
6 locks held by kworker/1:1/30380:
 #0: ffff8881400e3d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
 #0: ffff8881400e3d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 kernel/workqueue.c:2730
 #1: ffffc90003547d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
 #1: ffffc90003547d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 kernel/workqueue.c:2730
 #2: ffff888024d80190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:995 [inline]
 #2: ffff888024d80190 (&dev->mutex){....}-{3:3}, at: hub_event+0x180/0x49f0 drivers/usb/core/hub.c:5861
 #3: ffff888053202190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:995 [inline]
 #3: ffff888053202190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420 drivers/base/dd.c:1005
 #4: ffff88807a478160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:995 [inline]
 #4: ffff88807a478160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420 drivers/base/dd.c:1005
 #5: ffffffff8e364ba8 (register_mutex#6){+.+.}-{3:3}, at: usb_audio_probe+0x3b3/0x1df0 sound/usb/card.c:813
1 lock held by syz.1.8162/994:
 #0: ffffffff8d137980 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 kernel/rcu/tree.c:4089

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x18c/0x250 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x3a6/0x3e0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x2f0 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]
 watchdog+0xf3d/0xf80 kernel/hung_task.c:379
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 13785 Comm: kworker/0:2 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:lock_is_held_type+0x129/0x190 kernel/locking/lockdep.c:5827
Code: e8 9c 12 00 00 b8 ff ff ff ff 65 0f c1 05 77 3b 7c 75 83 f8 01 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <75> 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 48
RSP: 0018:ffffc90000007af8 EFLAGS: 00000046
RAX: 0000000000000001 RBX: ffff888058243c00 RCX: 435b1b1a4bc95600
RDX: 0000000000010000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8e60
RBP: 0000000000000000 R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd
R10: dffffc0000000000 R11: fffffbfff1d162be R12: 0000000000000006
R13: 0000000000000046 R14: ffffffff8cfcd2b0 R15: ffff8880582447d0
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4ddc3ea2f8 CR3: 000000001b792000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 rcu_rdp_is_offloaded+0x84/0x190 kernel/rcu/tree_plugin.h:27
 rcu_pending kernel/rcu/tree.c:3966 [inline]
 rcu_sched_clock_irq+0xaaf/0x1230 kernel/rcu/tree.c:2295
 update_process_times+0x147/0x1b0 kernel/time/timer.c:2072
 tick_sched_handle kernel/time/tick-sched.c:254 [inline]
 tick_sched_timer+0x3a2/0x580 kernel/time/tick-sched.c:1492
 __run_hrtimer kernel/time/hrtimer.c:1750 [inline]
 __hrtimer_run_queues+0x4e1/0xc40 kernel/time/hrtimer.c:1814
 hrtimer_interrupt+0x3c9/0x9c0 kernel/time/hrtimer.c:1876
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1077 [inline]
 __sysvec_apic_timer_interrupt+0xfb/0x3b0 arch/x86/kernel/apic/apic.c:1094
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline]
 sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1088
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:console_trylock_spinning kernel/printk/printk.c:2008 [inline]
RIP: 0010:vprintk_emit+0x46f/0x610 kernel/printk/printk.c:2340
Code: 85 3f 01 00 00 e8 c1 a9 1b 00 45 89 f7 48 85 db 48 8b 1c 24 75 07 e8 b0 a9 1b 00 eb 06 e8 a9 a9 1b 00 fb 48 c7 c7 00 64 12 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 b1
RSP: 0018:ffffc90000bc63e0 EFLAGS: 00000246
RAX: ffffffff816b7857 RBX: ffffffff816b76fb RCX: 0000000000100000
RDX: ffffc90017668000 RSI: 00000000000fffff RDI: ffffffff8d126400
RBP: ffffc90000bc64d0 R08: ffffffff911c5687 R09: 1ffffffff2238ad0
R10: dffffc0000000000 R11: fffffbfff2238ad1 R12: dffffc0000000000
R13: 1ffff92000178c80 R14: 000000000000001b R15: 000000000000001b
 dev_vprintk_emit+0x356/0x410 drivers/base/core.c:4953
 dev_printk_emit+0xef/0x140 drivers/base/core.c:4964
 _dev_err+0x11f/0x170 drivers/base/core.c:5019
 parse_uac2_sample_rate_range+0x992/0xc60 sound/usb/format.c:401
 parse_audio_format_rates_v2v3+0x316/0x1720 sound/usb/format.c:620
 parse_audio_format_i+0x765/0xea0 sound/usb/format.c:718
 snd_usb_parse_audio_format+0x8b/0x740 sound/usb/format.c:796
 snd_usb_get_audioformat_uac12 sound/usb/stream.c:854 [inline]
 __snd_usb_parse_audio_interface+0x18c2/0x4db0 sound/usb/stream.c:1196
 snd_usb_parse_audio_interface+0x3a/0xc0 sound/usb/stream.c:1274
 create_standard_audio_quirk+0x5d/0x120 sound/usb/quirks.c:101
 snd_usb_create_quirk sound/usb/quirks.c:541 [inline]
 create_composite_quirk+0x1f0/0x4e0 sound/usb/quirks.c:49
 usb_audio_probe+0xb9e/0x1df0 sound/usb/card.c:886
 usb_probe_interface+0x5c9/0xb20 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x25b/0xb20 drivers/base/dd.c:658
 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:800
 driver_probe_device+0x4f/0x420 drivers/base/dd.c:830
 __device_attach_driver+0x2ca/0x510 drivers/base/dd.c:958
 bus_for_each_drv+0x252/0x2e0 drivers/base/bus.c:459
 __device_attach+0x2c2/0x420 drivers/base/dd.c:1030
 bus_probe_device+0x180/0x260 drivers/base/bus.c:534
 device_add+0x85b/0xc20 drivers/base/core.c:3683
 usb_set_configuration+0x1a79/0x20c0 drivers/usb/core/message.c:2265
 usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:238
 usb_probe_device+0x13d/0x270 drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x25b/0xb20 drivers/base/dd.c:658
 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:800
 driver_probe_device+0x4f/0x420 drivers/base/dd.c:830
 __device_attach_driver+0x2ca/0x510 drivers/base/dd.c:958
 bus_for_each_drv+0x252/0x2e0 drivers/base/bus.c:459
 __device_attach+0x2c2/0x420 drivers/base/dd.c:1030
 bus_probe_device+0x180/0x260 drivers/base/bus.c:534
 device_add+0x85b/0xc20 drivers/base/core.c:3683
 usb_new_device+0xa3c/0x1660 drivers/usb/core/hub.c:2660
 hub_port_connect drivers/usb/core/hub.c:5529 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5669 [inline]
 port_event drivers/usb/core/hub.c:5833 [inline]
 hub_event+0x29bf/0x49f0 drivers/usb/core/hub.c:5915
 process_one_work kernel/workqueue.c:2653 [inline]
 process_scheduled_works+0xa5d/0x15d0 kernel/workqueue.c:2730
 worker_thread+0xa55/0xfc0 kernel/workqueue.c:2811
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>