INFO: task kworker/1:4:5224 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:4 state:D stack:21944 pid:5224 tgid:5224 ppid:2 task_flags:0x4288060 flags:0x00080000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1138/0x47e0 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7283 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7340 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xced/0x1b10 kernel/locking/mutex.c:820 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:611 device_del+0x605/0x9b0 drivers/base/core.c:3913 device_unregister+0x1d/0xe0 drivers/base/core.c:3936 device_destroy+0x99/0xe0 drivers/base/core.c:4490 comedi_free_board_dev drivers/comedi/comedi_fops.c:614 [inline] comedi_free_board_dev drivers/comedi/comedi_fops.c:609 [inline] comedi_release_hardware_device+0x19b/0x220 drivers/comedi/comedi_fops.c:3555 comedi_auto_config.cold+0x4a/0x1ac drivers/comedi/drivers.c:1181 usb_probe_interface+0x303/0x8f0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x241/0xa60 drivers/base/dd.c:709 __driver_probe_device+0x22e/0x480 drivers/base/dd.c:871 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:901 __device_attach_driver+0x1df/0x340 drivers/base/dd.c:1029 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1101 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1156 bus_probe_device+0x64/0x160 drivers/base/bus.c:613 device_add+0x1210/0x1950 drivers/base/core.c:3706 usb_set_configuration+0xd97/0x1c60 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:291 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x241/0xa60 drivers/base/dd.c:709 __driver_probe_device+0x22e/0x480 drivers/base/dd.c:871 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:901 __device_attach_driver+0x1df/0x340 drivers/base/dd.c:1029 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1101 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1156 bus_probe_device+0x64/0x160 drivers/base/bus.c:613 device_add+0x1210/0x1950 drivers/base/core.c:3706 usb_new_device.cold+0x685/0x115c drivers/usb/core/hub.c:2695 hub_port_connect drivers/usb/core/hub.c:5567 [inline] hub_port_connect_change drivers/usb/core/hub.c:5707 [inline] port_event drivers/usb/core/hub.c:5871 [inline] hub_event+0x314d/0x4af0 drivers/usb/core/hub.c:5953 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3314 process_scheduled_works kernel/workqueue.c:3397 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3478 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x69a/0xc80 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz.3.1295:10237 blocked for more than 144 seconds. Not tainted syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.1295 state:D stack:26920 pid:10237 tgid:10236 ppid:2969 task_flags:0x40044c flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1138/0x47e0 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7283 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7340 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xced/0x1b10 kernel/locking/mutex.c:820 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:611 device_remove+0xcb/0x180 drivers/base/dd.c:619 __device_release_driver drivers/base/dd.c:1352 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1375 driver_detach+0xd8/0x1b0 drivers/base/dd.c:1438 bus_remove_driver+0x13b/0x2e0 drivers/base/bus.c:825 driver_unregister+0x76/0xb0 drivers/base/driver.c:277 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1757 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463 __fput+0x3ff/0xb50 fs/file_table.c:510 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x951/0x2af0 kernel/exit.c:976 do_group_exit+0xd5/0x2a0 kernel/exit.c:1119 get_signal+0x20ff/0x2210 kernel/signal.c:3037 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x83/0x480 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x682/0x7f0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbe8b6bcaeb RSP: 002b:00007fbe8a10cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fbe8b6bcaeb RDX: 00007fbe8a10dfd0 RSI: 0000000080085502 RDI: 0000000000000003 RBP: 00007fbe8a10dfd0 R08: 0000000000000040 R09: 00007fbe8a10cfc8 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000000000012 R15: 00007fbe8b77125f INFO: task syz.0.1296:10239 blocked for more than 145 seconds. Not tainted syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.1296 state:D stack:27448 pid:10239 tgid:10238 ppid:2967 task_flags:0x40044c flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1138/0x47e0 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7283 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7340 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xced/0x1b10 kernel/locking/mutex.c:820 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:611 device_remove+0xcb/0x180 drivers/base/dd.c:619 __device_release_driver drivers/base/dd.c:1352 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1375 driver_detach+0xd8/0x1b0 drivers/base/dd.c:1438 bus_remove_driver+0x13b/0x2e0 drivers/base/bus.c:825 driver_unregister+0x76/0xb0 drivers/base/driver.c:277 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1757 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463 __fput+0x3ff/0xb50 fs/file_table.c:510 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x951/0x2af0 kernel/exit.c:976 do_group_exit+0xd5/0x2a0 kernel/exit.c:1119 get_signal+0x20ff/0x2210 kernel/signal.c:3037 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x83/0x480 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x682/0x7f0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2a18ffcaeb RSP: 002b:00007f2a17a4cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f2a18ffcaeb RDX: 00007f2a17a4dfd0 RSI: 0000000080085502 RDI: 0000000000000003 RBP: 00007f2a17a4dfd0 R08: 0000000000000040 R09: 00007f2a17a4cfc8 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000000000012 R15: 00007f2a190b125f INFO: task syz.4.1297:10241 blocked for more than 147 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.1297 state:D stack:28568 pid:10241 tgid:10240 ppid:2966 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1138/0x47e0 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7283 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7340 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xced/0x1b10 kernel/locking/mutex.c:820 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:611 __kobject_del+0x168/0x220 lib/kobject.c:601 kobject_cleanup lib/kobject.c:680 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x348/0x640 lib/kobject.c:737 bus_remove_driver+0x16e/0x2e0 drivers/base/bus.c:827 driver_unregister+0x76/0xb0 drivers/base/driver.c:277 usb_gadget_register_driver_owner.cold+0x6c/0xd0 drivers/usb/gadget/udc/core.c:1747 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:596 [inline] raw_ioctl+0x1a85/0x2b80 drivers/usb/gadget/legacy/raw_gadget.c:1307 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0x7f0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbcdd9bcaeb RSP: 002b:00007fbcdc40cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fbcdd9bcaeb RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 RBP: 00007fbcdc40dfd0 R08: 0000000000000001 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000868 INFO: task syz.1.1298:10243 blocked for more than 148 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.1298 state:D stack:28632 pid:10243 tgid:10242 ppid:2968 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1138/0x47e0 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7283 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7340 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xced/0x1b10 kernel/locking/mutex.c:820 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:611 driver_register+0x29c/0x360 drivers/base/driver.c:257 usb_gadget_register_driver_owner+0x132/0x210 drivers/usb/gadget/udc/core.c:1725 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:596 [inline] raw_ioctl+0x1a85/0x2b80 drivers/usb/gadget/legacy/raw_gadget.c:1307 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0x7f0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2b7f82caeb RSP: 002b:00007f2b7e27cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f2b7f82caeb RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 RBP: 00007f2b7e27dfd0 R08: 0000000000000001 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000200000000000 R14: 0000000000000000 R15: 00000000000021a0 INFO: task syz.2.1299:10244 blocked for more than 148 seconds. Not tainted syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.1299 state:D stack:27496 pid:10244 tgid:10244 ppid:2974 task_flags:0x40044c flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1138/0x47e0 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7283 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7340 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xced/0x1b10 kernel/locking/mutex.c:820 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:611 device_remove+0xcb/0x180 drivers/base/dd.c:619 __device_release_driver drivers/base/dd.c:1352 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1375 driver_detach+0xd8/0x1b0 drivers/base/dd.c:1438 bus_remove_driver+0x13b/0x2e0 drivers/base/bus.c:825 driver_unregister+0x76/0xb0 drivers/base/driver.c:277 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1757 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463 __fput+0x3ff/0xb50 fs/file_table.c:510 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x951/0x2af0 kernel/exit.c:976 do_group_exit+0xd5/0x2a0 kernel/exit.c:1119 get_signal+0x20ff/0x2210 kernel/signal.c:3037 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x83/0x480 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x682/0x7f0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd37048d68e RSP: 002b:00007ffc8d701be8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 RAX: fffffffffffffdfc RBX: 0000555577173500 RCX: 00007fd37048d68e RDX: 00007ffc8d701c40 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007fd370747da0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a4131 R13: 00007fd37074609c R14: 00000000000a36d7 R15: 00007fd370746090 Showing all locks held in the system: 5 locks held by kworker/0:1/11: 1 lock held by khungtaskd/30: #0: ffffffff896de960 ( rcu_read_lock ){....}-{1:3} , at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] , at: rcu_read_lock include/linux/rcupdate.h:838 [inline] , at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 7 locks held by kworker/0:2/1121: 3 locks held by kworker/u8:7/1629: #0: ffff888100e98940 ( (wq_completion)netns ){+.+.}-{0:0} , at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3289 #1: ffffc9000370fd18 ( net_cleanup_work ){+.+.}-{0:0} , at: process_one_work+0x973/0x1980 kernel/workqueue.c:3290 #2: ffffffff8aadc468 ( pernet_ops_rwsem ){++++}-{4:4} , at: cleanup_net+0xb8/0x920 net/core/net_namespace.c:673 2 locks held by getty/2917: #0: ffff88811547b0a0 ( &tty->ldisc_sem ){++++}-{0:0} , at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900000452e8 ( &ldata->atomic_read_lock ){+.+.}-{4:4} , at: n_tty_read+0x419/0x14f0 drivers/tty/n_tty.c:2211 4 locks held by udevd/5197: #0: ffff8881362c52d8 ( &p->lock ){+.+.}-{4:4} , at: seq_read_iter+0xe1/0x1270 fs/seq_file.c:183 #1: ffff88811d2a0c80 ( &of->mutex ){+.+.}-{4:4} , at: kernfs_seq_start+0x4f/0x2a0 fs/kernfs/file.c:172 #2: ffff8881235da2d8 ( kn->active #23 ){++++}-{0:0} , at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] , at: kernfs_seq_start+0xbc/0x2a0 fs/kernfs/file.c:173 #3: ffff888136ccb1d8 ( &dev->mutex ){....}-{4:4} , at: device_lock_interruptible include/linux/device.h:1045 [inline] , at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 6 locks held by kworker/1:4/5224: #0: ffff8881056e3540 ( (wq_completion)usb_hub_wq ){+.+.}-{0:0} , at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3289 #1: ffffc9000202fd18 ( (work_completion)(&hub->events) ){+.+.}-{0:0} , at: process_one_work+0x973/0x1980 kernel/workqueue.c:3290 #2: ffff88810bbf41d8 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:1040 [inline] , at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899 #3: ffff88813b77a1d8 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:1040 [inline] , at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1076 #4: ffff88813bd121a0 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:1040 [inline] , at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1076 #5: ffffffff8adeb7c0 ( uevent_sock_mutex ){+.+.}-{4:4} , at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] , at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] , at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:611 4 locks held by udevd/5225: #0: ffff88811e05acf8 ( &p->lock ){+.+.}-{4:4} , at: seq_read_iter+0xe1/0x1270 fs/seq_file.c:183 #1: ffff88811bfacc80 ( &of->mutex ){+.+.}-{4:4} , at: kernfs_seq_start+0x4f/0x2a0 fs/kernfs/file.c:172 #2: ffff88810c310e18 ( kn->active #26 ){++++}-{0:0} , at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] , at: kernfs_seq_start+0xbc/0x2a0 fs/kernfs/file.c:173 #3: ffff88814138e1d8 ( &dev->mutex ){....}-{4:4} , at: device_lock_interruptible include/linux/device.h:1045 [inline] , at: serial_show+0x26/0xa0 drivers/usb/core/sysfs.c:143 8 locks held by kworker/0:4/5253: 4 locks held by udevd/5258: #0: ffff888108fd4098 ( &p->lock ){+.+.}-{4:4} , at: seq_read_iter+0xe1/0x1270 fs/seq_file.c:183 #1: ffff88811d397080 ( &of->mutex ){+.+.}-{4:4} , at: kernfs_seq_start+0x4f/0x2a0 fs/kernfs/file.c:172 #2: ffff888121e64008 ( kn->active #23 ){++++}-{0:0} , at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] , at: kernfs_seq_start+0xbc/0x2a0 fs/kernfs/file.c:173 #3: ffff88813b77a1d8 ( &dev->mutex ){....}-{4:4} , at: device_lock_interruptible include/linux/device.h:1045 [inline] , at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 6 locks held by kworker/1:5/5289: #0: ffff8881056e3540 ( (wq_completion)usb_hub_wq ){+.+.}-{0:0} , at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3289 #1: ffffc90002227d18 ( (work_completion)(&hub->events) ){+.+.}-{0:0} , at: process_one_work+0x973/0x1980 kernel/workqueue.c:3290 #2: ffff88810c3241d8 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:1040 [inline] , at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899 #3: ffff88814138e1d8 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:1040 [inline] , at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1076 #4: ffff88813bb481a0 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:1040 [inline] , at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1076 #5: ffffffff8adeb7c0 ( uevent_sock_mutex ){+.+.}-{4:4} , at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] , at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] , at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:611 2 locks held by kworker/0:5/5326: 2 locks held by kworker/0:0/8023: 5 locks held by kworker/0:7/8352: 3 locks held by kworker/1:8/9000: #0: ffff88810006b140 ( (wq_completion)events ){+.+.}-{0:0} , at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3289 #1: ffffc900141cfd18 ( (fqdir_free_work).work ){+.+.}-{0:0} , at: process_one_work+0x973/0x1980 kernel/workqueue.c:3290 #2: ffffffff896ea378 ( rcu_state.barrier_mutex ){+.+.}-{4:4} , at: rcu_barrier+0x48/0x6d0 kernel/rcu/tree.c:3828 2 locks held by syz.3.1295/10237: #0: ffff88810bb68e00 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:1040 [inline] , at: __device_driver_lock drivers/base/dd.c:1174 [inline] , at: device_release_driver_internal+0xb2/0x620 drivers/base/dd.c:1372 #1: ffffffff8adeb7c0 ( uevent_sock_mutex ){+.+.}-{4:4} , at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] , at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] , at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:611 2 locks held by syz.0.1296/10239: #0: ffff88810bb74e00 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:1040 [inline] , at: __device_driver_lock drivers/base/dd.c:1174 [inline] , at: device_release_driver_internal+0xb2/0x620 drivers/base/dd.c:1372 #1: ffffffff8adeb7c0 ( uevent_sock_mutex ){+.+.}-{4:4} , at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] , at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] , at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:611 1 lock held by syz.4.1297/10241: #0: ffffffff8adeb7c0 ( uevent_sock_mutex ){+.+.}-{4:4} , at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] , at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] , at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:611 1 lock held by syz.1.1298/10243: #0: ffffffff8adeb7c0 ( uevent_sock_mutex ){+.+.}-{4:4} , at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] , at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] , at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:611 2 locks held by syz.2.1299/10244: #0: ffff88810bb6ce00 ( &dev->mutex ){....}-{4:4}