INFO: task kworker/u8:0:12 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:0 state:D stack:20904 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: async async_run_entry_fn Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xeb1/0x4220 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 blk_queue_enter+0x3e0/0x800 block/blk-core.c:320 blk_mq_alloc_request+0x697/0x990 block/blk-mq.c:681 scsi_alloc_request drivers/scsi/scsi_lib.c:1252 [inline] scsi_execute_cmd+0x1a3/0xe70 drivers/scsi/scsi_lib.c:312 sd_read_block_zero drivers/scsi/sd.c:3708 [inline] sd_revalidate_disk+0x58cc/0xa580 drivers/scsi/sd.c:3762 sd_probe+0x949/0xf80 drivers/scsi/sd.c:4045 scsi_bus_probe+0x6d/0x90 drivers/scsi/scsi_sysfs.c:563 call_driver_probe drivers/base/dd.c:643 [inline] really_probe+0x241/0xa60 drivers/base/dd.c:721 __driver_probe_device+0x1de/0x400 drivers/base/dd.c:863 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:893 __device_attach_driver+0x1df/0x340 drivers/base/dd.c:1021 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500 __device_attach_async_helper+0x1d1/0x2b0 drivers/base/dd.c:1050 async_run_entry_fn+0x9f/0x580 kernel/async.c:129 process_one_work+0xa23/0x19a0 kernel/workqueue.c:3276 process_scheduled_works kernel/workqueue.c:3359 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3440 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x6c3/0xcb0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task kworker/1:5:5226 blocked for more than 171 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:5 state:D stack:20568 pid:5226 tgid:5226 ppid:2 task_flags:0x4288060 flags:0x00080000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xeb1/0x4220 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_timeout+0x1b2/0x280 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common+0x2e7/0x4c0 kernel/sched/completion.c:121 __flush_work+0x7c7/0xcb0 kernel/workqueue.c:4328 __cancel_work_sync kernel/workqueue.c:4448 [inline] cancel_delayed_work_sync+0xd1/0xf0 kernel/workqueue.c:4522 quiesce_and_remove_host drivers/usb/storage/usb.c:939 [inline] usb_stor_disconnect+0xc5/0x270 drivers/usb/storage/usb.c:1186 usb_unbind_interface+0x1dd/0x9e0 drivers/usb/core/driver.c:458 device_remove drivers/base/dd.c:633 [inline] device_remove+0x12a/0x180 drivers/base/dd.c:625 __device_release_driver drivers/base/dd.c:1344 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1367 bus_remove_device+0x2bc/0x560 drivers/base/bus.c:657 device_del+0x376/0x9b0 drivers/base/core.c:3880 usb_disable_device+0x367/0x810 drivers/usb/core/message.c:1478 usb_disconnect+0x2e2/0x9a0 drivers/usb/core/hub.c:2345 hub_port_connect drivers/usb/core/hub.c:5407 [inline] hub_port_connect_change drivers/usb/core/hub.c:5707 [inline] port_event drivers/usb/core/hub.c:5871 [inline] hub_event+0x1d0c/0x4af0 drivers/usb/core/hub.c:5953 process_one_work+0xa23/0x19a0 kernel/workqueue.c:3276 process_scheduled_works kernel/workqueue.c:3359 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3440 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x6c3/0xcb0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz.0.1293:9921 blocked for more than 172 seconds. Not tainted syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.1293 state:D stack:27432 pid:9921 tgid:9920 ppid:2962 task_flags:0x40044c flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xeb1/0x4220 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608 device_remove+0xcb/0x180 drivers/base/dd.c:631 __device_release_driver drivers/base/dd.c:1344 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1367 driver_detach+0xd8/0x1b0 drivers/base/dd.c:1430 bus_remove_driver+0x13b/0x2e0 drivers/base/bus.c:825 driver_unregister+0x76/0xb0 drivers/base/driver.c:277 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1752 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463 __fput+0x3ff/0xb40 fs/file_table.c:469 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x8b8/0x2b60 kernel/exit.c:976 do_group_exit+0xd5/0x2a0 kernel/exit.c:1118 get_signal+0x1ec7/0x21e0 kernel/signal.c:3034 arch_do_signal_or_restart+0x91/0x7a0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x7e/0x430 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline] do_syscall_64+0x671/0x7b0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f89001cc4ab RSP: 002b:00007f88fec1cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f89001cc4ab RDX: 00007f88fec1dfd0 RSI: 0000000080085502 RDI: 0000000000000003 RBP: 00007f88fec1dfd0 R08: 0000000000000040 R09: 00007f88fec1cfc8 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000000000012 R15: 00007f8900280ede INFO: task syz.1.1296:9929 blocked for more than 173 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.1296 state:D stack:29336 pid:9929 tgid:9926 ppid:2963 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xeb1/0x4220 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608 driver_register+0x29c/0x360 drivers/base/driver.c:257 usb_gadget_register_driver_owner+0x132/0x210 drivers/usb/gadget/udc/core.c:1720 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:596 [inline] raw_ioctl+0x1a85/0x2b80 drivers/usb/gadget/legacy/raw_gadget.c:1307 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcd19bdc4ab RSP: 002b:00007fcd185f2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fcd19bdc4ab RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 RBP: 00007fcd185f3fd0 R08: 0000000000000001 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000200000000000 R14: 0000000000000005 R15: 0000000000000868 INFO: task syz.3.1297:9932 blocked for more than 173 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.1297 state:D stack:29336 pid:9932 tgid:9930 ppid:2964 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xeb1/0x4220 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608 gadget_bind_driver+0x773/0xbf0 drivers/usb/gadget/udc/core.c:1648 call_driver_probe drivers/base/dd.c:643 [inline] really_probe+0x241/0xa60 drivers/base/dd.c:721 __driver_probe_device+0x1de/0x400 drivers/base/dd.c:863 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:893 __driver_attach+0x21f/0x5d0 drivers/base/dd.c:1287 bus_for_each_dev+0x13e/0x1d0 drivers/base/bus.c:383 bus_add_driver+0x305/0x5b0 drivers/base/bus.c:756 driver_register+0x1e2/0x360 drivers/base/driver.c:249 usb_gadget_register_driver_owner+0x132/0x210 drivers/usb/gadget/udc/core.c:1720 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:596 [inline] raw_ioctl+0x1a85/0x2b80 drivers/usb/gadget/legacy/raw_gadget.c:1307 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcc70fac4ab RSP: 002b:00007fcc6f9dbf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fcc70fac4ab RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 RBP: 00007fcc6f9dcfd0 R08: 0000000000000001 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00002000000000c0 R14: 0000000000000002 R15: 0000000000000000 INFO: task syz.3.1297:9933 blocked for more than 174 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.1297 state:D stack:28904 pid:9933 tgid:9930 ppid:2964 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xeb1/0x4220 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 device_lock include/linux/device.h:949 [inline] __device_driver_lock drivers/base/dd.c:1166 [inline] __driver_attach+0x214/0x5d0 drivers/base/dd.c:1286 bus_for_each_dev+0x13e/0x1d0 drivers/base/bus.c:383 bus_add_driver+0x305/0x5b0 drivers/base/bus.c:756 driver_register+0x1e2/0x360 drivers/base/driver.c:249 usb_gadget_register_driver_owner+0x132/0x210 drivers/usb/gadget/udc/core.c:1720 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:596 [inline] raw_ioctl+0x1a85/0x2b80 drivers/usb/gadget/legacy/raw_gadget.c:1307 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcc70fac4ab RSP: 002b:00007fcc6f9baf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fcc70fac4ab RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 RBP: 00007fcc6f9bbfd0 R08: 0000000000000001 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000200000000dc0 R14: 0000000000000005 R15: 0000000000000868 INFO: task syz-executor:9935 blocked for more than 174 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:27736 pid:9935 tgid:9935 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xeb1/0x4220 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137 setup_net+0x118/0x3a0 net/core/net_namespace.c:446 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226 ksys_unshare+0x473/0xad0 kernel/fork.c:3173 __do_sys_unshare kernel/fork.c:3244 [inline] __se_sys_unshare kernel/fork.c:3242 [inline] __x64_sys_unshare+0x31/0x40 kernel/fork.c:3242 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f415381dae7 RSP: 002b:00007ffd4536c1f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007f4153a95f40 RCX: 00007f415381dae7 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 RBP: 00007f4153a967b8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 R13: 0000000000000003 R14: 00007ffd4536c438 R15: 0000000000000000 INFO: task syz-executor:9948 blocked for more than 175 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:27736 pid:9948 tgid:9948 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xeb1/0x4220 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137 setup_net+0x118/0x3a0 net/core/net_namespace.c:446 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226 ksys_unshare+0x473/0xad0 kernel/fork.c:3173 __do_sys_unshare kernel/fork.c:3244 [inline] __se_sys_unshare kernel/fork.c:3242 [inline] __x64_sys_unshare+0x31/0x40 kernel/fork.c:3242 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe0cf8cdae7 RSP: 002b:00007ffc47b0b8b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007fe0cfb45f40 RCX: 00007fe0cf8cdae7 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 RBP: 00007fe0cfb467b8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 R13: 0000000000000003 R14: 00007ffc47b0baf8 R15: 0000000000000000 INFO: task syz-executor:9951 blocked for more than 175 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:27736 pid:9951 tgid:9951 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xeb1/0x4220 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137 setup_net+0x118/0x3a0 net/core/net_namespace.c:446 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226 ksys_unshare+0x473/0xad0 kernel/fork.c:3173 __do_sys_unshare kernel/fork.c:3244 [inline] __se_sys_unshare kernel/fork.c:3242 [inline] __x64_sys_unshare+0x31/0x40 kernel/fork.c:3242 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f04463adae7 RSP: 002b:00007ffe46ff43e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007f0446625f40 RCX: 00007f04463adae7 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 RBP: 00007f04466267b8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 R13: 0000000000000003 R14: 00007ffe46ff4628 R15: 0000000000000000 INFO: task syz-executor:9954 blocked for more than 175 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:27592 pid:9954 tgid:9954 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xeb1/0x4220 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137 setup_net+0x118/0x3a0 net/core/net_namespace.c:446 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226 ksys_unshare+0x473/0xad0 kernel/fork.c:3173 __do_sys_unshare kernel/fork.c:3244 [inline] __se_sys_unshare kernel/fork.c:3242 [inline] __x64_sys_unshare+0x31/0x40 kernel/fork.c:3242 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f651fc2dae7 RSP: 002b:00007ffce90dfdf8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007f651fea5f40 RCX: 00007f651fc2dae7 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 RBP: 00007f651fea67b8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 R13: 0000000000000003 R14: 00007ffce90e0038 R15: 0000000000000000 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task syz-executor:9978 blocked for more than 176 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:27736 pid:9978 tgid:9978 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xeb1/0x4220 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137 setup_net+0x118/0x3a0 net/core/net_namespace.c:446 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226 ksys_unshare+0x473/0xad0 kernel/fork.c:3173 __do_sys_unshare kernel/fork.c:3244 [inline] __se_sys_unshare kernel/fork.c:3242 [inline] __x64_sys_unshare+0x31/0x40 kernel/fork.c:3242 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f63e322dae7 RSP: 002b:00007ffea1e35ae8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007f63e34a5f40 RCX: 00007f63e322dae7 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 RBP: 00007f63e34a67b8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 R13: 0000000000000003 R14: 00007ffea1e35d28 R15: 0000000000000000 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings Showing all locks held in the system: 8 locks held by kworker/0:0/9: 5 locks held by kworker/0:1/10: 4 locks held by kworker/u8:0/12: 3 locks held by kworker/1:0/23: 1 lock held by khungtaskd/30: #0: ffffffff896de760 (rcu_read_lock){....}-{1:3} , at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline] , at: rcu_read_lock include/linux/rcupdate.h:850 [inline] , at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 7 locks held by kworker/0:2/1117: #0: ffff8881062dd148 ((wq_completion)usb_hub_wq ){+.+.}-{0:0} , at: process_one_work+0x1310/0x19a0 kernel/workqueue.c:3251 #1: ffffc900030ffd18 ( (work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 kernel/workqueue.c:3252 #2: ffff88810b75a1e0 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:949 [inline] , at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899 #3: ffff888139f3e1e0 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:949 [inline] , at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1068 #4: ffff88813500c1a8 ( &dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:949 [inline] &dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1068 #5: ffff88813b350680 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:949 [inline] (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1068 #6: ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4} , at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] , at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] , at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608 2 locks held by kworker/0:3/2814: 2 locks held by getty/2916: #0: ffff8881129600a0 ( &tty->ldisc_sem ){++++}-{0:0} , at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900000432f0 ( &ldata->atomic_read_lock ){+.+.}-{4:4} , at: n_tty_read+0x419/0x1500 drivers/tty/n_tty.c:2211 4 locks held by udevd/5206: #0: ffff8881083e8e80 (&p->lock ){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 fs/seq_file.c:183 #1: ffff88813329e888 ( &of->mutex ){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 fs/kernfs/file.c:172 #2: ffff888114eb7d28 (kn->active#21){++++}-{0:0} , at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] , at: kernfs_seq_start+0xbc/0x2a0 fs/kernfs/file.c:173 #3: ffff888139f3f1e0 ( &dev->mutex ){....}-{4:4} , at: device_lock_interruptible include/linux/device.h:954 [inline] , at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 3 locks held by kworker/1:4/5223: #0: ffff88810006b148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 kernel/workqueue.c:3251 #1: ffffc9000351fd18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 kernel/workqueue.c:3252 #2: ffffffff896ea2b8 (rcu_state.exp_mutex ){+.+.}-{4:4} , at: exp_funnel_lock+0x27f/0x3c0 kernel/rcu/tree_exp.h:311 5 locks held by kworker/1:5/5226: #0: ffff8881062dd148 ( (wq_completion)usb_hub_wq ){+.+.}-{0:0} , at: process_one_work+0x1310/0x19a0 kernel/workqueue.c:3251 #1: ffffc9000354fd18 ((work_completion)(&hub->events) ){+.+.}-{0:0} , at: process_one_work+0x988/0x19a0 kernel/workqueue.c:3252 #2: ffff88810bb321e0 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:949 [inline] , at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899 #3: ffff888139cf41e0 (&dev->mutex){....}-{4:4} , at: device_lock include/linux/device.h:949 [inline] , at: usb_disconnect+0x10a/0x9a0 drivers/usb/core/hub.c:2336 #4: ffff88813aeaa1a8 (&dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:949 [inline] , at: __device_driver_lock drivers/base/dd.c:1166 [inline] , at: device_release_driver_internal+0xb2/0x620 drivers/base/dd.c:1364 4 locks held by udevd/5227: #0: ffff8881342b70a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 fs/seq_file.c:183 #1: ffff88813648c888 ( &of->mutex ){+.+.}-{4:4} , at: kernfs_seq_start+0x4f/0x2a0 fs/kernfs/file.c:172 #2: ffff888111a9d968 ( kn->active #21 ){++++}-{0:0} , at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] , at: kernfs_seq_start+0xbc/0x2a0 fs/kernfs/file.c:173 #3: ffff88813430f1e0 (&dev->mutex){....}-{4:4} , at: device_lock_interruptible include/linux/device.h:954 [inline] , at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 5 locks held by kworker/0:4/5247: #0: ffff8881062dd148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 kernel/workqueue.c:3251 #1: ffffc900035efd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 kernel/workqueue.c:3252 #2: ffff88810b7b21e0 (&dev->mutex){....}-{4:4} , at: device_lock include/linux/device.h:949 [inline] , at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899 #3: ffff88813430f1e0 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:949 [inline] , at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1068 #4: ffffffff8ade89c8 ( uevent_sock_mutex ){+.+.}-{4:4} , at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] , at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] , at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608 3 locks held by kworker/0:5/5373: #0: ffff88810006a148 ((wq_completion)events_freezable){+.+.}-{0:0} , at: process_one_work+0x1310/0x19a0 kernel/workqueue.c:3251 #1: ffffc90005847d18 ((work_completion)(&(&us->scan_dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 kernel/workqueue.c:3252 #2: ffff8881137780e0 (&shost->scan_mutex){+.+.}-{4:4}, at: scsi_scan_host_selected+0x160/0x380 drivers/scsi/scsi_scan.c:1895 7 locks held by kworker/0:6/8203: #0: ffff8881062dd148 ((wq_completion)usb_hub_wq){+.+.}-{0:0} , at: process_one_work+0x1310/0x19a0 kernel/workqueue.c:3251 #1: ffffc900157c7d18 ( (work_completion)(&hub->events) ){+.+.}-{0:0} , at: process_one_work+0x988/0x19a0 kernel/workqueue.c:3252 #2: ffff88810b7e21e0 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:949 [inline] , at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899 #3: ffff888139f3f1e0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:949 [inline] ffff888139f3f1e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1068 #4: ffff8881227541a8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:949 [inline] #4: ffff8881227541a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1068 #5: ffffffff8a50be68 (input_mutex){+.+.}-{4:4}, at: class_mutex_intr_constructor include/linux/mutex.h:255 [inline] (input_mutex){+.+.}-{4:4}, at: input_register_device.cold+0x5b/0x375 drivers/input/input.c:2374 #6: ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] #6: ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] #6: ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608 1 lock held by syz.4.1291/9909: 2 locks held by syz.0.1293/9921: #0: ffff88810caace08 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:949 [inline] , at: __device_driver_lock drivers/base/dd.c:1166 [inline] , at: device_release_driver_internal+0xb2/0x620 drivers/base/dd.c:1364 #1: ffffffff8ade89c8 ( uevent_sock_mutex ){+.+.}-{4:4} , at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] , at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] , at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608 1 lock held by syz.2.1295/9925: #0: ffffffff8ade89c8 (uevent_sock_mutex ){+.+.}-{4:4} , at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] , at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] , at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608 1 lock held by syz.1.1296/9929: #0: ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] #0: ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] #0: ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608 2 locks held by syz.3.1297/9932: #0: ffff88810b358e08 (&dev->mutex){....}-{4:4}