syzbot


INFO: task hung in blk_queue_enter (3)

Status: auto-obsoleted due to no activity on 2026/07/19 01:35
Subsystems: block
Labels: prio:low
[Documentation on labels]
First crash: 91d, last: 91d
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
16bdbb81-1e69-417f-8efa-ae793b3aaf0b assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ INFO: task hung in blk_queue_enter (3) 2026/05/20 00:24 2026/05/20 00:24 2026/05/20 01:01 1d9407ad5a662c921fc0d659cf022b438c0bde91

			
		
Similar bugs (5)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: task hung in blk_queue_enter 1 1 1350d 1350d 0/1 auto-obsoleted due to no activity on 2023/03/08 06:36
upstream INFO: task hung in blk_queue_enter block 1 C 1595 2932d 3004d 8/29 fixed on 2018/07/09 18:05
android-414 INFO: task hung in blk_queue_enter 1 1 2781d 2654d 0/1 auto-closed as invalid on 2019/06/06 06:07
android-49 INFO: task hung in blk_queue_enter 1 1 2769d 2653d 0/3 auto-closed as invalid on 2019/06/18 00:11
upstream INFO: task hung in blk_queue_enter (2) block 1 2 1074d 1075d 0/29 auto-obsoleted due to no activity on 2023/11/09 05:10

Sample crash report:
INFO: task kworker/u8:0:12 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:0    state:D
 stack:20904 pid:12    tgid:12    ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: async async_run_entry_fn

Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xeb1/0x4220 kernel/sched/core.c:6911
 __schedule_loop kernel/sched/core.c:6993 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7008
 blk_queue_enter+0x3e0/0x800 block/blk-core.c:320
 blk_mq_alloc_request+0x697/0x990 block/blk-mq.c:681
 scsi_alloc_request drivers/scsi/scsi_lib.c:1252 [inline]
 scsi_execute_cmd+0x1a3/0xe70 drivers/scsi/scsi_lib.c:312
 sd_read_block_zero drivers/scsi/sd.c:3708 [inline]
 sd_revalidate_disk+0x58cc/0xa580 drivers/scsi/sd.c:3762
 sd_probe+0x949/0xf80 drivers/scsi/sd.c:4045
 scsi_bus_probe+0x6d/0x90 drivers/scsi/scsi_sysfs.c:563
 call_driver_probe drivers/base/dd.c:643 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:721
 __driver_probe_device+0x1de/0x400 drivers/base/dd.c:863
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:893
 __device_attach_driver+0x1df/0x340 drivers/base/dd.c:1021
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach_async_helper+0x1d1/0x2b0 drivers/base/dd.c:1050
 async_run_entry_fn+0x9f/0x580 kernel/async.c:129
 process_one_work+0xa23/0x19a0 kernel/workqueue.c:3276
 process_scheduled_works kernel/workqueue.c:3359 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3440
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x6c3/0xcb0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task kworker/1:5:5226 blocked for more than 171 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:5     state:D
 stack:20568 pid:5226  tgid:5226  ppid:2      task_flags:0x4288060 flags:0x00080000
Workqueue: usb_hub_wq hub_event

Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xeb1/0x4220 kernel/sched/core.c:6911
 __schedule_loop kernel/sched/core.c:6993 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7008
 schedule_timeout+0x1b2/0x280 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:100 [inline]
 __wait_for_common+0x2e7/0x4c0 kernel/sched/completion.c:121
 __flush_work+0x7c7/0xcb0 kernel/workqueue.c:4328
 __cancel_work_sync kernel/workqueue.c:4448 [inline]
 cancel_delayed_work_sync+0xd1/0xf0 kernel/workqueue.c:4522
 quiesce_and_remove_host drivers/usb/storage/usb.c:939 [inline]
 usb_stor_disconnect+0xc5/0x270 drivers/usb/storage/usb.c:1186
 usb_unbind_interface+0x1dd/0x9e0 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:633 [inline]
 device_remove+0x12a/0x180 drivers/base/dd.c:625
 __device_release_driver drivers/base/dd.c:1344 [inline]
 device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1367
 bus_remove_device+0x2bc/0x560 drivers/base/bus.c:657
 device_del+0x376/0x9b0 drivers/base/core.c:3880
 usb_disable_device+0x367/0x810 drivers/usb/core/message.c:1478
 usb_disconnect+0x2e2/0x9a0 drivers/usb/core/hub.c:2345
 hub_port_connect drivers/usb/core/hub.c:5407 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 port_event drivers/usb/core/hub.c:5871 [inline]
 hub_event+0x1d0c/0x4af0 drivers/usb/core/hub.c:5953
 process_one_work+0xa23/0x19a0 kernel/workqueue.c:3276
 process_scheduled_works kernel/workqueue.c:3359 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3440
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x6c3/0xcb0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task syz.0.1293:9921 blocked for more than 172 seconds.
      Not tainted syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.1293      state:D
 stack:27432 pid:9921  tgid:9920  ppid:2962   task_flags:0x40044c flags:0x00080003
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xeb1/0x4220 kernel/sched/core.c:6911
 __schedule_loop kernel/sched/core.c:6993 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7008
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
 kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
 kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
 device_remove+0xcb/0x180 drivers/base/dd.c:631
 __device_release_driver drivers/base/dd.c:1344 [inline]
 device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1367
 driver_detach+0xd8/0x1b0 drivers/base/dd.c:1430
 bus_remove_driver+0x13b/0x2e0 drivers/base/bus.c:825
 driver_unregister+0x76/0xb0 drivers/base/driver.c:277
 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1752
 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463
 __fput+0x3ff/0xb40 fs/file_table.c:469
 task_work_run+0x150/0x240 kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x8b8/0x2b60 kernel/exit.c:976
 do_group_exit+0xd5/0x2a0 kernel/exit.c:1118
 get_signal+0x1ec7/0x21e0 kernel/signal.c:3034
 arch_do_signal_or_restart+0x91/0x7a0 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline]
 exit_to_user_mode_loop+0x7e/0x430 kernel/entry/common.c:98
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline]
 do_syscall_64+0x671/0x7b0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f89001cc4ab
RSP: 002b:00007f88fec1cf00 EFLAGS: 00000246
 ORIG_RAX: 0000000000000010
RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f89001cc4ab
RDX: 00007f88fec1dfd0 RSI: 0000000080085502 RDI: 0000000000000003
RBP: 00007f88fec1dfd0 R08: 0000000000000040 R09: 00007f88fec1cfc8
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
R13: 0000000800000000 R14: 0000000000000012 R15: 00007f8900280ede
 </TASK>
INFO: task syz.1.1296:9929 blocked for more than 173 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.1296      state:D
 stack:29336 pid:9929  tgid:9926  ppid:2963   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xeb1/0x4220 kernel/sched/core.c:6911
 __schedule_loop kernel/sched/core.c:6993 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7008
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
 kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
 kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
 driver_register+0x29c/0x360 drivers/base/driver.c:257
 usb_gadget_register_driver_owner+0x132/0x210 drivers/usb/gadget/udc/core.c:1720
 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:596 [inline]
 raw_ioctl+0x1a85/0x2b80 drivers/usb/gadget/legacy/raw_gadget.c:1307
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcd19bdc4ab
RSP: 002b:00007fcd185f2f00 EFLAGS: 00000246
 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fcd19bdc4ab
RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
RBP: 00007fcd185f3fd0 R08: 0000000000000001 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000200000000000 R14: 0000000000000005 R15: 0000000000000868
 </TASK>
INFO: task syz.3.1297:9932 blocked for more than 173 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.1297      state:D
 stack:29336 pid:9932  tgid:9930  ppid:2964   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xeb1/0x4220 kernel/sched/core.c:6911
 __schedule_loop kernel/sched/core.c:6993 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7008
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
 kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
 kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
 gadget_bind_driver+0x773/0xbf0 drivers/usb/gadget/udc/core.c:1648
 call_driver_probe drivers/base/dd.c:643 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:721
 __driver_probe_device+0x1de/0x400 drivers/base/dd.c:863
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:893
 __driver_attach+0x21f/0x5d0 drivers/base/dd.c:1287
 bus_for_each_dev+0x13e/0x1d0 drivers/base/bus.c:383
 bus_add_driver+0x305/0x5b0 drivers/base/bus.c:756
 driver_register+0x1e2/0x360 drivers/base/driver.c:249
 usb_gadget_register_driver_owner+0x132/0x210 drivers/usb/gadget/udc/core.c:1720
 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:596 [inline]
 raw_ioctl+0x1a85/0x2b80 drivers/usb/gadget/legacy/raw_gadget.c:1307
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcc70fac4ab
RSP: 002b:00007fcc6f9dbf00 EFLAGS: 00000246
 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fcc70fac4ab
RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
RBP: 00007fcc6f9dcfd0 R08: 0000000000000001 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00002000000000c0 R14: 0000000000000002 R15: 0000000000000000
 </TASK>
INFO: task syz.3.1297:9933 blocked for more than 174 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.1297      state:D
 stack:28904 pid:9933  tgid:9930  ppid:2964   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xeb1/0x4220 kernel/sched/core.c:6911
 __schedule_loop kernel/sched/core.c:6993 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7008
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 device_lock include/linux/device.h:949 [inline]
 __device_driver_lock drivers/base/dd.c:1166 [inline]
 __driver_attach+0x214/0x5d0 drivers/base/dd.c:1286
 bus_for_each_dev+0x13e/0x1d0 drivers/base/bus.c:383
 bus_add_driver+0x305/0x5b0 drivers/base/bus.c:756
 driver_register+0x1e2/0x360 drivers/base/driver.c:249
 usb_gadget_register_driver_owner+0x132/0x210 drivers/usb/gadget/udc/core.c:1720
 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:596 [inline]
 raw_ioctl+0x1a85/0x2b80 drivers/usb/gadget/legacy/raw_gadget.c:1307
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcc70fac4ab
RSP: 002b:00007fcc6f9baf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fcc70fac4ab
RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
RBP: 00007fcc6f9bbfd0 R08: 0000000000000001 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000200000000dc0 R14: 0000000000000005 R15: 0000000000000868
 </TASK>
INFO: task syz-executor:9935 blocked for more than 174 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D
 stack:27736 pid:9935  tgid:9935  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xeb1/0x4220 kernel/sched/core.c:6911
 __schedule_loop kernel/sched/core.c:6993 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7008
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x118/0x3a0 net/core/net_namespace.c:446
 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581
 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130
 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226
 ksys_unshare+0x473/0xad0 kernel/fork.c:3173
 __do_sys_unshare kernel/fork.c:3244 [inline]
 __se_sys_unshare kernel/fork.c:3242 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3242
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f415381dae7
RSP: 002b:00007ffd4536c1f8 EFLAGS: 00000202
 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f4153a95f40 RCX: 00007f415381dae7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007f4153a967b8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
R13: 0000000000000003 R14: 00007ffd4536c438 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9948 blocked for more than 175 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:27736 pid:9948  tgid:9948  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xeb1/0x4220 kernel/sched/core.c:6911
 __schedule_loop kernel/sched/core.c:6993 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7008
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x118/0x3a0 net/core/net_namespace.c:446
 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581
 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130
 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226
 ksys_unshare+0x473/0xad0 kernel/fork.c:3173
 __do_sys_unshare kernel/fork.c:3244 [inline]
 __se_sys_unshare kernel/fork.c:3242 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3242
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe0cf8cdae7
RSP: 002b:00007ffc47b0b8b8 EFLAGS: 00000206
 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007fe0cfb45f40 RCX: 00007fe0cf8cdae7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007fe0cfb467b8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
R13: 0000000000000003 R14: 00007ffc47b0baf8 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9951 blocked for more than 175 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D
 stack:27736 pid:9951  tgid:9951  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xeb1/0x4220 kernel/sched/core.c:6911
 __schedule_loop kernel/sched/core.c:6993 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7008
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x118/0x3a0 net/core/net_namespace.c:446
 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581
 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130
 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226
 ksys_unshare+0x473/0xad0 kernel/fork.c:3173
 __do_sys_unshare kernel/fork.c:3244 [inline]
 __se_sys_unshare kernel/fork.c:3242 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3242
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f04463adae7
RSP: 002b:00007ffe46ff43e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f0446625f40 RCX: 00007f04463adae7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007f04466267b8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
R13: 0000000000000003 R14: 00007ffe46ff4628 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9954 blocked for more than 175 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D
 stack:27592 pid:9954  tgid:9954  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xeb1/0x4220 kernel/sched/core.c:6911
 __schedule_loop kernel/sched/core.c:6993 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7008
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x118/0x3a0 net/core/net_namespace.c:446
 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581
 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130
 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226
 ksys_unshare+0x473/0xad0 kernel/fork.c:3173
 __do_sys_unshare kernel/fork.c:3244 [inline]
 __se_sys_unshare kernel/fork.c:3242 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3242
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f651fc2dae7
RSP: 002b:00007ffce90dfdf8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f651fea5f40 RCX: 00007f651fc2dae7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007f651fea67b8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
R13: 0000000000000003 R14: 00007ffce90e0038 R15: 0000000000000000
 </TASK>
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
INFO: task syz-executor:9978 blocked for more than 176 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D
 stack:27736 pid:9978  tgid:9978  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0xeb1/0x4220 kernel/sched/core.c:6911
 __schedule_loop kernel/sched/core.c:6993 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7008
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x118/0x3a0 net/core/net_namespace.c:446
 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581
 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130
 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226
 ksys_unshare+0x473/0xad0 kernel/fork.c:3173
 __do_sys_unshare kernel/fork.c:3244 [inline]
 __se_sys_unshare kernel/fork.c:3242 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3242
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0x7b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f63e322dae7
RSP: 002b:00007ffea1e35ae8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f63e34a5f40 RCX: 00007f63e322dae7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007f63e34a67b8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
R13: 0000000000000003 R14: 00007ffea1e35d28 R15: 0000000000000000
 </TASK>
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings

Showing all locks held in the system:
8 locks held by kworker/0:0/9:
5 locks held by kworker/0:1/10:
4 locks held by kworker/u8:0/12:
3 locks held by kworker/1:0/23:
1 lock held by khungtaskd/30:
 #0: 
ffffffff896de760 (rcu_read_lock){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:850 [inline]
, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775
7 locks held by kworker/0:2/1117:
 #0: ffff8881062dd148 ((wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work+0x1310/0x19a0 kernel/workqueue.c:3251
 #1: ffffc900030ffd18 (
(work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 kernel/workqueue.c:3252
 #2: 
ffff88810b75a1e0
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:949 [inline]
, at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899
 #3: 
ffff888139f3e1e0
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:949 [inline]
, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1068
 #4: 
ffff88813500c1a8
 (
&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:949 [inline]
&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1068
 #5: ffff88813b350680
 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:949 [inline]
 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1068
 #6: 
ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
, at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
2 locks held by kworker/0:3/2814:
2 locks held by getty/2916:
 #0: 
ffff8881129600a0
 (
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: 
ffffc900000432f0
 (
&ldata->atomic_read_lock
){+.+.}-{4:4}
, at: n_tty_read+0x419/0x1500 drivers/tty/n_tty.c:2211
4 locks held by udevd/5206:
 #0: ffff8881083e8e80 (&p->lock
){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 fs/seq_file.c:183
 #1: ffff88813329e888
 (
&of->mutex
){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 fs/kernfs/file.c:172
 #2: ffff888114eb7d28 (kn->active#21){++++}-{0:0}
, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
, at: kernfs_seq_start+0xbc/0x2a0 fs/kernfs/file.c:173
 #3: 
ffff888139f3f1e0
 (
&dev->mutex
){....}-{4:4}
, at: device_lock_interruptible include/linux/device.h:954 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
3 locks held by kworker/1:4/5223:
 #0: 
ffff88810006b148
 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 kernel/workqueue.c:3251
 #1: 
ffffc9000351fd18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 kernel/workqueue.c:3252
 #2: 
ffffffff896ea2b8 (rcu_state.exp_mutex
){+.+.}-{4:4}
, at: exp_funnel_lock+0x27f/0x3c0 kernel/rcu/tree_exp.h:311
5 locks held by kworker/1:5/5226:
 #0: ffff8881062dd148
 (
(wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work+0x1310/0x19a0 kernel/workqueue.c:3251
 #1: 
ffffc9000354fd18
 ((work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work+0x988/0x19a0 kernel/workqueue.c:3252
 #2: ffff88810bb321e0
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:949 [inline]
, at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899
 #3: ffff888139cf41e0
 (&dev->mutex){....}-{4:4}
, at: device_lock include/linux/device.h:949 [inline]
, at: usb_disconnect+0x10a/0x9a0 drivers/usb/core/hub.c:2336
 #4: ffff88813aeaa1a8 (&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:949 [inline]
, at: __device_driver_lock drivers/base/dd.c:1166 [inline]
, at: device_release_driver_internal+0xb2/0x620 drivers/base/dd.c:1364
4 locks held by udevd/5227:
 #0: ffff8881342b70a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 fs/seq_file.c:183
 #1: 
ffff88813648c888
 (
&of->mutex
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4f/0x2a0 fs/kernfs/file.c:172
 #2: 
ffff888111a9d968
 (
kn->active
#21
){++++}-{0:0}
, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
, at: kernfs_seq_start+0xbc/0x2a0 fs/kernfs/file.c:173
 #3: 
ffff88813430f1e0 (&dev->mutex){....}-{4:4}
, at: device_lock_interruptible include/linux/device.h:954 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
5 locks held by kworker/0:4/5247:
 #0: ffff8881062dd148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 kernel/workqueue.c:3251
 #1: 
ffffc900035efd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 kernel/workqueue.c:3252
 #2: ffff88810b7b21e0 (&dev->mutex){....}-{4:4}
, at: device_lock include/linux/device.h:949 [inline]
, at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899
 #3: ffff88813430f1e0
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:949 [inline]
, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1068
 #4: 
ffffffff8ade89c8
 (
uevent_sock_mutex
){+.+.}-{4:4}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
, at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
3 locks held by kworker/0:5/5373:
 #0: ffff88810006a148 ((wq_completion)events_freezable){+.+.}-{0:0}
, at: process_one_work+0x1310/0x19a0 kernel/workqueue.c:3251
 #1: ffffc90005847d18 ((work_completion)(&(&us->scan_dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 kernel/workqueue.c:3252
 #2: 
ffff8881137780e0 (&shost->scan_mutex){+.+.}-{4:4}, at: scsi_scan_host_selected+0x160/0x380 drivers/scsi/scsi_scan.c:1895
7 locks held by kworker/0:6/8203:
 #0: ffff8881062dd148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}
, at: process_one_work+0x1310/0x19a0 kernel/workqueue.c:3251
 #1: 
ffffc900157c7d18
 (
(work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work+0x988/0x19a0 kernel/workqueue.c:3252
 #2: 
ffff88810b7e21e0
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:949 [inline]
, at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899
 #3: 
ffff888139f3f1e0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:949 [inline]
ffff888139f3f1e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1068
 #4: ffff8881227541a8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:949 [inline]
 #4: ffff8881227541a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1068
 #5: 
ffffffff8a50be68
 (input_mutex){+.+.}-{4:4}, at: class_mutex_intr_constructor include/linux/mutex.h:255 [inline]
 (input_mutex){+.+.}-{4:4}, at: input_register_device.cold+0x5b/0x375 drivers/input/input.c:2374
 #6: ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
 #6: ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
 #6: ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
1 lock held by syz.4.1291/9909:
2 locks held by syz.0.1293/9921:
 #0: 
ffff88810caace08
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:949 [inline]
, at: __device_driver_lock drivers/base/dd.c:1166 [inline]
, at: device_release_driver_internal+0xb2/0x620 drivers/base/dd.c:1364
 #1: 
ffffffff8ade89c8
 (
uevent_sock_mutex
){+.+.}-{4:4}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
, at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
1 lock held by syz.2.1295/9925:
 #0: ffffffff8ade89c8 (uevent_sock_mutex
){+.+.}-{4:4}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
, at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
1 lock held by syz.1.1296/9929:
 #0: ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
 #0: ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
 #0: ffffffff8ade89c8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
2 locks held by syz.3.1297/9932:
 #0: ffff88810b358e08 (&dev->mutex){....}-{4:4}

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/20 01:30 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 87117347a0e7 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in blk_queue_enter
* Struck through repros no longer work on HEAD.