syzbot

INFO: task kworker/0:0:9 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:0     state:D
 stack:21752 pid:9     tgid:9     ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: usb_hub_wq hub_event

Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0xeb0/0x3e50 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:6964
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
 kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
 kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
 device_add+0x116e/0x1950 drivers/base/core.c:3670
 usb_new_device.cold+0x685/0x115c drivers/usb/core/hub.c:2695
 hub_port_connect drivers/usb/core/hub.c:5567 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 port_event drivers/usb/core/hub.c:5871 [inline]
 hub_event+0x314d/0x4af0 drivers/usb/core/hub.c:5953
 process_one_work+0x9c2/0x1840 kernel/workqueue.c:3257
 process_scheduled_works kernel/workqueue.c:3340 [inline]
 worker_thread+0x5da/0xe40 kernel/workqueue.c:3421
 kthread+0x3b3/0x730 kernel/kthread.c:463
 ret_from_fork+0x6c3/0xa20 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
INFO: task jbd2/sda1-8:2823 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jbd2/sda1-8     state:D
 stack:26152 pid:2823  tgid:2823  ppid:2      task_flags:0x240040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0xeb0/0x3e50 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:6964
 io_schedule+0x8a/0xf0 kernel/sched/core.c:7791
 bit_wait_io+0xd/0xe0 kernel/sched/wait_bit.c:250
 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52
 out_of_line_wait_on_bit+0xdc/0x110 kernel/sched/wait_bit.c:67
 wait_on_bit_io include/linux/wait_bit.h:105 [inline]
 __wait_on_buffer+0x64/0x70 fs/buffer.c:123
 wait_on_buffer include/linux/buffer_head.h:420 [inline]
 journal_wait_on_commit_record fs/jbd2/commit.c:171 [inline]
 jbd2_journal_commit_transaction+0x4851/0x6680 fs/jbd2/commit.c:881
 kjournald2+0x200/0x760 fs/jbd2/journal.c:201
 kthread+0x3b3/0x730 kernel/kthread.c:463
 ret_from_fork+0x6c3/0xa20 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
INFO: task syz.2.1099:9272 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.1099      state:D
 stack:29416 pid:9272  tgid:9259  ppid:2970   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0xeb0/0x3e50 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:6964
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
 kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
 kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
 driver_register+0x29c/0x360 drivers/base/driver.c:257
 usb_gadget_register_driver_owner+0x132/0x210 drivers/usb/gadget/udc/core.c:1719
 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:596 [inline]
 raw_ioctl+0x1a85/0x2b80 drivers/usb/gadget/legacy/raw_gadget.c:1307
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0x570 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc57338ab4b
RSP: 002b:00007fc571dc3f00 EFLAGS: 00000246
 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fc57338ab4b
RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
RBP: 00007fc571dc4fd0 R08: 0000000000000001 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000868
 </TASK>
INFO: task syz.1.1101:9265 blocked for more than 173 seconds.
      Not tainted syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.1101      state:D
 stack:27640 pid:9265  tgid:9263  ppid:2968   task_flags:0x40044c flags:0x00080003
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0xeb0/0x3e50 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:6964
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
 kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
 kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
 device_remove+0xcb/0x180 drivers/base/dd.c:569
 __device_release_driver drivers/base/dd.c:1282 [inline]
 device_release_driver_internal+0x42e/0x600 drivers/base/dd.c:1305
 driver_detach+0xd8/0x1b0 drivers/base/dd.c:1368
 bus_remove_driver+0x13b/0x2e0 drivers/base/bus.c:784
 driver_unregister+0x76/0xb0 drivers/base/driver.c:277
 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1751
 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463
 __fput+0x3ff/0xb40 fs/file_table.c:468
 task_work_run+0x150/0x240 kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x829/0x2a30 kernel/exit.c:971
 do_group_exit+0xd5/0x2a0 kernel/exit.c:1112
 get_signal+0x1ec7/0x21e0 kernel/signal.c:3034
 arch_do_signal_or_restart+0x91/0x7a0 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:41 [inline]
 exit_to_user_mode_loop+0x7e/0x430 kernel/entry/common.c:75
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline]
 do_syscall_64+0x4a8/0x570 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb4ef65aeb9
RSP: 002b:00007fb4ee0960e8 EFLAGS: 00000246
 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007fb4ef8d6098 RCX: 00007fb4ef65aeb9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb4ef8d6098
RBP: 00007fb4ef8d6090 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb4ef8d6128 R14: 00007ffed794bc50 R15: 00007ffed794bd38
 </TASK>
INFO: task syz.0.1102:9267 blocked for more than 173 seconds.
      Not tainted syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.1102      state:D
 stack:27640 pid:9267  tgid:9266  ppid:2969   task_flags:0x40044c flags:0x00080003
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0xeb0/0x3e50 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:6964
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
 kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
 kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
 device_remove+0xcb/0x180 drivers/base/dd.c:569
 __device_release_driver drivers/base/dd.c:1282 [inline]
 device_release_driver_internal+0x42e/0x600 drivers/base/dd.c:1305
 driver_detach+0xd8/0x1b0 drivers/base/dd.c:1368
 bus_remove_driver+0x13b/0x2e0 drivers/base/bus.c:784
 driver_unregister+0x76/0xb0 drivers/base/driver.c:277
 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1751
 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463
 __fput+0x3ff/0xb40 fs/file_table.c:468
 task_work_run+0x150/0x240 kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x829/0x2a30 kernel/exit.c:971
 do_group_exit+0xd5/0x2a0 kernel/exit.c:1112
 get_signal+0x1ec7/0x21e0 kernel/signal.c:3034
 arch_do_signal_or_restart+0x91/0x7a0 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:41 [inline]
 exit_to_user_mode_loop+0x7e/0x430 kernel/entry/common.c:75
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline]
 do_syscall_64+0x4a8/0x570 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f87e153ab4b
RSP: 002b:00007f87dff94f00 EFLAGS: 00000246
 ORIG_RAX: 0000000000000010
RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f87e153ab4b
RDX: 00007f87dff95fd0 RSI: 0000000080085502 RDI: 0000000000000003
RBP: 00007f87dff95fd0 R08: 0000000000000001 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
R13: 0000000800000000 R14: 0000000000000000 R15: 00007f87e15a92e9
 </TASK>
INFO: task syz.3.1103:9270 blocked for more than 174 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.1103      state:D
 stack:29352 pid:9270  tgid:9269  ppid:2971   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0xeb0/0x3e50 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:6964
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
 kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
 kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
 gadget_bind_driver+0x773/0xbf0 drivers/usb/gadget/udc/core.c:1647
 call_driver_probe drivers/base/dd.c:581 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:659
 __driver_probe_device+0x1de/0x400 drivers/base/dd.c:801
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:831
 __driver_attach+0x217/0x5c0 drivers/base/dd.c:1225
 bus_for_each_dev+0x13e/0x1d0 drivers/base/bus.c:383
 bus_add_driver+0x305/0x5b0 drivers/base/bus.c:715
 driver_register+0x1e2/0x360 drivers/base/driver.c:249
 usb_gadget_register_driver_owner+0x132/0x210 drivers/usb/gadget/udc/core.c:1719
 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:596 [inline]
 raw_ioctl+0x1a85/0x2b80 drivers/usb/gadget/legacy/raw_gadget.c:1307
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0x570 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f235ef7ab4b
RSP: 002b:00007f235d9d4f00 EFLAGS: 00000246
 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f235ef7ab4b
RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
RBP: 00007f235d9d5fd0 R08: 0000000000000001 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000200000000140 R14: 0000000000000005 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9275 blocked for more than 154 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D
 stack:27752 pid:9275  tgid:9275  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0xeb0/0x3e50 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:6964
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x118/0x3a0 net/core/net_namespace.c:446
 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581
 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130
 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226
 ksys_unshare+0x455/0xab0 kernel/fork.c:3171
 __do_sys_unshare kernel/fork.c:3242 [inline]
 __se_sys_unshare kernel/fork.c:3240 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3240
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0x570 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fee60bdc1a7
RSP: 002b:00007ffdf7543c08 EFLAGS: 00000206
 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007fee60e55f40 RCX: 00007fee60bdc1a7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007fee60e567b8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
R13: 0000000000000003 R14: 00007ffdf7543e48 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9285 blocked for more than 155 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D
 stack:27672 pid:9285  tgid:9285  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0xeb0/0x3e50 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:6964
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x118/0x3a0 net/core/net_namespace.c:446
 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581
 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130
 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226
 ksys_unshare+0x455/0xab0 kernel/fork.c:3171
 __do_sys_unshare kernel/fork.c:3242 [inline]
 __se_sys_unshare kernel/fork.c:3240 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3240
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0x570 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc58a15c1a7
RSP: 002b:00007fffbb196048 EFLAGS: 00000206
 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007fc58a3d5f40 RCX: 00007fc58a15c1a7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007fc58a3d67b8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
R13: 0000000000000003 R14: 00007fffbb196288 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9291 blocked for more than 156 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D
 stack:27352 pid:9291  tgid:9291  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0xeb0/0x3e50 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:6964
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x118/0x3a0 net/core/net_namespace.c:446
 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581
 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130
 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226
 ksys_unshare+0x455/0xab0 kernel/fork.c:3171
 __do_sys_unshare kernel/fork.c:3242 [inline]
 __se_sys_unshare kernel/fork.c:3240 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3240
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0x570 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4ae929c1a7
RSP: 002b:00007ffd258917e8 EFLAGS: 00000206
 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f4ae9515f40 RCX: 00007f4ae929c1a7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007f4ae95167b8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
R13: 0000000000000003 R14: 00007ffd25891a28 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9296 blocked for more than 156 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D
 stack:27656 pid:9296  tgid:9296  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0xeb0/0x3e50 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:6964
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x118/0x3a0 net/core/net_namespace.c:446
 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581
 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130
 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226
 ksys_unshare+0x455/0xab0 kernel/fork.c:3171
 __do_sys_unshare kernel/fork.c:3242 [inline]
 __se_sys_unshare kernel/fork.c:3240 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3240
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0x570 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd36a82c1a7
RSP: 002b:00007ffd99f58248 EFLAGS: 00000206
 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007fd36aaa5f40 RCX: 00007fd36a82c1a7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007fd36aaa67b8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
R13: 0000000000000003 R14: 00007ffd99f58488 R15: 0000000000000000
 </TASK>
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
INFO: task syz-executor:9315 blocked for more than 157 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D
 stack:27352 pid:9315  tgid:9315  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0xeb0/0x3e50 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:6964
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
 uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x118/0x3a0 net/core/net_namespace.c:446
 copy_net_ns+0x440/0x780 net/core/net_namespace.c:581
 create_new_namespaces+0x3ea/0xc00 kernel/nsproxy.c:130
 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226
 ksys_unshare+0x455/0xab0 kernel/fork.c:3171
 __do_sys_unshare kernel/fork.c:3242 [inline]
 __se_sys_unshare kernel/fork.c:3240 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3240
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0x570 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fee6787c1a7
RSP: 002b:00007ffd07f2d2b8 EFLAGS: 00000206
 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007fee67af5f40 RCX: 00007fee6787c1a7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007fee67af67b8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
R13: 0000000000000003 R14: 00007ffd07f2d4f8 R15: 0000000000000000
 </TASK>
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings

Showing all locks held in the system:
5 locks held by kworker/0:0/9:
5 locks held by kworker/1:0/23:
1 lock held by khungtaskd/30:
 #0: 
ffffffff894da3a0
 (rcu_read_lock
){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775
4 locks held by kworker/u8:4/65:
2 locks held by kworker/u8:10/488:
6 locks held by kworker/1:2/1122:
 #0: ffff888105ea8148
 ((wq_completion)usb_hub_wq
){+.+.}-{0:0}
, at: process_one_work+0x11ae/0x1840 kernel/workqueue.c:3232
 #1: 
ffffc90001bcfca8
 (
(work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work+0x927/0x1840 kernel/workqueue.c:3233
 #2: 
ffff88810a7e0198
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:895 [inline]
, at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899
 #3: 
ffff88811f280198
 (&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:895 [inline]
, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1006
 #4: 
ffff88810abae160
 (
&dev->mutex){....}-{4:4}
, at: device_lock include/linux/device.h:895 [inline]
, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1006
 #5: ffffffff8abb6b48
 (
uevent_sock_mutex
){+.+.}-{4:4}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
, at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
2 locks held by getty/2925:
 #0: ffff888115b200a0
 (
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: 
ffffc900000452f0
 (
&ldata->atomic_read_lock
){+.+.}-{4:4}
, at: n_tty_read+0x419/0x1500 drivers/tty/n_tty.c:2211
4 locks held by udevd/5206:
 #0: 
ffff888135e62e80
 (
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xe1/0x1270 fs/seq_file.c:182
 #1: ffff88813d2d3c88
 (&of->mutex
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4f/0x2a0 fs/kernfs/file.c:172
 #2: 
ffff88812410a0f8
 (
kn->active
#16
){++++}-{0:0}
, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
, at: kernfs_seq_start+0xbc/0x2a0 fs/kernfs/file.c:173
 #3: 
ffff88811f280198
 (
&dev->mutex
){....}-{4:4}
, at: device_lock_interruptible include/linux/device.h:900 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
5 locks held by kworker/1:3/5233:
4 locks held by kworker/1:4/5234:
6 locks held by kworker/1:5/5308:
2 locks held by syz.4.1097/9273:
 #0: 
ffff888109facdc0
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:895 [inline]
, at: __device_driver_lock drivers/base/dd.c:1104 [inline]
, at: device_release_driver_internal+0xaa/0x600 drivers/base/dd.c:1302
 #1: 
ffffffff8abb6b48
 (
uevent_sock_mutex
){+.+.}-{4:4}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
, at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
1 lock held by syz.2.1099/9272:
2 locks held by syz.1.1101/9265:
 #0: ffff888109fa0dc0
 (&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:895 [inline]
, at: __device_driver_lock drivers/base/dd.c:1104 [inline]
, at: device_release_driver_internal+0xaa/0x600 drivers/base/dd.c:1302
 #1: ffffffff8abb6b48
 (uevent_sock_mutex
){+.+.}-{4:4}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
, at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
2 locks held by syz.0.1102/9267:
 #0: 
ffff8881017ccdc0
 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:895 [inline]
, at: __device_driver_lock drivers/base/dd.c:1104 [inline]
, at: device_release_driver_internal+0xaa/0x600 drivers/base/dd.c:1302
 #1: ffffffff8abb6b48
 (uevent_sock_mutex
){+.+.}-{4:4}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
, at: kobject_uevent_env+0xba8/0x18b0 lib/kobject_uevent.c:608
1 lock held by syz.3.1103/9270:
2 locks held by syz-executor/9275:
 #0: ffffffff8a8b49b0
 (pernet_ops_rwsem
){++++}-{4:4}
, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:577
 #1: ffffffff8abb6b48
 (uevent_sock_mutex
){+.+.}-{4:4}
, at: uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
2 locks held by syz-executor/9285:
 #0: ffffffff8a8b49b0
 (pernet_ops_rwsem
){++++}-{4:4}
, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:577
 #1: 
ffffffff8abb6b48
 (uevent_sock_mutex
){+.+.}-{4:4}
, at: uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
2 locks held by syz-executor/9291:
 #0: 
ffffffff8a8b49b0
 (
pernet_ops_rwsem){++++}-{4:4}
, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:577
 #1: 
ffffffff8abb6b48
 (
uevent_sock_mutex
){+.+.}-{4:4}
, at: uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
2 locks held by syz-executor/9296:
 #0: ffffffff8a8b49b0
 (pernet_ops_rwsem
){++++}-{4:4}
, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:577
 #1: 
ffffffff8abb6b48
 (
uevent_sock_mutex){+.+.}-{4:4}
, at: uevent_net_init+0x210/0x330 lib/kobject_uevent.c:794
2 locks held by syz-executor/9315:
 #0: 
ffffffff8a8b49b0
 (
pernet_ops_rwsem
){++++}-{4:4}
, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:577
 #1: 
ffffffff8abb6b48
 (