INFO: task syz.1.205:4485 blocked for more than 143 seconds. Not tainted 5.15.167-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.205 state:D stack:24576 pid: 4485 ppid: 4128 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5027 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373 schedule+0x11b/0x1f0 kernel/sched/core.c:6456 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6515 rwsem_down_read_slowpath+0x605/0xb40 kernel/locking/rwsem.c:1055 __down_read_common kernel/locking/rwsem.c:1239 [inline] __down_read kernel/locking/rwsem.c:1252 [inline] down_read+0x9a/0x2e0 kernel/locking/rwsem.c:1500 iterate_supers+0xac/0x1e0 fs/super.c:714 ksys_sync+0xb9/0x1c0 fs/sync.c:102 __do_sys_sync+0xa/0x10 fs/sync.c:113 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7fb32c5dbef9 RSP: 002b:00007fb32aa54038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 RAX: ffffffffffffffda RBX: 00007fb32c793f80 RCX: 00007fb32c5dbef9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007fb32c64eb76 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fb32c793f80 R15: 00007fffd92a3628 Showing all locks held in the system: 1 lock held by khungtaskd/27: #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 2 locks held by getty/3335: #0: ffff88814b583098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252 #1: ffffc9000209b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 drivers/tty/n_tty.c:2158 5 locks held by kworker/1:4/3572: #0: ffff8881415c5538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283 #1: ffffc90002e37d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285 #2: ffff8881481d2220 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:760 [inline] #2: ffff8881481d2220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0 drivers/usb/core/hub.c:5769 #3: ffff8881481995c0 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3125 [inline] #3: ffff8881481995c0 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5351 [inline] #3: ffff8881481995c0 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5595 [inline] #3: ffff8881481995c0 (&port_dev->status_lock){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5741 [inline] #3: ffff8881481995c0 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2238/0x54c0 drivers/usb/core/hub.c:5823 #4: ffff888148016e68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5352 [inline] #4: ffff888148016e68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5595 [inline] #4: ffff888148016e68 (hcd->address0_mutex){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5741 [inline] #4: ffff888148016e68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2260/0x54c0 drivers/usb/core/hub.c:5823 1 lock held by syz.4.11/3675: #0: ffff88807a1780e0 (&type->s_umount_key#49){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 fs/super.c:365 1 lock held by syz.2.60/3818: #0: ffff88807a4fc0e0 (&type->s_umount_key#49){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 fs/super.c:365 1 lock held by syz.1.117/3996: #0: ffff8880793860e0 (&type->s_umount_key#49){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 fs/super.c:365 1 lock held by syz.0.164/4327: #0: ffff888056e540e0 (&type->s_umount_key#49){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 fs/super.c:365 1 lock held by syz.1.205/4485: #0: ffff88807a1780e0 (&type->s_umount_key#49){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 fs/super.c:714 2 locks held by kworker/u4:18/4620: 3 locks held by kworker/1:20/5610: #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283 #1: ffffc90004a0fd20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285 #2: ffffffff8c924130 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 kernel/rcu/tree.c:4039 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2d0 lib/dump_stack.c:106 nmi_cpu_backtrace+0x46a/0x4a0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x181/0x2a0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline] watchdog+0xe72/0xeb0 kernel/hung_task.c:295 kthread+0x3f6/0x4f0 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 3572 Comm: kworker/1:4 Not tainted 5.15.167-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:rdtsc_ordered arch/x86/include/asm/msr.h:224 [inline] RIP: 0010:delay_tsc+0x6f/0xd0 arch/x86/lib/delay.c:72 Code: 00 e8 55 26 26 fd 65 8b 05 d6 28 d1 7b 85 c0 74 2f f3 90 bf 01 00 00 00 e8 be 24 26 fd e8 19 1a 03 06 41 39 c7 75 20 0f 01 f9 <66> 90 48 89 d5 48 c1 e5 20 48 09 c5 48 29 dd 49 39 ee 77 be eb 23 RSP: 0018:ffffc90002e36ef0 EFLAGS: 00000046 RAX: 000000009b3ccf4e RBX: 0000008e9b3ccdec RCX: 0000000000000001 RDX: 000000000000008e RSI: ffffffff8ad904a0 RDI: ffffffff8ad90460 RBP: 00000000000000bd R08: ffffffff847b4229 R09: 0000000000000003 R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffffffff2d71e65 R13: ffffffff96b8f080 R14: 0000000000000899 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055c7a6bb3018 CR3: 0000000073dc2000 CR4: 00000000003506e0 DR0: ffffffffffffffff DR1: 0000000000000001 DR2: 0000000000000000 DR3: 0000000080000001 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: wait_for_xmitr+0xb8/0x260 drivers/tty/serial/8250/8250_port.c:2077 serial8250_console_putchar+0x19/0x50 drivers/tty/serial/8250/8250_port.c:3301 uart_console_write+0xa9/0x100 drivers/tty/serial/serial_core.c:1979 serial8250_console_write+0xc8e/0x1180 drivers/tty/serial/8250/8250_port.c:3378 console_unlock+0xced/0x12b0 kernel/printk/printk.c:2744 vprintk_emit+0xbf/0x150 kernel/printk/printk.c:2274 dev_vprintk_emit+0x2aa/0x330 drivers/base/core.c:4621 dev_printk_emit+0xd9/0x120 drivers/base/core.c:4632 _dev_info+0x11e/0x170 drivers/base/core.c:4690 announce_device drivers/usb/core/hub.c:2311 [inline] usb_new_device+0x81f/0x18e0 drivers/usb/core/hub.c:2574 hub_port_connect drivers/usb/core/hub.c:5455 [inline] hub_port_connect_change drivers/usb/core/hub.c:5595 [inline] port_event drivers/usb/core/hub.c:5741 [inline] hub_event+0x2cdf/0x54c0 drivers/usb/core/hub.c:5823 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457 kthread+0x3f6/0x4f0 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287