INFO: task kworker/1:1:36 blocked for more than 143 seconds. Not tainted 6.12.0-rc4-syzkaller-00059-gc67e9601e29a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:1 state:D stack:21792 pid:36 tgid:36 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x105f/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1176 __down_write_common kernel/locking/rwsem.c:1304 [inline] __down_write kernel/locking/rwsem.c:1313 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1578 kernfs_add_one+0xb1/0x520 fs/kernfs/dir.c:778 kernfs_create_dir_ns+0xf4/0x150 fs/kernfs/dir.c:1071 sysfs_create_dir_ns+0x13b/0x2b0 fs/sysfs/dir.c:59 create_dir lib/kobject.c:73 [inline] kobject_add_internal+0x2c8/0x990 lib/kobject.c:240 kobject_add_varg lib/kobject.c:374 [inline] kobject_add+0x16f/0x240 lib/kobject.c:426 device_add+0x289/0x1a70 drivers/base/core.c:3613 usb_create_ep_devs+0x160/0x2b0 drivers/usb/core/endpoint.c:170 create_intf_ep_devs.isra.0+0x161/0x200 drivers/usb/core/message.c:1252 usb_set_configuration+0x10ed/0x1c50 drivers/usb/core/message.c:2216 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294 call_driver_probe drivers/base/dd.c:579 [inline] really_probe+0x23e/0xa90 drivers/base/dd.c:658 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:459 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:534 device_add+0x114b/0x1a70 drivers/base/core.c:3675 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2e58/0x4f40 drivers/usb/core/hub.c:5903 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task udevd:2862 blocked for more than 144 seconds. Not tainted 6.12.0-rc4-syzkaller-00059-gc67e9601e29a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:23808 pid:2862 tgid:2862 ppid:1 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x105f/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1526 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:868 [inline] d_revalidate fs/namei.c:865 [inline] lookup_fast+0x239/0x540 fs/namei.c:1693 walk_component+0x5b/0x5b0 fs/namei.c:2049 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2418 link_path_walk fs/namei.c:2350 [inline] path_openat+0x228/0x2d60 fs/namei.c:3929 do_filp_open+0x1dc/0x430 fs/namei.c:3960 do_sys_openat2+0x17a/0x1e0 fs/open.c:1415 do_sys_open fs/open.c:1430 [inline] __do_sys_openat fs/open.c:1446 [inline] __se_sys_openat fs/open.c:1441 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1441 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4bb60bc9a4 RSP: 002b:00007ffc3f047180 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4bb60bc9a4 RDX: 0000000000080000 RSI: 00007ffc3f0472b8 RDI: 00000000ffffff9c RBP: 00007ffc3f0472b8 R08: 0000000000000008 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 R13: 0000555678500b42 R14: 0000000000000001 R15: 0000000000000000 INFO: task syz-executor:6583 blocked for more than 144 seconds. Not tainted 6.12.0-rc4-syzkaller-00059-gc67e9601e29a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24064 pid:6583 tgid:6583 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x105f/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1526 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:868 [inline] d_revalidate fs/namei.c:865 [inline] lookup_fast+0x239/0x540 fs/namei.c:1693 walk_component+0x5b/0x5b0 fs/namei.c:2049 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2418 link_path_walk fs/namei.c:2350 [inline] path_openat+0x228/0x2d60 fs/namei.c:3929 do_filp_open+0x1dc/0x430 fs/namei.c:3960 do_sys_openat2+0x17a/0x1e0 fs/open.c:1415 do_sys_open fs/open.c:1430 [inline] __do_sys_openat fs/open.c:1446 [inline] __se_sys_openat fs/open.c:1441 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1441 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f74c789e011 RSP: 002b:00007ffd670f2c10 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000607 RCX: 00007f74c789e011 RDX: 0000000000090800 RSI: 00007f74c791164e RDI: 00000000ffffff9c RBP: 00007ffd670f2cac R08: 0000000000041a04 R09: 00007f74c771a080 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 000000000017314e R14: 0000000000172529 R15: 00007ffd670f2d00 INFO: task syz-executor:6587 blocked for more than 144 seconds. Not tainted 6.12.0-rc4-syzkaller-00059-gc67e9601e29a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23872 pid:6587 tgid:6587 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x105f/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1526 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:868 [inline] d_revalidate fs/namei.c:865 [inline] lookup_fast+0x239/0x540 fs/namei.c:1693 walk_component+0x5b/0x5b0 fs/namei.c:2049 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2418 link_path_walk fs/namei.c:2350 [inline] path_openat+0x228/0x2d60 fs/namei.c:3929 do_filp_open+0x1dc/0x430 fs/namei.c:3960 do_sys_openat2+0x17a/0x1e0 fs/open.c:1415 do_sys_open fs/open.c:1430 [inline] __do_sys_openat fs/open.c:1446 [inline] __se_sys_openat fs/open.c:1441 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1441 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb3fecae011 RSP: 002b:00007ffe835fe520 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00000000000005f4 RCX: 00007fb3fecae011 RDX: 0000000000090800 RSI: 00007fb3fed2164e RDI: 00000000ffffff9c RBP: 00007ffe835fe5bc R08: 0000000000041a16 R09: 00007fb3ff9a2080 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000172a20 R14: 0000000000172a20 R15: 00007ffe835fe610 INFO: task syz-executor:6589 blocked for more than 145 seconds. Not tainted 6.12.0-rc4-syzkaller-00059-gc67e9601e29a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23232 pid:6589 tgid:6589 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x105f/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1526 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:868 [inline] d_revalidate fs/namei.c:865 [inline] lookup_fast+0x239/0x540 fs/namei.c:1693 walk_component+0x5b/0x5b0 fs/namei.c:2049 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2418 link_path_walk fs/namei.c:2350 [inline] path_openat+0x228/0x2d60 fs/namei.c:3929 do_filp_open+0x1dc/0x430 fs/namei.c:3960 do_sys_openat2+0x17a/0x1e0 fs/open.c:1415 do_sys_open fs/open.c:1430 [inline] __do_sys_openat fs/open.c:1446 [inline] __se_sys_openat fs/open.c:1441 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1441 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f07a702e011 RSP: 002b:00007fff7f53e320 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000000000000064d RCX: 00007f07a702e011 RDX: 0000000000090800 RSI: 00007f07a70a164e RDI: 00000000ffffff9c RBP: 00007fff7f53e3bc R08: 0000000000041acc R09: 00007f07a7d22080 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000173243 R14: 0000000000173243 R15: 00007fff7f53e410 INFO: task syz-executor:6591 blocked for more than 145 seconds. Not tainted 6.12.0-rc4-syzkaller-00059-gc67e9601e29a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23808 pid:6591 tgid:6591 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x105f/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1526 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:868 [inline] d_revalidate fs/namei.c:865 [inline] lookup_fast+0x239/0x540 fs/namei.c:1693 walk_component+0x5b/0x5b0 fs/namei.c:2049 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2418 link_path_walk fs/namei.c:2350 [inline] path_openat+0x228/0x2d60 fs/namei.c:3929 do_filp_open+0x1dc/0x430 fs/namei.c:3960 do_sys_openat2+0x17a/0x1e0 fs/open.c:1415 do_sys_open fs/open.c:1430 [inline] __do_sys_openat fs/open.c:1446 [inline] __se_sys_openat fs/open.c:1441 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1441 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7c94cee011 RSP: 002b:00007ffc8d8eeb10 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00000000000005da RCX: 00007f7c94cee011 RDX: 0000000000090800 RSI: 00007f7c94d6164e RDI: 00000000ffffff9c RBP: 00007ffc8d8eebac R08: 0000000000041a48 R09: 00007f7c959e5080 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 000000000017334f R14: 0000000000172c2f R15: 00007ffc8d8eec00 INFO: task syz-executor:6595 blocked for more than 146 seconds. Not tainted 6.12.0-rc4-syzkaller-00059-gc67e9601e29a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24064 pid:6595 tgid:6595 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x105f/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1526 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:868 [inline] d_revalidate fs/namei.c:865 [inline] lookup_fast+0x239/0x540 fs/namei.c:1693 walk_component+0x5b/0x5b0 fs/namei.c:2049 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2418 link_path_walk fs/namei.c:2350 [inline] path_openat+0x228/0x2d60 fs/namei.c:3929 do_filp_open+0x1dc/0x430 fs/namei.c:3960 do_sys_openat2+0x17a/0x1e0 fs/open.c:1415 do_sys_open fs/open.c:1430 [inline] __do_sys_openat fs/open.c:1446 [inline] __se_sys_openat fs/open.c:1441 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1441 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd73d93e011 RSP: 002b:00007ffd4bd491c0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000611 RCX: 00007fd73d93e011 RDX: 0000000000090800 RSI: 00007fd73d9b164e RDI: 00000000ffffff9c RBP: 00007ffd4bd4925c R08: 0000000000041a30 R09: 00007fd73d7ba080 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000172afa R14: 0000000000172afa R15: 00007ffd4bd492b0 INFO: task kworker/1:7:14632 blocked for more than 146 seconds. Not tainted 6.12.0-rc4-syzkaller-00059-gc67e9601e29a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:7 state:D stack:22320 pid:14632 tgid:14632 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x105f/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1176 __down_write_common kernel/locking/rwsem.c:1304 [inline] __down_write kernel/locking/rwsem.c:1313 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1578 kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 device_remove_sys_dev_entry drivers/base/core.c:3514 [inline] device_del+0x7f9/0x9f0 drivers/base/core.c:3844 usb_disconnect+0x58b/0x920 drivers/usb/core/hub.c:2332 hub_port_connect drivers/usb/core/hub.c:5361 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x1bed/0x4f40 drivers/usb/core/hub.c:5903 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz.5.3072:18476 blocked for more than 146 seconds. Not tainted 6.12.0-rc4-syzkaller-00059-gc67e9601e29a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.3072 state:D stack:28496 pid:18476 tgid:18475 ppid:6583 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x105f/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1176 __down_write_common kernel/locking/rwsem.c:1304 [inline] __down_write kernel/locking/rwsem.c:1313 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1578 kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 sysfs_remove_file include/linux/sysfs.h:773 [inline] driver_remove_file drivers/base/driver.c:198 [inline] driver_remove_file+0x4a/0x60 drivers/base/driver.c:194 remove_bind_files drivers/base/bus.c:602 [inline] bus_remove_driver+0x224/0x2c0 drivers/base/bus.c:740 driver_unregister+0x76/0xb0 drivers/base/driver.c:274 usb_gadget_register_driver_owner+0x20f/0x330 drivers/usb/gadget/udc/core.c:1722 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:595 [inline] raw_ioctl+0x1731/0x2b90 drivers/usb/gadget/legacy/raw_gadget.c:1306 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __x64_sys_ioctl+0x18f/0x220 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f74c789e31b RSP: 002b:00007f74c650ef10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f74c789e31b RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 RBP: 00007f74c650ffe0 R08: 0000000000000000 R09: 00352e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f74c650efb0 R14: 00000000200003c0 R15: 00007f74c7b813f0 INFO: task syz.6.3074:18480 blocked for more than 147 seconds. Not tainted 6.12.0-rc4-syzkaller-00059-gc67e9601e29a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.6.3074 state:D stack:27600 pid:18480 tgid:18480 ppid:6587 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x105f/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1176 __down_write_common kernel/locking/rwsem.c:1304 [inline] __down_write kernel/locking/rwsem.c:1313 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1578 kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 sysfs_remove_file include/linux/sysfs.h:773 [inline] driver_remove_file drivers/base/driver.c:198 [inline] driver_remove_file+0x4a/0x60 drivers/base/driver.c:194 remove_bind_files drivers/base/bus.c:602 [inline] bus_remove_driver+0x224/0x2c0 drivers/base/bus.c:740 driver_unregister+0x76/0xb0 drivers/base/driver.c:274 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1732 raw_release+0x1ae/0x2b0 drivers/usb/gadget/legacy/raw_gadget.c:462 __fput+0x3f6/0xb60 fs/file_table.c:431 task_work_run+0x14e/0x250 kernel/task_work.c:239 exit_task_work include/linux/task_work.h:43 [inline] do_exit+0xadd/0x2ce0 kernel/exit.c:939 do_group_exit+0xd3/0x2a0 kernel/exit.c:1088 get_signal+0x25fb/0x2770 kernel/signal.c:2917 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x147/0x260 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb3fecae719 RSP: 002b:00007ffe835fe358 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffdfc RBX: 00007ffe835fe480 RCX: 00007fb3fecae719 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb3fee65f8c RBP: 00007fb3fee65f8c R08: 00007fb3ff9a2080 R09: 00007ffe835fe64f R10: 00007ffe835fe460 R11: 0000000000000246 R12: 0000000000173618 R13: 00007ffe835fe460 R14: 0000000000000bea R15: 0000000000172a2e Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task syz.9.3075:18483 blocked for more than 147 seconds. Not tainted 6.12.0-rc4-syzkaller-00059-gc67e9601e29a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.9.3075 state:D stack:27552 pid:18483 tgid:18482 ppid:6595 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x105f/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1176 __down_write_common kernel/locking/rwsem.c:1304 [inline] __down_write kernel/locking/rwsem.c:1313 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1578 kernfs_remove_by_name_ns+0x87/0x130 fs/kernfs/dir.c:1689 sysfs_remove_file include/linux/sysfs.h:773 [inline] driver_remove_file drivers/base/driver.c:198 [inline] driver_remove_file+0x4a/0x60 drivers/base/driver.c:194 remove_bind_files drivers/base/bus.c:602 [inline] bus_remove_driver+0x224/0x2c0 drivers/base/bus.c:740 driver_unregister+0x76/0xb0 drivers/base/driver.c:274 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1732 raw_release+0x1ae/0x2b0 drivers/usb/gadget/legacy/raw_gadget.c:462 __fput+0x3f6/0xb60 fs/file_table.c:431 task_work_run+0x14e/0x250 kernel/task_work.c:239 exit_task_work include/linux/task_work.h:43 [inline] do_exit+0xadd/0x2ce0 kernel/exit.c:939 do_group_exit+0xd3/0x2a0 kernel/exit.c:1088 get_signal+0x25fb/0x2770 kernel/signal.c:2917 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x147/0x260 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd73d93e31b RSP: 002b:00007fd73c5aef10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fd73d93e31b RDX: 00007fd73c5affe0 RSI: 0000000080085502 RDI: 0000000000000003 RBP: 00007fd73c5affe0 R08: 0000000000000000 R09: 00392e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000020000080 R15: 00007fd73d9bb30b Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task syz.8.3076:18486 blocked for more than 148 seconds. Not tainted 6.12.0-rc4-syzkaller-00059-gc67e9601e29a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.8.3076 state:D stack:28688 pid:18486 tgid:18484 ppid:6591 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x105f/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1176 __down_write_common kernel/locking/rwsem.c:1304 [inline] __down_write kernel/locking/rwsem.c:1313 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1578 kernfs_add_one+0xb1/0x520 fs/kernfs/dir.c:778 kernfs_create_dir_ns+0xf4/0x150 fs/kernfs/dir.c:1071 sysfs_create_dir_ns+0x13b/0x2b0 fs/sysfs/dir.c:59 create_dir lib/kobject.c:73 [inline] kobject_add_internal+0x2c8/0x990 lib/kobject.c:240 kobject_add_varg lib/kobject.c:374 [inline] kobject_init_and_add+0x11c/0x190 lib/kobject.c:457 bus_add_driver+0x186/0x690 drivers/base/bus.c:668 driver_register+0x15c/0x4b0 drivers/base/driver.c:246 usb_gadget_register_driver_owner+0x132/0x330 drivers/usb/gadget/udc/core.c:1700 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:595 [inline] raw_ioctl+0x1731/0x2b90 drivers/usb/gadget/legacy/raw_gadget.c:1306 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __x64_sys_ioctl+0x18f/0x220 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7c94cee31b RSP: 002b:00007f7c93943f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f7c94cee31b RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 RBP: 00007f7c93944fe0 R08: 0000000000000000 R09: 00382e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f7c93943fb0 R14: 0000000020000400 R15: 00007f7c94fd0b88 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task modprobe:18487 blocked for more than 148 seconds. Not tainted 6.12.0-rc4-syzkaller-00059-gc67e9601e29a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:modprobe state:D stack:25424 pid:18487 tgid:18487 ppid:1630 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x105f/0x34b0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1526 kernfs_dop_revalidate+0xf0/0x5a0 fs/kernfs/dir.c:1159 d_revalidate fs/namei.c:868 [inline] d_revalidate fs/namei.c:865 [inline] lookup_fast+0x239/0x540 fs/namei.c:1693 walk_component+0x5b/0x5b0 fs/namei.c:2049 link_path_walk.part.0.constprop.0+0x669/0xd40 fs/namei.c:2418 link_path_walk fs/namei.c:2349 [inline] path_lookupat+0x93/0x770 fs/namei.c:2579 filename_lookup+0x1e5/0x5b0 fs/namei.c:2609 user_path_at+0x3a/0x60 fs/namei.c:3016 user_statfs+0xa0/0x180 fs/statfs.c:103 __do_sys_statfs+0x8a/0x100 fs/statfs.c:195 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe6188d768a RSP: 002b:00007ffde05dac88 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 RAX: ffffffffffffffda RBX: 00007fe6187fc4f8 RCX: 00007fe6188d768a RDX: 00007fe6187fe19c RSI: 00007ffde05dad00 RDI: 00007fe6187f4723 RBP: 00007fe6187f4723 R08: 0000000000000000 R09: 000000000000000d R10: 00007ffde05daab0 R11: 0000000000000246 R12: 00007ffde05dad00 R13: 00007ffde05dae78 R14: 00007ffde05daea0 R15: 0000000000000000 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings Showing all locks held in the system: 2 locks held by kworker/0:0/8: 6 locks held by kworker/0:1/9: 1 lock held by khungtaskd/30: #0: ffffffff88ebb140 (rcu_read_lock){....}-{1:2} , at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] , at: rcu_read_lock include/linux/rcupdate.h:849 [inline] , at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6720 5 locks held by kworker/1:1/36: #0: ffff888106ac6d48 ( (wq_completion)usb_hub_wq){+.+.}-{0:0} , at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204 #1: ffffc90000267d80 ((work_completion)(&hub->events) ){+.+.}-{0:0} , at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffff88810b330190 ( &dev->mutex ){....}-{3:3} , at: device_lock include/linux/device.h:1014 [inline] , at: hub_event+0x1be/0x4f40 drivers/usb/core/hub.c:5849 #3: ffff88812599a190 (&dev->mutex ){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] ){....}-{3:3}, at: __device_attach+0x7f/0x4b0 drivers/base/dd.c:1005 #4: ffffffff8a454748 (uevent_sock_mutex){+.+.}-{3:3} , at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] , at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] , at: kobject_uevent_env+0xb21/0x1860 lib/kobject_uevent.c:608 3 locks held by kworker/u8:7/1630: #0: ffff888100abb148 ((wq_completion)netns ){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204 #1: ffffc9000284fd80 ( net_cleanup_work ){+.+.}-{0:0} , at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffffffff8a18cb90 (pernet_ops_rwsem){++++}-{3:3} , at: cleanup_net+0xbb/0xb40 net/core/net_namespace.c:580 2 locks held by getty/2920: #0: ffff888111fec0a0 (&tty->ldisc_sem ){++++}-{0:0} , at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900000432f0 ( &ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211 6 locks held by kworker/1:5/5452: 1 lock held by syz-executor/6587: #0: ffffffff88ec6a38 ( rcu_state.exp_mutex){+.+.}-{3:3} , at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:329 4 locks held by udevd/8851: #0: ffff888139da8540 (&p->lock ){+.+.}-{3:3} , at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182 #1: ffff888123ad6c88 ( &of->mutex#2){+.+.}-{3:3} , at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154 #2: ffff8881126bf3c8 (kn->active#19){++++}-{0:0} , at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155 #3: ffff88811b841190 (&dev->mutex ){....}-{3:3} , at: device_lock_interruptible include/linux/device.h:1019 [inline] , at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 4 locks held by udevd/9918: #0: ffff88811d983d58 (&p->lock ){+.+.}-{3:3} , at: seq_read_iter+0xd8/0x12b0 fs/seq_file.c:182 #1: ffff88811d506488 (&of->mutex #2 ){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 fs/kernfs/file.c:154 #2: ffff88811d985008 (kn->active#19 ){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 fs/kernfs/file.c:155 #3: ffff88812599d190 ( &dev->mutex ){....}-{3:3} , at: device_lock_interruptible include/linux/device.h:1019 [inline] , at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 2 locks held by kworker/1:8/9958: #0: ffff888100080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204 #1: ffffc9000f967d80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 5 locks held by kworker/1:7/14632: 5 locks held by kworker/1:10/16258: 2 locks held by kworker/0:9/17171: 2 locks held by syz.6.3074/18480: #0: ffff88810ab40d78 (&dev->mutex){....}-{3:3} , at: device_lock include/linux/device.h:1014 [inline] , at: __device_driver_lock drivers/base/dd.c:1095 [inline] , at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1293 #1: ffffffff8a454748 (uevent_sock_mutex ){+.+.}-{3:3} , at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] , at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] , at: kobject_uevent_env+0xb21/0x1860 lib/kobject_uevent.c:608 2 locks held by syz.9.3075/18483: #0: ffff88810ab4cd78 (&dev->mutex){....}-{3:3} , at: device_lock include/linux/device.h:1014 [inline] , at: __device_driver_lock drivers/base/dd.c:1095 [inline] , at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1293 #1: ffffffff8a454748 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] #1: ffffffff8a454748 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] #1: ffffffff8a454748 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_env+0xb21/0x1860 lib/kobject_uevent.c:608 1 lock held by syz.8.3076/18486: #0: ffffffff8a454748 (uevent_sock_mutex ){+.+.}-{3:3} , at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] , at: kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline] , at: kobject_uevent_env+0xb21/0x1860 lib/kobject_uevent.c:608 2 locks held by syz.7.3077/18489: #0: ffff88810ab44d78 (&dev->mutex){....}-{3:3} , at: device_lock include/linux/device.h:1014 [inline] , at: __device_driver_lock drivers/base/dd.c:1095 [inline] , at: __driver_attach+0x278/0x580 drivers/base/dd.c:1215 #1: ffffffff8a454748 (uevent_sock_mutex