INFO: task syz-executor:294 blocked for more than 122 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:294 tgid:294 ppid:1 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 rwsem_down_write_slowpath+0x5b0/0x1bb0 kernel/locking/rwsem.c:1239 __down_write_common kernel/locking/rwsem.c:1383 [inline] __down_write kernel/locking/rwsem.c:1392 [inline] down_write+0x163/0x2b0 kernel/locking/rwsem.c:1659 namespace_lock fs/namespace.c:1720 [inline] drop_collected_mounts fs/namespace.c:2234 [inline] put_mnt_ns+0x7a/0xf0 fs/namespace.c:5645 free_nsproxy+0x52/0x290 kernel/nsproxy.c:193 put_nsproxy include/linux/nsproxy.h:118 [inline] switch_task_namespaces kernel/nsproxy.c:251 [inline] exit_task_namespaces+0x99/0xe0 kernel/nsproxy.c:256 do_exit+0x9de/0x2650 kernel/exit.c:952 do_group_exit+0x229/0x2f0 kernel/exit.c:1095 get_signal+0x1398/0x14e0 kernel/signal.c:2933 arch_do_signal_or_restart+0xbc/0x760 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x57/0xb0 kernel/entry/common.c:218 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fb39e557197 RSP: 002b:00007ffe28667660 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: fffffffffffffe00 RBX: 000055556176a500 RCX: 00007fb39e557197 RDX: 0000000000000000 RSI: 00007ffe286677b0 RDI: ffffffffffffff9c RBP: 00007ffe286677b0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe28668840 R13: 00007fb39e631c3b R14: 000055556176a4e8 R15: 00007ffe28668880 INFO: task kworker/u8:4:330 blocked for more than 124 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:4 state:D stack:0 pid:330 tgid:330 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79 addrconf_dad_work+0xce/0x1530 net/ipv6/addrconf.c:4234 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3319 worker_thread+0xc70/0x10b0 kernel/workqueue.c:3400 kthread+0x2c9/0x370 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task kworker/1:6:960 blocked for more than 126 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:6 state:D stack:0 pid:960 tgid:960 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_timeout+0xc7/0x3b0 kernel/time/timer.c:2596 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common+0x369/0x650 kernel/sched/completion.c:127 wait_for_completion+0x1c/0x40 kernel/sched/completion.c:148 devtmpfs_submit_req drivers/base/devtmpfs.c:107 [inline] devtmpfs_delete_node+0x16d/0x200 drivers/base/devtmpfs.c:156 device_del+0x2d2/0xd00 drivers/base/core.c:3860 device_unregister drivers/base/core.c:3922 [inline] device_destroy+0xb0/0x100 drivers/base/core.c:4521 usb_deregister_dev+0x6c/0x190 drivers/usb/core/file.c:184 hiddev_disconnect+0x8b/0x190 drivers/hid/usbhid/hiddev.c:932 hid_disconnect drivers/hid/hid-core.c:2325 [inline] hid_hw_stop drivers/hid/hid-core.c:2372 [inline] hid_device_remove+0x1bd/0x3f0 drivers/hid/hid-core.c:2761 device_remove drivers/base/dd.c:567 [inline] __device_release_driver drivers/base/dd.c:1272 [inline] device_release_driver_internal+0x45f/0x790 drivers/base/dd.c:1295 device_release_driver+0x1d/0x30 drivers/base/dd.c:1318 bus_remove_device+0x359/0x380 drivers/base/bus.c:576 device_del+0x581/0xd00 drivers/base/core.c:3881 hid_remove_device drivers/hid/hid-core.c:2943 [inline] hid_destroy_device+0x6e/0x110 drivers/hid/hid-core.c:2963 usbhid_disconnect+0xa3/0xc0 drivers/hid/usbhid/hid-core.c:1462 usb_unbind_interface+0x2a7/0xa30 drivers/usb/core/driver.c:462 device_remove drivers/base/dd.c:569 [inline] __device_release_driver drivers/base/dd.c:1272 [inline] device_release_driver_internal+0x4c5/0x790 drivers/base/dd.c:1295 device_release_driver+0x1d/0x30 drivers/base/dd.c:1318 bus_remove_device+0x359/0x380 drivers/base/bus.c:576 device_del+0x581/0xd00 drivers/base/core.c:3881 usb_disable_device+0x3af/0x770 drivers/usb/core/message.c:1418 usb_disconnect+0x322/0x930 drivers/usb/core/hub.c:2353 hub_port_connect drivers/usb/core/hub.c:5414 [inline] hub_port_connect_change drivers/usb/core/hub.c:5714 [inline] port_event drivers/usb/core/hub.c:5878 [inline] hub_event+0x1c7a/0x4700 drivers/usb/core/hub.c:5960 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3319 worker_thread+0xc70/0x10b0 kernel/workqueue.c:3400 kthread+0x2c9/0x370 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz.1.728:2649 blocked for more than 129 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.728 state:D stack:0 pid:2649 tgid:2649 ppid:289 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 synchronize_rcu_expedited+0x6eb/0x970 kernel/rcu/tree_exp.h:994 synchronize_net+0x2c/0x40 net/core/dev.c:11374 __tun_detach+0x774/0x1460 drivers/net/tun.c:669 tun_detach drivers/net/tun.c:701 [inline] tun_chr_close+0x93/0x150 drivers/net/tun.c:3520 __fput+0x1fb/0xa00 fs/file_table.c:429 ____fput+0x20/0x30 fs/file_table.c:457 task_work_run+0x1e5/0x260 kernel/task_work.c:246 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f27f899bf79 RSP: 002b:00007ffef1ef04d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007f27f8c17da0 RCX: 00007f27f899bf79 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007f27f8c17da0 R08: 0000000000000006 R09: 0000000000000000 R10: 00007f27f8c17cb0 R11: 0000000000000246 R12: 0000000000021141 R13: 00007f27f8c1618c R14: 0000000000020f17 R15: 00007f27f8c16180 INFO: task syz.1.728:2651 blocked for more than 130 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.728 state:D stack:0 pid:2651 tgid:2649 ppid:289 flags:0x00000024 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 rwsem_down_read_slowpath+0x6fb/0x1490 kernel/locking/rwsem.c:1136 __down_read_common kernel/locking/rwsem.c:1317 [inline] __down_read kernel/locking/rwsem.c:1330 [inline] down_read+0x95/0xe0 kernel/locking/rwsem.c:1607 clone_private_mount+0x4c/0x320 fs/namespace.c:2280 ovl_get_upper fs/overlayfs/super.c:496 [inline] ovl_fill_super+0xef6/0x38f0 fs/overlayfs/super.c:1367 vfs_get_super fs/super.c:1283 [inline] get_tree_nodev+0xce/0x170 fs/super.c:1302 ovl_get_tree+0x20/0x30 fs/overlayfs/params.c:610 vfs_get_tree+0xa1/0x290 fs/super.c:1817 do_new_mount+0x251/0xb30 fs/namespace.c:3557 path_mount+0x682/0x1010 fs/namespace.c:3884 do_mount fs/namespace.c:3897 [inline] __do_sys_mount fs/namespace.c:4107 [inline] __se_sys_mount+0x2bf/0x480 fs/namespace.c:4084 __x64_sys_mount+0xc3/0xf0 fs/namespace.c:4084 x64_sys_call+0x2021/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f27f899bf79 RSP: 002b:00007f27f73f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f27f8c16090 RCX: 00007f27f899bf79 RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 RBP: 00007f27f8a327e0 R08: 0000200000000a00 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f27f8c16128 R14: 00007f27f8c16090 R15: 00007ffef1ef0378