Extracting prog: 9m12.615263055s Minimizing prog: 21m16.283796994s Simplifying prog options: 9m7.376605977s Extracting C: 5m12.649379206s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setscheduler-syz_usbip_server_init-syz_open_dev$usbfs detailed listing: executing program 0: sched_setscheduler(0x0, 0x1, 0x0) syz_usbip_server_init(0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) program crashed: INFO: task hung in usbdev_release program crashed: INFO: task hung in usbdev_release single: successfully extracted reproducer found reproducer with 3 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setscheduler-syz_usbip_server_init detailed listing: executing program 0: sched_setscheduler(0x0, 0x1, 0x0) syz_usbip_server_init(0x4) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setscheduler-syz_open_dev$usbfs detailed listing: executing program 0: sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usbip_server_init-syz_open_dev$usbfs detailed listing: executing program 0: syz_usbip_server_init(0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) program crashed: INFO: task hung in usbdev_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usbip_server_init-syz_open_dev$usbfs detailed listing: executing program 0: syz_usbip_server_init(0x4) syz_open_dev$usbfs(0x0, 0x70, 0x101301) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usbip_server_init-syz_open_dev$usbfs program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usbip_server_init-syz_open_dev$usbfs detailed listing: executing program 0: syz_usbip_server_init(0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) program crashed: INFO: task hung in usbdev_open a never seen crash title: INFO: task hung in usbdev_open, ignore testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usbip_server_init-syz_open_dev$usbfs detailed listing: executing program 0: syz_usbip_server_init(0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usbip_server_init-syz_open_dev$usbfs detailed listing: executing program 0: syz_usbip_server_init(0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) program crashed: INFO: task hung in usbdev_release validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usbip_server_init-syz_open_dev$usbfs detailed listing: executing program 0: syz_usbip_server_init(0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) program crashed: INFO: task hung in usbdev_release validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usbip_server_init-syz_open_dev$usbfs detailed listing: executing program 0: syz_usbip_server_init(0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) program crashed: INFO: task hung in usb_remote_wakeup validation run: crashed=true reproducing took 55m47.624322257s repro crashed as (corrupted=false): INFO: task kworker/0:7:4492 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:7 state:D stack:0 pid:4492 ppid:2 flags:0x00000008 Workqueue: pm hcd_resume_work Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 device_lock include/linux/device.h:885 [inline] usb_remote_wakeup+0x24/0xf8 drivers/usb/core/hub.c:3834 hcd_resume_work+0x40/0x50 drivers/usb/core/hcd.c:2401 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 INFO: task syz.0.48:4691 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.48 state:D stack:0 pid:4691 ppid:4484 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 device_lock include/linux/device.h:885 [inline] usbdev_release+0x78/0x6d4 drivers/usb/core/devio.c:1097 __fput+0x1b4/0x7b0 fs/file_table.c:320 ____fput+0x20/0x30 fs/file_table.c:348 task_work_run+0x1f4/0x280 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x20f8/0x2c84 arch/arm64/kernel/signal.c:1151 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x98/0x128 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.4.51:4697 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.51 state:D stack:0 pid:4697 ppid:4495 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 device_lock include/linux/device.h:885 [inline] usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 chrdev_open+0x3d0/0x51c fs/char_dev.c:414 do_dentry_open+0x738/0xf8c fs/open.c:882 vfs_open+0x7c/0x90 fs/open.c:1015 do_open fs/namei.c:3634 [inline] path_openat+0x1fc0/0x27a0 fs/namei.c:3791 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.2.49:4698 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.49 state:D stack:0 pid:4698 ppid:4489 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 device_lock include/linux/device.h:885 [inline] usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 chrdev_open+0x3d0/0x51c fs/char_dev.c:414 do_dentry_open+0x738/0xf8c fs/open.c:882 vfs_open+0x7c/0x90 fs/open.c:1015 do_open fs/namei.c:3634 [inline] path_openat+0x1fc0/0x27a0 fs/namei.c:3791 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.1.50:4702 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.50 state:D stack:0 pid:4702 ppid:4482 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 device_lock include/linux/device.h:885 [inline] usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 chrdev_open+0x3d0/0x51c fs/char_dev.c:414 do_dentry_open+0x738/0xf8c fs/open.c:882 vfs_open+0x7c/0x90 fs/open.c:1015 do_open fs/namei.c:3634 [inline] path_openat+0x1fc0/0x27a0 fs/namei.c:3791 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.3.52:4709 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.52 state:D stack:0 pid:4709 ppid:4488 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 device_lock include/linux/device.h:885 [inline] usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 chrdev_open+0x3d0/0x51c fs/char_dev.c:414 do_dentry_open+0x738/0xf8c fs/open.c:882 vfs_open+0x7c/0x90 fs/open.c:1015 do_open fs/namei.c:3634 [inline] path_openat+0x1fc0/0x27a0 fs/namei.c:3791 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Showing all locks held in the system: 3 locks held by kworker/u4:0/9: 1 lock held by rcu_tasks_kthre/12: #0: ffff800015557db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 1 lock held by rcu_tasks_trace/13: #0: ffff8000155585d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 5 locks held by kworker/0:1/14: #0: ffff0000c4a58138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff80001cb87c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff0000d265e190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #2: ffff0000d265e190 (&dev->mutex){....}-{3:3}, at: hub_event+0x134/0x3e74 drivers/usb/core/hub.c:5845 #3: ffff0000d2701518 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3200 [inline] #3: ffff0000d2701518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5413 [inline] #3: ffff0000d2701518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5657 [inline] #3: ffff0000d2701518 (&port_dev->status_lock){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5817 [inline] #3: ffff0000d2701518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x19fc/0x3e74 drivers/usb/core/hub.c:5899 #4: ffff0000d22ed468 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5414 [inline] #4: ffff0000d22ed468 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5657 [inline] #4: ffff0000d22ed468 (hcd->address0_mutex){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5817 [inline] #4: ffff0000d22ed468 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x1a2c/0x3e74 drivers/usb/core/hub.c:5899 1 lock held by khungtaskd/28: #0: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349 5 locks held by kworker/0:2/1516: #0: ffff0000c4a58138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff8000251e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #2: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x134/0x3e74 drivers/usb/core/hub.c:5845 #3: ffff0000d25b9518 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3200 [inline] #3: ffff0000d25b9518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5413 [inline] #3: ffff0000d25b9518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5657 [inline] #3: ffff0000d25b9518 (&port_dev->status_lock){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5817 [inline] #3: ffff0000d25b9518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x19fc/0x3e74 drivers/usb/core/hub.c:5899 #4: ffff0000d22d6c68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5414 [inline] #4: ffff0000d22d6c68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5657 [inline] #4: ffff0000d22d6c68 (hcd->address0_mutex){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5817 [inline] #4: ffff0000d22d6c68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x1a2c/0x3e74 drivers/usb/core/hub.c:5899 2 locks held by getty/4082: #0: ffff0000d6b21098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff800020b2b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 drivers/tty/n_tty.c:2198 3 locks held by kworker/0:5/4404: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff8000210f7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff0000ef930240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1d8/0x2708 drivers/net/netdevsim/fib.c:1491 3 locks held by kworker/0:7/4492: #0: ffff0000c08f2138 ((wq_completion)pm){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800021107c40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #2: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usb_remote_wakeup+0x24/0xf8 drivers/usb/core/hub.c:3834 1 lock held by syz.0.48/4691: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x78/0x6d4 drivers/usb/core/devio.c:1097 1 lock held by syz.4.51/4697: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.2.49/4698: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.1.50/4702: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.3.52/4709: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.6.54/4831: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.5.53/4835: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.8.56/4841: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.9.57/4845: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.7.55/4849: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.3.61/4904: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.1.59/4913: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.2.60/4935: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.0.58/4940: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.4.62/4941: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.5.63/4987: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.6.64/5033: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.7.65/5067: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.8.66/5071: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.9.67/5074: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.3.68/5092: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.1.69/5108: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.0.70/5161: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.2.71/5165: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.4.72/5169: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.5.73/5200: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.6.74/5226: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.7.75/5281: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.8.76/5301: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.9.77/5305: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.3.78/5324: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.1.79/5340: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.2.81/5377: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.0.80/5395: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.4.82/5399: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.5.83/5425: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.6.84/5451: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.7.85/5503: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.8.86/5517: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.9.87/5534: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.3.88/5547: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.1.89/5563: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 7 locks held by syz-executor/5587: #0: ffff0000d8e9a460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 fs/read_write.c:580 #1: ffff00010c8b5c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1b8/0x4b4 fs/kernfs/file.c:343 #2: ffff0000cadd4a00 (kn->active#56){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff0000cadd4a00 (kn->active#56){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f8/0x4b4 fs/kernfs/file.c:344 #3: ffff800016db0568 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xdc/0x330 drivers/net/netdevsim/bus.c:209 #4: ffff0000f2a1a0e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #4: ffff0000f2a1a0e8 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1099 [inline] #4: ffff0000f2a1a0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x9c/0x6e4 drivers/base/dd.c:1302 #5: ffff0000f2a182f8 (&devlink->lock_key#35){+.+.}-{3:3}, at: devl_lock+0x24/0x34 net/devlink/leftover.c:275 #6: ffff80001555cfc0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x58/0x5b8 kernel/rcu/tree.c:4023 1 lock held by syz.2.90/5590: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 ============================================= final repro crashed as (corrupted=false): INFO: task kworker/0:7:4492 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:7 state:D stack:0 pid:4492 ppid:2 flags:0x00000008 Workqueue: pm hcd_resume_work Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 device_lock include/linux/device.h:885 [inline] usb_remote_wakeup+0x24/0xf8 drivers/usb/core/hub.c:3834 hcd_resume_work+0x40/0x50 drivers/usb/core/hcd.c:2401 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 INFO: task syz.0.48:4691 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.48 state:D stack:0 pid:4691 ppid:4484 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 device_lock include/linux/device.h:885 [inline] usbdev_release+0x78/0x6d4 drivers/usb/core/devio.c:1097 __fput+0x1b4/0x7b0 fs/file_table.c:320 ____fput+0x20/0x30 fs/file_table.c:348 task_work_run+0x1f4/0x280 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x20f8/0x2c84 arch/arm64/kernel/signal.c:1151 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x98/0x128 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.4.51:4697 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.51 state:D stack:0 pid:4697 ppid:4495 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 device_lock include/linux/device.h:885 [inline] usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 chrdev_open+0x3d0/0x51c fs/char_dev.c:414 do_dentry_open+0x738/0xf8c fs/open.c:882 vfs_open+0x7c/0x90 fs/open.c:1015 do_open fs/namei.c:3634 [inline] path_openat+0x1fc0/0x27a0 fs/namei.c:3791 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.2.49:4698 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.49 state:D stack:0 pid:4698 ppid:4489 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 device_lock include/linux/device.h:885 [inline] usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 chrdev_open+0x3d0/0x51c fs/char_dev.c:414 do_dentry_open+0x738/0xf8c fs/open.c:882 vfs_open+0x7c/0x90 fs/open.c:1015 do_open fs/namei.c:3634 [inline] path_openat+0x1fc0/0x27a0 fs/namei.c:3791 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.1.50:4702 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.50 state:D stack:0 pid:4702 ppid:4482 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 device_lock include/linux/device.h:885 [inline] usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 chrdev_open+0x3d0/0x51c fs/char_dev.c:414 do_dentry_open+0x738/0xf8c fs/open.c:882 vfs_open+0x7c/0x90 fs/open.c:1015 do_open fs/namei.c:3634 [inline] path_openat+0x1fc0/0x27a0 fs/namei.c:3791 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.3.52:4709 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.52 state:D stack:0 pid:4709 ppid:4488 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 device_lock include/linux/device.h:885 [inline] usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 chrdev_open+0x3d0/0x51c fs/char_dev.c:414 do_dentry_open+0x738/0xf8c fs/open.c:882 vfs_open+0x7c/0x90 fs/open.c:1015 do_open fs/namei.c:3634 [inline] path_openat+0x1fc0/0x27a0 fs/namei.c:3791 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Showing all locks held in the system: 3 locks held by kworker/u4:0/9: 1 lock held by rcu_tasks_kthre/12: #0: ffff800015557db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 1 lock held by rcu_tasks_trace/13: #0: ffff8000155585d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 5 locks held by kworker/0:1/14: #0: ffff0000c4a58138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff80001cb87c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff0000d265e190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #2: ffff0000d265e190 (&dev->mutex){....}-{3:3}, at: hub_event+0x134/0x3e74 drivers/usb/core/hub.c:5845 #3: ffff0000d2701518 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3200 [inline] #3: ffff0000d2701518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5413 [inline] #3: ffff0000d2701518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5657 [inline] #3: ffff0000d2701518 (&port_dev->status_lock){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5817 [inline] #3: ffff0000d2701518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x19fc/0x3e74 drivers/usb/core/hub.c:5899 #4: ffff0000d22ed468 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5414 [inline] #4: ffff0000d22ed468 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5657 [inline] #4: ffff0000d22ed468 (hcd->address0_mutex){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5817 [inline] #4: ffff0000d22ed468 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x1a2c/0x3e74 drivers/usb/core/hub.c:5899 1 lock held by khungtaskd/28: #0: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349 5 locks held by kworker/0:2/1516: #0: ffff0000c4a58138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff8000251e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #2: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x134/0x3e74 drivers/usb/core/hub.c:5845 #3: ffff0000d25b9518 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3200 [inline] #3: ffff0000d25b9518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5413 [inline] #3: ffff0000d25b9518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5657 [inline] #3: ffff0000d25b9518 (&port_dev->status_lock){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5817 [inline] #3: ffff0000d25b9518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x19fc/0x3e74 drivers/usb/core/hub.c:5899 #4: ffff0000d22d6c68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5414 [inline] #4: ffff0000d22d6c68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5657 [inline] #4: ffff0000d22d6c68 (hcd->address0_mutex){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5817 [inline] #4: ffff0000d22d6c68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x1a2c/0x3e74 drivers/usb/core/hub.c:5899 2 locks held by getty/4082: #0: ffff0000d6b21098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff800020b2b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 drivers/tty/n_tty.c:2198 3 locks held by kworker/0:5/4404: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff8000210f7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff0000ef930240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1d8/0x2708 drivers/net/netdevsim/fib.c:1491 3 locks held by kworker/0:7/4492: #0: ffff0000c08f2138 ((wq_completion)pm){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800021107c40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #2: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usb_remote_wakeup+0x24/0xf8 drivers/usb/core/hub.c:3834 1 lock held by syz.0.48/4691: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x78/0x6d4 drivers/usb/core/devio.c:1097 1 lock held by syz.4.51/4697: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.2.49/4698: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.1.50/4702: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.3.52/4709: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.6.54/4831: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.5.53/4835: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.8.56/4841: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.9.57/4845: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.7.55/4849: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.3.61/4904: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.1.59/4913: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.2.60/4935: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.0.58/4940: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.4.62/4941: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.5.63/4987: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.6.64/5033: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.7.65/5067: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.8.66/5071: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.9.67/5074: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.3.68/5092: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.1.69/5108: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.0.70/5161: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.2.71/5165: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.4.72/5169: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.5.73/5200: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.6.74/5226: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.7.75/5281: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.8.76/5301: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.9.77/5305: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.3.78/5324: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.1.79/5340: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.2.81/5377: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.0.80/5395: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.4.82/5399: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.5.83/5425: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.6.84/5451: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.7.85/5503: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.8.86/5517: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.9.87/5534: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.3.88/5547: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 1 lock held by syz.1.89/5563: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 7 locks held by syz-executor/5587: #0: ffff0000d8e9a460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 fs/read_write.c:580 #1: ffff00010c8b5c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1b8/0x4b4 fs/kernfs/file.c:343 #2: ffff0000cadd4a00 (kn->active#56){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff0000cadd4a00 (kn->active#56){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f8/0x4b4 fs/kernfs/file.c:344 #3: ffff800016db0568 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xdc/0x330 drivers/net/netdevsim/bus.c:209 #4: ffff0000f2a1a0e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #4: ffff0000f2a1a0e8 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1099 [inline] #4: ffff0000f2a1a0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x9c/0x6e4 drivers/base/dd.c:1302 #5: ffff0000f2a182f8 (&devlink->lock_key#35){+.+.}-{3:3}, at: devl_lock+0x24/0x34 net/devlink/leftover.c:275 #6: ffff80001555cfc0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x58/0x5b8 kernel/rcu/tree.c:4023 1 lock held by syz.2.90/5590: #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #0: ffff0001ffb1c190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x138/0x69c drivers/usb/core/devio.c:1052 =============================================