INFO: task syz-executor:2650 blocked for more than 143 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23376 pid:2650 tgid:2650 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:868 [inline] d_revalidate fs/namei.c:865 [inline] lookup_fast+0x239/0x540 fs/namei.c:1679 walk_component+0x5b/0x5b0 fs/namei.c:2035 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2404 link_path_walk fs/namei.c:2336 [inline] path_openat+0x238/0x2d20 fs/namei.c:3882 do_filp_open+0x1dc/0x430 fs/namei.c:3913 do_sys_openat2+0x17a/0x1e0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4f68076b91 RSP: 002b:00007ffd296ed040 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000334 RCX: 00007f4f68076b91 RDX: 0000000000090800 RSI: 00007f4f680e4de5 RDI: 00000000ffffff9c RBP: 00007ffd296ed0dc R08: 000000000001fb72 R09: 00007f4f681da080 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 00000000000a6eaf R14: 00000000000a6eaf R15: 00007ffd296ed130 INFO: task syz-executor:2651 blocked for more than 144 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24608 pid:2651 tgid:2651 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:868 [inline] d_revalidate fs/namei.c:865 [inline] lookup_fast+0x239/0x540 fs/namei.c:1679 walk_component+0x5b/0x5b0 fs/namei.c:2035 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2404 link_path_walk fs/namei.c:2336 [inline] path_openat+0x238/0x2d20 fs/namei.c:3882 do_filp_open+0x1dc/0x430 fs/namei.c:3913 do_sys_openat2+0x17a/0x1e0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fce6cf06b91 RSP: 002b:00007ffebb192b60 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000361 RCX: 00007fce6cf06b91 RDX: 0000000000090800 RSI: 00007fce6cf74de5 RDI: 00000000ffffff9c RBP: 00007ffebb192bfc R08: 000000000001fb24 R09: 00007fce6d06a080 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 00000000000a6d3b R14: 00000000000a6d22 R15: 00007ffebb192c50 INFO: task syz-executor:2654 blocked for more than 144 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24560 pid:2654 tgid:2654 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:868 [inline] d_revalidate fs/namei.c:865 [inline] lookup_fast+0x239/0x540 fs/namei.c:1679 walk_component+0x5b/0x5b0 fs/namei.c:2035 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2404 link_path_walk fs/namei.c:2336 [inline] path_openat+0x238/0x2d20 fs/namei.c:3882 do_filp_open+0x1dc/0x430 fs/namei.c:3913 do_sys_openat2+0x17a/0x1e0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3386186b91 RSP: 002b:00007ffe399710e0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000356 RCX: 00007f3386186b91 RDX: 0000000000090800 RSI: 00007f33861f4de5 RDI: 00000000ffffff9c RBP: 00007ffe3997117c R08: 000000000001faca R09: 00007f3386e53080 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 00000000000a6b65 R14: 00000000000a6b65 R15: 00007ffe399711d0 INFO: task udevd:4884 blocked for more than 145 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:24256 pid:4884 tgid:4884 ppid:2545 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752 device_lock include/linux/device.h:1009 [inline] uevent_show+0x188/0x3b0 drivers/base/core.c:2743 dev_attr_show+0x53/0xe0 drivers/base/core.c:2437 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59 seq_read_iter+0x4fa/0x12c0 fs/seq_file.c:230 kernfs_fop_read_iter+0x41a/0x590 fs/kernfs/file.c:279 new_sync_read fs/read_write.c:395 [inline] vfs_read+0x869/0xbd0 fs/read_write.c:476 ksys_read+0x12f/0x260 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdfc5485b6a RSP: 002b:00007ffe86eaed78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 000055eba19c4c80 RCX: 00007fdfc5485b6a RDX: 0000000000001000 RSI: 000055eba19c8d20 RDI: 0000000000000008 RBP: 000055eba19c4c80 R08: 0000000000000008 R09: 0000000000000000 R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000003fff R14: 00007ffe86eaf258 R15: 000000000000000a INFO: task udevd:4894 blocked for more than 146 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:23456 pid:4894 tgid:4894 ppid:2545 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752 device_lock include/linux/device.h:1009 [inline] uevent_show+0x188/0x3b0 drivers/base/core.c:2743 dev_attr_show+0x53/0xe0 drivers/base/core.c:2437 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59 seq_read_iter+0x4fa/0x12c0 fs/seq_file.c:230 kernfs_fop_read_iter+0x41a/0x590 fs/kernfs/file.c:279 new_sync_read fs/read_write.c:395 [inline] vfs_read+0x869/0xbd0 fs/read_write.c:476 ksys_read+0x12f/0x260 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdfc5485b6a RSP: 002b:00007ffe86eaed78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 000055eba19c4c80 RCX: 00007fdfc5485b6a RDX: 0000000000001000 RSI: 000055eba1a2e410 RDI: 0000000000000008 RBP: 000055eba19c4c80 R08: 0000000000000008 R09: 0000000000000000 R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000003fff R14: 00007ffe86eaf258 R15: 000000000000000a INFO: task udevd:4941 blocked for more than 146 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:24496 pid:4941 tgid:4941 ppid:2545 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752 device_lock include/linux/device.h:1009 [inline] uevent_show+0x188/0x3b0 drivers/base/core.c:2743 dev_attr_show+0x53/0xe0 drivers/base/core.c:2437 sysfs_kf_seq_show+0x23e/0x410 fs/sysfs/file.c:59 seq_read_iter+0x4fa/0x12c0 fs/seq_file.c:230 kernfs_fop_read_iter+0x41a/0x590 fs/kernfs/file.c:279 new_sync_read fs/read_write.c:395 [inline] vfs_read+0x869/0xbd0 fs/read_write.c:476 ksys_read+0x12f/0x260 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdfc5485b6a RSP: 002b:00007ffe86eaed78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 000055eba19c4c80 RCX: 00007fdfc5485b6a RDX: 0000000000001000 RSI: 000055eba1a17ff0 RDI: 0000000000000008 RBP: 000055eba19c4c80 R08: 0000000000000008 R09: 0000000000000000 R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000003fff R14: 00007ffe86eaf258 R15: 000000000000000a INFO: task udevd:5207 blocked for more than 147 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:24640 pid:5207 tgid:5207 ppid:2545 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:868 [inline] d_revalidate fs/namei.c:865 [inline] lookup_fast+0x239/0x540 fs/namei.c:1679 walk_component+0x5b/0x5b0 fs/namei.c:2035 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2404 link_path_walk fs/namei.c:2335 [inline] path_lookupat+0x93/0x770 fs/namei.c:2565 filename_lookup+0x1e5/0x5b0 fs/namei.c:2595 vfs_statx+0x11e/0x1e0 fs/stat.c:312 vfs_fstatat+0x9f/0x160 fs/stat.c:341 __do_sys_newfstatat+0xa2/0x130 fs/stat.c:505 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdfc54855f4 RSP: 002b:00007ffe86eb14c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 000055eba198ba60 RCX: 00007fdfc54855f4 RDX: 00007ffe86eb14d8 RSI: 00007ffe86eb1568 RDI: 00000000ffffff9c RBP: 000055eba19bbe0f R08: 000055eba19bbe0f R09: 0000000000000000 R10: 0000000000000100 R11: 0000000000000206 R12: 0000000000000000 R13: 000055eba198bb50 R14: 00007ffe86eb1568 R15: 000055eb8ab52a04 INFO: task syz-executor:6294 blocked for more than 147 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24000 pid:6294 tgid:6294 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:868 [inline] d_revalidate fs/namei.c:865 [inline] lookup_fast+0x239/0x540 fs/namei.c:1679 walk_component+0x5b/0x5b0 fs/namei.c:2035 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2404 link_path_walk fs/namei.c:2336 [inline] path_openat+0x238/0x2d20 fs/namei.c:3882 do_filp_open+0x1dc/0x430 fs/namei.c:3913 do_sys_openat2+0x17a/0x1e0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f937f4a6b91 RSP: 002b:00007ffe9d8c1010 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000247 RCX: 00007f937f4a6b91 RDX: 0000000000090800 RSI: 00007f937f514de5 RDI: 00000000ffffff9c RBP: 00007ffe9d8c10ac R08: 000000000001f9f0 R09: 00007f9380171080 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 00000000000a671d R14: 00000000000a671d R15: 00007ffe9d8c1100 INFO: task syz-executor:7774 blocked for more than 148 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24720 pid:7774 tgid:7774 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:868 [inline] d_revalidate fs/namei.c:865 [inline] lookup_fast+0x239/0x540 fs/namei.c:1679 walk_component+0x5b/0x5b0 fs/namei.c:2035 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2404 link_path_walk fs/namei.c:2336 [inline] path_openat+0x238/0x2d20 fs/namei.c:3882 do_filp_open+0x1dc/0x430 fs/namei.c:3913 do_sys_openat2+0x17a/0x1e0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f92cf936b91 RSP: 002b:00007ffe6ae97d30 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000000000000015b RCX: 00007f92cf936b91 RDX: 0000000000090800 RSI: 00007f92cf9a4de5 RDI: 00000000ffffff9c RBP: 00007ffe6ae97dcc R08: 000000000001fb0c R09: 00007f92d05fe080 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 00000000000a6cac R14: 00000000000a6cac R15: 00007ffe6ae97e20 INFO: task syz.2.1441:10374 blocked for more than 149 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.1441 state:D stack:27872 pid:10374 tgid:10374 ppid:6294 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580 kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 sysfs_remove_file include/linux/sysfs.h:773 [inline] driver_remove_file drivers/base/driver.c:198 [inline] driver_remove_file+0x4a/0x60 drivers/base/driver.c:194 remove_bind_files drivers/base/bus.c:600 [inline] bus_remove_driver+0x224/0x2c0 drivers/base/bus.c:738 driver_unregister+0x76/0xb0 drivers/base/driver.c:274 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1733 raw_release+0x1a9/0x2f0 drivers/usb/gadget/legacy/raw_gadget.c:462 __fput+0x408/0xbb0 fs/file_table.c:422 task_work_run+0x14e/0x250 kernel/task_work.c:222 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0xaa3/0x2b30 kernel/exit.c:882 do_group_exit+0xd3/0x2a0 kernel/exit.c:1031 get_signal+0x25fd/0x2770 kernel/signal.c:2917 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x147/0x260 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f937f4a7299 RSP: 002b:00007ffe9d8c0e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffdfc RBX: 00000000000a7318 RCX: 00007f937f4a7299 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f937f635f8c RBP: 00007f937f635f8c R08: 00007f937f635f80 R09: 00007ffe9d8c113f R10: 00007ffe9d8c0f50 R11: 0000000000000246 R12: 0000000000000bea R13: 00007ffe9d8c0f50 R14: 00007ffe9d8c0f70 R15: 00000000000a672e Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task syz.0.1443:10379 blocked for more than 149 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.1443 state:D stack:27872 pid:10379 tgid:10379 ppid:2654 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580 kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 sysfs_remove_file include/linux/sysfs.h:773 [inline] driver_remove_file drivers/base/driver.c:198 [inline] driver_remove_file+0x4a/0x60 drivers/base/driver.c:194 remove_bind_files drivers/base/bus.c:600 [inline] bus_remove_driver+0x224/0x2c0 drivers/base/bus.c:738 driver_unregister+0x76/0xb0 drivers/base/driver.c:274 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1733 raw_release+0x1a9/0x2f0 drivers/usb/gadget/legacy/raw_gadget.c:462 __fput+0x408/0xbb0 fs/file_table.c:422 task_work_run+0x14e/0x250 kernel/task_work.c:222 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0xaa3/0x2b30 kernel/exit.c:882 do_group_exit+0xd3/0x2a0 kernel/exit.c:1031 get_signal+0x25fd/0x2770 kernel/signal.c:2917 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x147/0x260 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3386187299 RSP: 002b:00007ffe39970f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffdfc RBX: 00000000000a7766 RCX: 00007f3386187299 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3386315f8c RBP: 00007f3386315f8c R08: 00007f3386315f80 R09: 00007ffe3997120f R10: 00007ffe39971020 R11: 0000000000000246 R12: 0000000000000bea R13: 00007ffe39971020 R14: 00007ffe39971040 R15: 00000000000a6b7c Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task syz.1.1445:10387 blocked for more than 150 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.1445 state:D stack:27712 pid:10387 tgid:10387 ppid:7774 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580 kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 sysfs_remove_file include/linux/sysfs.h:773 [inline] driver_remove_file drivers/base/driver.c:198 [inline] driver_remove_file+0x4a/0x60 drivers/base/driver.c:194 remove_bind_files drivers/base/bus.c:600 [inline] bus_remove_driver+0x224/0x2c0 drivers/base/bus.c:738 driver_unregister+0x76/0xb0 drivers/base/driver.c:274 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1733 raw_release+0x1a9/0x2f0 drivers/usb/gadget/legacy/raw_gadget.c:462 __fput+0x408/0xbb0 fs/file_table.c:422 task_work_run+0x14e/0x250 kernel/task_work.c:222 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0xaa3/0x2b30 kernel/exit.c:882 do_group_exit+0xd3/0x2a0 kernel/exit.c:1031 get_signal+0x25fd/0x2770 kernel/signal.c:2917 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x147/0x260 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f92cf937299 RSP: 002b:00007ffe6ae97b78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffdfc RBX: 00000000000a78af RCX: 00007f92cf937299 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f92cfac5f8c RBP: 00007f92cfac5f8c R08: 00007f92cfac5f80 R09: 00007ffe6ae97e5f R10: 00007ffe6ae97c70 R11: 0000000000000246 R12: 0000000000000bea R13: 00007ffe6ae97c70 R14: 00007ffe6ae97c90 R15: 00000000000a6cc5 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task syz.4.1446:10390 blocked for more than 151 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.1446 state:D stack:27536 pid:10390 tgid:10389 ppid:2651 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580 kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 sysfs_remove_file include/linux/sysfs.h:773 [inline] driver_remove_file drivers/base/driver.c:198 [inline] driver_remove_file+0x4a/0x60 drivers/base/driver.c:194 remove_bind_files drivers/base/bus.c:600 [inline] bus_remove_driver+0x224/0x2c0 drivers/base/bus.c:738 driver_unregister+0x76/0xb0 drivers/base/driver.c:274 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1733 raw_release+0x1a9/0x2f0 drivers/usb/gadget/legacy/raw_gadget.c:462 __fput+0x408/0xbb0 fs/file_table.c:422 task_work_run+0x14e/0x250 kernel/task_work.c:222 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0xaa3/0x2b30 kernel/exit.c:882 do_group_exit+0xd3/0x2a0 kernel/exit.c:1031 get_signal+0x25fd/0x2770 kernel/signal.c:2917 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x147/0x260 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fce6cf06e9b RSP: 002b:00007fce6bb84f20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000004 RCX: 00007fce6cf06e9b RDX: 00007fce6bb85ff0 RSI: 0000000080085502 RDI: 0000000000000004 RBP: 00007fce6bb85ff0 R08: 0000000000000010 R09: 00342e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000020000040 R15: 00007fce6cf7dee8 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task syz.3.1447:10392 blocked for more than 152 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.1447 state:D stack:29536 pid:10392 tgid:10391 ppid:2650 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580 kernfs_add_one+0xb1/0x520 fs/kernfs/dir.c:778 kernfs_create_dir_ns+0xf4/0x150 fs/kernfs/dir.c:1071 sysfs_create_dir_ns+0x13b/0x2b0 fs/sysfs/dir.c:59 create_dir lib/kobject.c:73 [inline] kobject_add_internal+0x2c8/0x990 lib/kobject.c:240 kobject_add_varg lib/kobject.c:374 [inline] kobject_init_and_add+0x11c/0x190 lib/kobject.c:457 bus_add_driver+0x186/0x690 drivers/base/bus.c:666 driver_register+0x15c/0x4b0 drivers/base/driver.c:246 usb_gadget_register_driver_owner+0xfd/0x2f0 drivers/usb/gadget/udc/core.c:1701 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:595 [inline] raw_ioctl+0x1737/0x2b90 drivers/usb/gadget/legacy/raw_gadget.c:1306 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __x64_sys_ioctl+0x193/0x220 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4f68076e9b RSP: 002b:00007f4f66cf4f20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4f68076e9b RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 RBP: 00007f4f66cf5ff0 R08: 0000000000000010 R09: 00332e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f4f66cf4fc0 R14: 0000000020000200 R15: 00007f4f68330320 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task syz.3.1447:10393 blocked for more than 152 seconds. Not tainted 6.10.0-syzkaller-g933069701c1b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.1447 state:D stack:28704 pid:10393 tgid:10391 ppid:2650 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580 kernfs_add_one+0xb1/0x520 fs/kernfs/dir.c:778 kernfs_create_dir_ns+0xf4/0x150 fs/kernfs/dir.c:1071 sysfs_create_dir_ns+0x13b/0x2b0 fs/sysfs/dir.c:59 create_dir lib/kobject.c:73 [inline] kobject_add_internal+0x2c8/0x990 lib/kobject.c:240 kobject_add_varg lib/kobject.c:374 [inline] kobject_init_and_add+0x11c/0x190 lib/kobject.c:457 bus_add_driver+0x186/0x690 drivers/base/bus.c:666 driver_register+0x15c/0x4b0 drivers/base/driver.c:246 usb_gadget_register_driver_owner+0xfd/0x2f0 drivers/usb/gadget/udc/core.c:1701 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:595 [inline] raw_ioctl+0x1737/0x2b90 drivers/usb/gadget/legacy/raw_gadget.c:1306 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __x64_sys_ioctl+0x193/0x220 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4f68076e9b RSP: 002b:00007f4f66cd3f20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f68076e9b RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 RBP: 00007f4f66cd4ff0 R08: 0000000000000010 R09: 00332e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f4f66cd3fc0 R14: 00000000200000c0 R15: 00007f4f68330b88 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings