INFO: task kworker/0:0:9 blocked for more than 143 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:0 state:D stack:21912 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x125e/0x6990 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7474
schedule_timeout+0x1b2/0x280 kernel/time/sleep_timeout.c:75
do_wait_for_common kernel/sched/completion.c:100 [inline]
__wait_for_common+0x2e6/0x500 kernel/sched/completion.c:121
i2c_del_adapter+0x1e3/0x2e0 drivers/i2c/i2c-core-base.c:1848
dvb_usbv2_i2c_exit drivers/media/usb/dvb-usb-v2/dvb_usb_core.c:86 [inline]
dvb_usbv2_exit.isra.0+0x4aa/0xb70 drivers/media/usb/dvb-usb-v2/dvb_usb_core.c:845
dvb_usbv2_probe+0x669/0x970 drivers/media/usb/dvb-usb-v2/dvb_usb_core.c:994
usb_probe_interface+0x386/0x980 drivers/usb/core/driver.c:399
call_driver_probe drivers/base/dd.c:629 [inline]
really_probe+0x241/0xa60 drivers/base/dd.c:707
__driver_probe_device+0x210/0x460 drivers/base/dd.c:869
driver_probe_device+0x4a/0x140 drivers/base/dd.c:899
__device_attach_driver+0x1df/0x320 drivers/base/dd.c:1027
bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:503
__device_attach+0x1e4/0x4c0 drivers/base/dd.c:1131
device_initial_probe+0xaf/0xf0 drivers/base/dd.c:1190
__bus_probe_device+0x60/0x160 drivers/base/bus.c:617
device_add+0x121d/0x1970 drivers/base/core.c:3776
usb_set_configuration+0xd97/0x1dc0 drivers/usb/core/message.c:2280
usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250
usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:293
call_driver_probe drivers/base/dd.c:629 [inline]
really_probe+0x241/0xa60 drivers/base/dd.c:707
__driver_probe_device+0x210/0x460 drivers/base/dd.c:869
driver_probe_device+0x4a/0x140 drivers/base/dd.c:899
__device_attach_driver+0x1df/0x320 drivers/base/dd.c:1027
bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:503
__device_attach+0x1e4/0x4c0 drivers/base/dd.c:1131
device_initial_probe+0xaf/0xf0 drivers/base/dd.c:1190
__bus_probe_device+0x60/0x160 drivers/base/bus.c:617
device_add+0x121d/0x1970 drivers/base/core.c:3776
usb_new_device.part.0+0xcc2/0x1686 drivers/usb/core/hub.c:2713
usb_new_device include/linux/workqueue.h:715 [inline]
hub_port_connect drivers/usb/core/hub.c:5585 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5725 [inline]
port_event drivers/usb/core/hub.c:5889 [inline]
hub_event.cold+0x1e3/0xe90 drivers/usb/core/hub.c:5971
process_one_work+0xac7/0x1b10 kernel/workqueue.c:3495
process_scheduled_works kernel/workqueue.c:3578 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3659
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
INFO: task syz.4.104:6345 blocked for more than 143 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.104 state:D stack:28040 pid:6345 tgid:6308 ppid:5619 task_flags:0x400040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x125e/0x6990 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7474
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7531
__mutex_lock_common kernel/locking/mutex.c:726 [inline]
__mutex_lock+0xcca/0x1c10 kernel/locking/mutex.c:821
device_lock include/linux/device.h:1109 [inline]
usbdev_open+0x1b6/0x860 drivers/usb/core/devio.c:1054
chrdev_open+0x234/0x6a0 fs/char_dev.c:413
do_dentry_open+0x674/0x1470 fs/open.c:1000
vfs_open_consume+0xcc/0x460 fs/open.c:1131
do_open fs/namei.c:4845 [inline]
path_openat+0x1547/0x23f0 fs/namei.c:5010
do_file_open+0x20e/0x430 fs/namei.c:5039
do_sys_openat2+0x163/0x1d0 fs/open.c:1442
do_sys_open fs/open.c:1448 [inline]
__do_sys_openat fs/open.c:1464 [inline]
__se_sys_openat fs/open.c:1459 [inline]
__x64_sys_openat+0x12d/0x210 fs/open.c:1459
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4985d5fd8e
RSP: 002b:00007f4986bb7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f4986bb86c0 RCX: 00007f4985d5fd8e
RDX: 0000000000101301 RSI: 00007f4986bb7c00 RDI: ffffffffffffff9c
RBP: 00007f4986bb7c00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
R13: 00007f4986026218 R14: 00007f4986026180 R15: 00007ffd75020bf8
Showing all locks held in the system:
locks held by kworker/0:0/9: 5, on CPU#0:
#0: ffff88802369a548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 kernel/workqueue.c:3470
#1: ffffc900000e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3471
#2: ffff88802c9cb1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1109 [inline]
#2: ffff88802c9cb1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 drivers/usb/core/hub.c:5917
#3: ffff888021af91d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1109 [inline]
#3: ffff888021af91d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4c0 drivers/base/dd.c:1106
#4: ffff8880252aa1a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1109 [inline]
#4: ffff8880252aa1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4c0 drivers/base/dd.c:1106
locks held by kworker/u8:1/13: 3, last CPU#0:
#0: ffff88813ff6c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 kernel/workqueue.c:3470
#1: ffffc90000127d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3471
#2: ffff888077f1e258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 drivers/net/netdevsim/dev.c:834
locks held by pr/ttyS0/31: 1, last CPU#0:
#0: ffffffff8ffd7718 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:314 [inline]
#0: ffffffff8ffd7718 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:493 [inline]
#0: ffffffff8ffd7718 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 kernel/printk/printk.c:291
locks held by khungtaskd/32: 1, last CPU#0:
#0: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#0: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6871
locks held by kworker/u8:4/62: 2, last CPU#0:
#0: ffff888036024148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 kernel/workqueue.c:3470
#1: ffffc9000203fd08 ((work_completion)(&(&bat_priv->orig_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3471
locks held by getty/5380: 2, on CPU#1:
#0: ffff888027eb10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 drivers/tty/n_tty.c:2211
locks held by syz-executor/5616: 1, last CPU#0:
#0: ffff88807aa60460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 fs/namei.c:5708
locks held by syz-executor/5618: 2, last CPU#0:
#0: ffff88807aab8460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 fs/namei.c:5708
#1: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#1: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#1: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x2c/0x5e0 mm/memcontrol.c:1541
locks held by udevd/5634: 4, on CPU#1:
#0: ffff8880389c7098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 fs/seq_file.c:183
#1: ffff888079db3480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 fs/kernfs/file.c:165
#2: ffff88805ec6e3c8 (kn->active#26){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline]
#2: ffff88805ec6e3c8 (kn->active#26){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 fs/kernfs/file.c:166
#3: ffff888021af91d8 (&dev->mutex){....}-{4:4}, at: device_lock_interruptible include/linux/device.h:1114 [inline]
#3: ffff888021af91d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
locks held by kworker/u8:11/5905: 3, last CPU#0:
#0: ffff88813ff6c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 kernel/workqueue.c:3470
#1: ffffc9000502fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3471
#2: ffff8880547e0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6989 [inline]
#2: ffff8880547e0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 net/wireless/core.c:596
locks held by syz.4.104/6345: 1, on CPU#1:
#0: ffff88802c9cb1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1109 [inline]
#0: ffff88802c9cb1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x860 drivers/usb/core/devio.c:1054
locks held by syz-executor/6516: 4, last CPU#0:
#0: ffffffff90149a70 (dup_mmap_sem){++++}-{0:0}, at: dup_mm kernel/fork.c:1541 [inline]
#0: ffffffff90149a70 (dup_mmap_sem){++++}-{0:0}, at: copy_mm kernel/fork.c:1594 [inline]
#0: ffffffff90149a70 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x79fc/0x84c0 kernel/fork.c:2320
#1: ffff88802f128340 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:550 [inline]
#1: ffff88802f128340 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x23e0 mm/mmap.c:1716
#2: ffff88807c584cc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: mmap_write_lock_nested include/linux/mmap_lock.h:540 [inline]
#2: ffff88807c584cc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x23e0 mm/mmap.c:1723
#3: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#3: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#3: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x9a/0x470 mm/pgtable-generic.c:302
locks held by kworker/u8:15/7100: 3, last CPU#0:
#0: ffff88813ff6c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 kernel/workqueue.c:3470
#1: ffffc90010e6fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3471
#2: ffff88802db9b258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 drivers/net/netdevsim/dev.c:834
locks held by iou-sqp-7972/7973: 1, last CPU#0:
#0: ffff88801d75f068 (&sqd->lock){+.+.}-{4:4}, at: io_sq_thread+0xfba/0x14b0 io_uring/sqpoll.c:404
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:123
nmi_trigger_cpumask_backtrace+0x21f/0x2a0 lib/nmi_backtrace.c:66
trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x141/0x190 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:377 [inline]
watchdog+0xd0f/0x10c0 kernel/hung_task.c:598
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245