INFO: task kworker/1:0:22 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:0 state:D stack:0 pid:22 ppid:2 flags:0x00000008 Workqueue: usb_hub_wq hub_event Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5257 [inline] __schedule+0xdb4/0x1aa4 kernel/sched/core.c:6584 schedule+0xc4/0x170 kernel/sched/core.c:6660 usb_kill_urb+0x1b8/0x328 drivers/usb/core/urb.c:728 usb_start_wait_urb+0x1c8/0x454 drivers/usb/core/message.c:73 usb_internal_control_msg drivers/usb/core/message.c:116 [inline] usb_control_msg+0x1e8/0x378 drivers/usb/core/message.c:166 get_bMaxPacketSize0 drivers/usb/core/hub.c:4808 [inline] hub_port_init+0x940/0x2268 drivers/usb/core/hub.c:5005 hub_port_connect drivers/usb/core/hub.c:5456 [inline] hub_port_connect_change drivers/usb/core/hub.c:5667 [inline] port_event drivers/usb/core/hub.c:5827 [inline] hub_event+0x1f1c/0x3e74 drivers/usb/core/hub.c:5909 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffff8000165b7ed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc64 kernel/rcu/tasks.h:543 1 lock held by rcu_tasks_trace/13: #0: ffff8000165b8710 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc64 kernel/rcu/tasks.h:543 5 locks held by kworker/1:0/22: #0: ffff0000c4977538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff80001dc97c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff0000d2472190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #2: ffff0000d2472190 (&dev->mutex){....}-{3:3}, at: hub_event+0x134/0x3e74 drivers/usb/core/hub.c:5855 #3: ffff0000f48e0518 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3210 [inline] #3: ffff0000f48e0518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5423 [inline] #3: ffff0000f48e0518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5667 [inline] #3: ffff0000f48e0518 (&port_dev->status_lock){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5827 [inline] #3: ffff0000f48e0518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x19fc/0x3e74 drivers/usb/core/hub.c:5909 #4: ffff0000d2174068 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5424 [inline] #4: ffff0000d2174068 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5667 [inline] #4: ffff0000d2174068 (hcd->address0_mutex){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5827 [inline] #4: ffff0000d2174068 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x1a2c/0x3e74 drivers/usb/core/hub.c:5909 1 lock held by khungtaskd/28: #0: ffff8000165b7580 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349 2 locks held by getty/4084: #0: ffff0000d708e098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80001fef62f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xffc drivers/tty/n_tty.c:2198 1 lock held by syz.3.498/6958: #0: ffff8000165bd180 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x58/0x5b8 kernel/rcu/tree.c:4023 2 locks held by syz.5.499/6953: #0: ffff00019e11f458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:549 [inline] #0: ffff00019e11f458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1363 [inline] #0: ffff00019e11f458 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1653 [inline] #0: ffff00019e11f458 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2bc/0x1aa4 kernel/sched/core.c:6500 #1: ffff00019e10bbc8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2cc/0x5b8 kernel/sched/psi.c:987 =============================================