INFO: task syz-executor.3:13045 blocked for more than 143 seconds.
      Not tainted 6.1.0-rc8-syzkaller-00154-g296a7b7eb792 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3  state:D stack:23272 pid:13045 ppid:3679   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0x8c9/0xd70 kernel/sched/core.c:6521
 schedule+0xcb/0x190 kernel/sched/core.c:6597
 request_wait_answer fs/fuse/dev.c:407 [inline]
 __fuse_request_send fs/fuse/dev.c:426 [inline]
 fuse_simple_request+0x1034/0x1870 fs/fuse/dev.c:511
 fuse_lookup_name+0x349/0x830 fs/fuse/dir.c:392
 fuse_lookup+0x13e/0x5d0 fs/fuse/dir.c:433
 __lookup_slow+0x266/0x3a0 fs/namei.c:1685
 lookup_slow+0x53/0x70 fs/namei.c:1702
 walk_component+0x2e1/0x410 fs/namei.c:1993
 lookup_last fs/namei.c:2450 [inline]
 path_lookupat+0x17d/0x450 fs/namei.c:2474
 filename_lookup+0x274/0x650 fs/namei.c:2503
 user_path_at_empty+0x40/0x1a0 fs/namei.c:2876
 user_path_at include/linux/namei.h:57 [inline]
 __do_sys_chdir fs/open.c:514 [inline]
 __se_sys_chdir+0xb8/0x220 fs/open.c:508
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa45c68c0d9
RSP: 002b:00007fa45d39b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000050
RAX: ffffffffffffffda RBX: 00007fa45c7abf80 RCX: 00007fa45c68c0d9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020004340
RBP: 00007fa45c6e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffff60852ef R14: 00007fa45d39b300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.3:13046 blocked for more than 144 seconds.
      Not tainted 6.1.0-rc8-syzkaller-00154-g296a7b7eb792 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3  state:D stack:22616 pid:13046 ppid:3679   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0x8c9/0xd70 kernel/sched/core.c:6521
 schedule+0xcb/0x190 kernel/sched/core.c:6597
 d_wait_lookup+0x1ca/0x2b0 fs/dcache.c:2625
 d_alloc_parallel+0x9a3/0x1240 fs/dcache.c:2707
 __lookup_slow+0xfd/0x3a0 fs/namei.c:1670
 lookup_slow+0x53/0x70 fs/namei.c:1702
 walk_component+0x2e1/0x410 fs/namei.c:1993
 lookup_last fs/namei.c:2450 [inline]
 path_lookupat+0x17d/0x450 fs/namei.c:2474
 filename_lookup+0x274/0x650 fs/namei.c:2503
 user_path_at_empty+0x40/0x1a0 fs/namei.c:2876
 user_path_at include/linux/namei.h:57 [inline]
 do_mount fs/namespace.c:3380 [inline]
 __do_sys_mount fs/namespace.c:3591 [inline]
 __se_sys_mount+0x296/0x3c0 fs/namespace.c:3568
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa45c68c0d9
RSP: 002b:00007fa45d37a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fa45c7ac050 RCX: 00007fa45c68c0d9
RDX: 0000000000000000 RSI: 00000000200020c0 RDI: 0000000000000000
RBP: 00007fa45c6e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffff60852ef R14: 00007fa45d37a300 R15: 0000000000022000
 </TASK>

Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
 #0: ffffffff8d127330 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 kernel/rcu/tasks.h:507
1 lock held by rcu_tasks_trace/13:
 #0: ffffffff8d127b30 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 kernel/rcu/tasks.h:507
2 locks held by kworker/0:1/14:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc90000137d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
1 lock held by khungtaskd/28:
 #0: ffffffff8d127160 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
2 locks held by kworker/u4:2/33:
 #0: ffff888012869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffff8880b9827788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x611/0x9a0 kernel/sched/psi.c:909
2 locks held by getty/3314:
 #0: ffff88814ac9b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244
 #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x53b/0x1650 drivers/tty/n_tty.c:2177
1 lock held by syz-executor.1/3665:
 #0: ffffffff8d12c738 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:292 [inline]
 #0: ffffffff8d12c738 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x384/0x860 kernel/rcu/tree_exp.h:946
2 locks held by kworker/0:5/3713:
 #0: ffff888012866538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc90004aefd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
3 locks held by kworker/0:7/3715:
2 locks held by kworker/0:8/3739:
 #0: 
ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: 
ffffc90004befd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by kworker/0:9/3779:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc90004c3fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by kworker/0:11/3815:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc90004e4fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by kworker/0:12/3816:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc9000514fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by kworker/0:13/3817:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc9000515fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by kworker/0:15/3819:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc90005197d00 (
(work_completion)(&pwq->unbound_release_work)
){+.+.}-{0:0}
, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
3 locks held by kworker/0:16/3820:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: 
ffffc900051a7d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
 #2: ffffffff8d12c738 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:324 [inline]
 #2: ffffffff8d12c738 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x860 kernel/rcu/tree_exp.h:946
2 locks held by kworker/0:18/3822:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc900051c7d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by kworker/0:19/3823:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc90004c2fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by kworker/1:11/3952:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc90005287d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by kworker/0:22/9078:
 #0: ffff888012864d38
 (
(wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc90015577d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by kworker/0:24/9080:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc90015b37d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by kworker/0:27/9083:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc90015b67d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by kworker/0:33/10807:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc900162b7d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by kworker/0:34/12935:
 #0: ffff888012864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: 
ffffc90004e7fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by kworker/0:35/12936:
 #0: 
ffff888012864d38
 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0
 #1: ffffc900059f7d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264
2 locks held by syz-executor.3/13045:
 #0: ffff888025b99590 (&type->i_mutex_dir_key#24){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:766 [inline]
 #0: ffff888025b99590 (&type->i_mutex_dir_key#24){.+.+}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1701
 #1: 
ffff888025b999f8 (&fi->mutex){+.+.}-{3:3}, at: fuse_lock_inode+0xc0/0x110 fs/fuse/inode.c:468
1 lock held by syz-executor.3/13046:
 #0: 
ffff888025b99590
 (
&type->i_mutex_dir_key
#24
){.+.+}-{3:3}
, at: inode_lock_shared include/linux/fs.h:766 [inline]
, at: lookup_slow+0x45/0x70 fs/namei.c:1701
2 locks held by syz-executor.3/13231:
 #0: 
ffff888025b98810
 (&type->i_mutex_dir_key#24){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:766 [inline]
 (&type->i_mutex_dir_key#24){.+.+}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1701
 #1: ffff888025b98c78 (&fi->mutex){+.+.}-{3:3}, at: fuse_lock_inode+0xc0/0x110 fs/fuse/inode.c:468
1 lock held by syz-executor.3/13232:
 #0: ffff888025b98810 (&type->i_mutex_dir_key#24){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:766 [inline]
 #0: ffff888025b98810 (&type->i_mutex_dir_key#24){.+.+}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1701
1 lock held by syz-executor.3/13233:
 #0: ffff888025b98810 (&type->i_mutex_dir_key#24){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:766 [inline]
 #0: ffff888025b98810 (&type->i_mutex_dir_key#24){.+.+}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1701
1 lock held by syz-executor.3/13321:
 #0: ffff8880312300e0 (&type->s_umount_key#52){++++}-{3:3}, at: deactivate_super+0x96/0xd0 fs/super.c:362
2 locks held by kworker/u4:5/14617:
 #0: ffff888012869138 ((wq_completion)events_unbound){+.+.}-{0:0}
, at: process_one_work+0x7f2/0xdb0
 #1: 
ffffc90005ba7d00
 (
(reaper_work).work
){+.+.}-{0:0}
, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.0-rc8-syzkaller-00154-g296a7b7eb792 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1b1/0x28e lib/dump_stack.c:106
 nmi_cpu_backtrace+0x46f/0x4f0 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x1ba/0x420 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
 watchdog+0xcf5/0xd40 kernel/hung_task.c:377
 kthread+0x266/0x300 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 3715 Comm: kworker/0:7 Not tainted 6.1.0-rc8-syzkaller-00154-g296a7b7eb792 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Workqueue: events uhid_device_add_worker
RIP: 0010:io_serial_in+0x71/0xb0 drivers/tty/serial/8250/8250_port.c:460
Code: e5 f2 d5 fc 89 e9 41 d3 e6 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 46 17 2a fd 44 03 33 44 89 f2 ec <0f> b6 c0 5b 41 5e 41 5f 5d c3 89 e9 80 e1 07 38 c1 7c ad 48 89 ef
RSP: 0018:ffffc90004b0ed38 EFLAGS: 00000002
RAX: 1ffffffff2422f00 RBX: ffffffff92117ec0 RCX: 0000000000000000
RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
RBP: 0000000000000000 R08: ffffffff84b4adb1 R09: ffffed1003cf2047
R10: ffffed1003cf2047 R11: 1ffff11003cf2046 R12: 00000000000026fe
R13: ffffffff92117ed0 R14: 00000000000003fd R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007efda69b2828 CR3: 0000000022d74000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 serial_in drivers/tty/serial/8250/8250.h:118 [inline]
 serial_lsr_in drivers/tty/serial/8250/8250.h:140 [inline]
 wait_for_lsr drivers/tty/serial/8250/8250_port.c:2087 [inline]
 serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3358 [inline]
 serial8250_console_write+0x1342/0x1ab0 drivers/tty/serial/8250/8250_port.c:3436
 call_console_driver kernel/printk/printk.c:1942 [inline]
 console_emit_next_record+0x778/0xa40 kernel/printk/printk.c:2731
 console_unlock+0x27c/0x6f0 kernel/printk/printk.c:2860
 vprintk_emit+0xd1/0x1e0 kernel/printk/printk.c:2268
 dev_vprintk_emit+0x34f/0x3ef drivers/base/core.c:4736
 dev_printk_emit+0xca/0x109 drivers/base/core.c:4747
 _dev_warn+0x110/0x158 drivers/base/core.c:4803
 hid_parser_main+0x738/0xb00 drivers/hid/hid-core.c:633
 hid_open_report+0x843/0x1060 drivers/hid/hid-core.c:1265
 hid_parse include/linux/hid.h:1094 [inline]
 hid_generic_probe+0x38/0x80 drivers/hid/hid-generic.c:63
 hid_device_probe+0x28e/0x390 drivers/hid/hid-core.c:2603
 call_driver_probe+0x96/0x250
 really_probe+0x24c/0x9f0 drivers/base/dd.c:639
 __driver_probe_device+0x1f4/0x3f0 drivers/base/dd.c:778
 driver_probe_device+0x50/0x240 drivers/base/dd.c:808
 __device_attach_driver+0x272/0x3c0 drivers/base/dd.c:936
 bus_for_each_drv+0x16a/0x1f0 drivers/base/bus.c:427
 __device_attach+0x346/0x570 drivers/base/dd.c:1008
 bus_probe_device+0xb8/0x1f0 drivers/base/bus.c:487
 device_add+0xb20/0xf90 drivers/base/core.c:3517
 hid_add_device+0x3a1/0x500 drivers/hid/hid-core.c:2755
 uhid_device_add_worker+0x40/0xf0 drivers/hid/uhid.c:73
 process_one_work+0x877/0xdb0 kernel/workqueue.c:2289
 worker_thread+0xb14/0x1330 kernel/workqueue.c:2436
 kthread+0x266/0x300 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>