INFO: task udevd:4548 blocked for more than 143 seconds.
Not tainted 6.9.0-rc6-next-20240501-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd state:D stack:23504 pid:4548 tgid:4548 ppid:1 flags:0x00000002
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline]
__down_read_common kernel/locking/rwsem.c:1250 [inline]
__down_read kernel/locking/rwsem.c:1263 [inline]
down_read+0x705/0xa40 kernel/locking/rwsem.c:1528
kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159
lookup_fast+0x1f4/0x4a0
walk_component fs/namei.c:2000 [inline]
link_path_walk+0x60b/0xea0 fs/namei.c:2331
path_lookupat+0xa9/0x450 fs/namei.c:2492
filename_lookup+0x256/0x610 fs/namei.c:2522
user_path_at_empty+0x42/0x60 fs/namei.c:2929
do_readlinkat+0x118/0x3b0 fs/stat.c:499
__do_sys_readlink fs/stat.c:532 [inline]
__se_sys_readlink fs/stat.c:529 [inline]
__x64_sys_readlink+0x7f/0x90 fs/stat.c:529
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4ff4b17d47
RSP: 002b:00007ffd657fe758 EFLAGS: 00000246 ORIG_RAX: 0000000000000059
RAX: ffffffffffffffda RBX: 00007ffd657fe768 RCX: 00007f4ff4b17d47
RDX: 0000000000000400 RSI: 00007ffd657fe768 RDI: 00007ffd657fec48
RBP: 0000000000000400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd657fec48
R13: 00007ffd657febb8 R14: 0000556a1aeb8910 R15: 0000000000000000
INFO: task syz-executor.3:5105 blocked for more than 144 seconds.
Not tainted 6.9.0-rc6-next-20240501-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D
stack:19064 pid:5105 tgid:5105 ppid:1 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline]
__down_read_common kernel/locking/rwsem.c:1250 [inline]
__down_read kernel/locking/rwsem.c:1263 [inline]
down_read+0x705/0xa40 kernel/locking/rwsem.c:1528
kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159
lookup_fast+0x1f4/0x4a0
walk_component fs/namei.c:2000 [inline]
link_path_walk+0x60b/0xea0 fs/namei.c:2331
path_openat+0x24a/0x3280 fs/namei.c:3803
do_filp_open+0x235/0x490 fs/namei.c:3834
do_sys_openat2+0x13e/0x1d0 fs/open.c:1405
do_sys_open fs/open.c:1420 [inline]
__do_sys_openat fs/open.c:1436 [inline]
__se_sys_openat fs/open.c:1431 [inline]
__x64_sys_openat+0x247/0x2a0 fs/open.c:1431
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f707947d901
RSP: 002b:00007ffe50de9dc0 EFLAGS: 00000287
ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000021 RCX: 00007f707947d901
RDX: 0000000000090800 RSI: 00007f70794c945d RDI: 00000000ffffff9c
RBP: 00007ffe50de9e8c R08: 0000000000000000 R09: 7fffffffffffffff
R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000
R13: 0000000000015380 R14: 0000000000015036 R15: 0000000000000003
INFO: task syz-executor.1:5111 blocked for more than 144 seconds.
Not tainted 6.9.0-rc6-next-20240501-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D
stack:20248 pid:5111 tgid:5111 ppid:1 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline]
__down_read_common kernel/locking/rwsem.c:1250 [inline]
__down_read kernel/locking/rwsem.c:1263 [inline]
down_read+0x705/0xa40 kernel/locking/rwsem.c:1528
kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159
lookup_fast+0x1f4/0x4a0
walk_component fs/namei.c:2000 [inline]
link_path_walk+0x60b/0xea0 fs/namei.c:2331
path_openat+0x24a/0x3280 fs/namei.c:3803
do_filp_open+0x235/0x490 fs/namei.c:3834
do_sys_openat2+0x13e/0x1d0 fs/open.c:1405
do_sys_open fs/open.c:1420 [inline]
__do_sys_openat fs/open.c:1436 [inline]
__se_sys_openat fs/open.c:1431 [inline]
__x64_sys_openat+0x247/0x2a0 fs/open.c:1431
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcfe507d901
RSP: 002b:00007ffc9b6fae40 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000022 RCX: 00007fcfe507d901
RDX: 0000000000090800 RSI: 00007fcfe50c945d RDI: 00000000ffffff9c
RBP: 00007ffc9b6faf0c R08: 0000000000000000 R09: 7fffffffffffffff
R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000
R13: 0000000000014ba2 R14: 0000000000014ba2 R15: 0000000000000000
INFO: task syz-executor.4:5115 blocked for more than 145 seconds.
Not tainted 6.9.0-rc6-next-20240501-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4 state:D stack:18672 pid:5115 tgid:5115 ppid:1 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline]
__down_read_common kernel/locking/rwsem.c:1250 [inline]
__down_read kernel/locking/rwsem.c:1263 [inline]
down_read+0x705/0xa40 kernel/locking/rwsem.c:1528
kernfs_find_and_get_ns+0x71/0x110 fs/kernfs/dir.c:918
kernfs_find_and_get include/linux/kernfs.h:604 [inline]
sysfs_remove_group+0x6a/0x2c0 fs/sysfs/group.c:308
loop_sysfs_exit drivers/block/loop.c:749 [inline]
__loop_clr_fd+0x398/0x810 drivers/block/loop.c:1161
loop_clr_fd drivers/block/loop.c:1253 [inline]
lo_ioctl+0x174a/0x21a0 drivers/block/loop.c:1555
blkdev_ioctl+0x580/0x6b0 block/ioctl.c:640
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:907 [inline]
__se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f665227dc0b
RSP: 002b:00007ffd049bc1e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f665227dc0b
RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003
RBP: 00007ffd049bc29c R08: 0000000000000000 R09: 00007ffd049bbf87
R10: 0000000000000000 R11: 0000000000000246 R12: 000055557a1d895b
R13: 000055557a1d8900 R14: 00007f66522dd6e0 R15: 0000000000000000
INFO: task udevd:5257 blocked for more than 146 seconds.
Not tainted 6.9.0-rc6-next-20240501-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd state:D stack:24720 pid:5257 tgid:5257 ppid:4548 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
__bio_queue_enter+0x34b/0x690 block/blk-core.c:359
bio_queue_enter block/blk.h:72 [inline]
blk_mq_submit_bio+0xbfb/0x21d0 block/blk-mq.c:2962
__submit_bio+0x23e/0x2f0 block/blk-core.c:620
__submit_bio_noacct_mq block/blk-core.c:699 [inline]
submit_bio_noacct_nocheck+0xa7f/0xe10 block/blk-core.c:728
mpage_bio_submit_read fs/mpage.c:82 [inline]
mpage_readahead+0x7da/0x930 fs/mpage.c:384
read_pages+0x17e/0x840 mm/readahead.c:160
page_cache_ra_unbounded+0x6ce/0x7f0 mm/readahead.c:273
do_page_cache_ra mm/readahead.c:303 [inline]
force_page_cache_ra+0x2a7/0x310 mm/readahead.c:334
page_cache_sync_readahead include/linux/pagemap.h:1292 [inline]
filemap_get_pages+0x49d/0x2090 mm/filemap.c:2529
filemap_read+0x457/0xfa0 mm/filemap.c:2625
blkdev_read_iter+0x2df/0x440 block/fops.c:749
new_sync_read fs/read_write.c:395 [inline]
vfs_read+0x9c4/0xbd0 fs/read_write.c:476
ksys_read+0x1a0/0x2c0 fs/read_write.c:619
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4ff4b16b6a
RSP: 002b:00007ffd657fac18 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4ff4b16b6a
RDX: 0000000000000400 RSI: 0000556a1af4d358 RDI: 0000000000000009
RBP: 0000000000000400 R08: 0000556a1af4d330 R09: 0000000000000008
R10: 0000000000000051 R11: 0000000000000246 R12: 0000556a1af4d330
R13: 0000556a1af4d348 R14: 0000556a1aecab68 R15: 0000556a1aecab10
INFO: task syz-executor.2:5309 blocked for more than 147 seconds.
Not tainted 6.9.0-rc6-next-20240501-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2 state:D stack:25488 pid:5309 tgid:5308 ppid:5109 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline]
__down_read_common kernel/locking/rwsem.c:1250 [inline]
__down_read kernel/locking/rwsem.c:1263 [inline]
down_read+0x705/0xa40 kernel/locking/rwsem.c:1528
kernfs_find_and_get_ns+0x71/0x110 fs/kernfs/dir.c:918
kernfs_find_and_get include/linux/kernfs.h:604 [inline]
sysfs_remove_group+0x6a/0x2c0 fs/sysfs/group.c:308
loop_sysfs_exit drivers/block/loop.c:749 [inline]
__loop_clr_fd+0x398/0x810 drivers/block/loop.c:1161
loop_clr_fd drivers/block/loop.c:1253 [inline]
lo_ioctl+0x174a/0x21a0 drivers/block/loop.c:1555
blkdev_ioctl+0x580/0x6b0 block/ioctl.c:640
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:907 [inline]
__se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f716307dc0b
RSP: 002b:00007f7163ec1ea0 EFLAGS: 00000246
ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f716307dc0b
RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000002000402
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016
R13: 00007f7163ec1f40 R14: 00000000000001f8 R15: 0000000020002480
INFO: task syz-executor.0:5327 blocked for more than 148 seconds.
Not tainted 6.9.0-rc6-next-20240501-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:24632 pid:5327 tgid:5323 ppid:5103 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
rwsem_down_write_slowpath+0xeeb/0x13b0 kernel/locking/rwsem.c:1178
__down_write_common+0x1af/0x200 kernel/locking/rwsem.c:1306
kernfs_remove_by_name_ns+0x7a/0x160 fs/kernfs/dir.c:1689
kernfs_remove_by_name include/linux/kernfs.h:625 [inline]
sysfs_unmerge_group+0xd3/0x130 fs/sysfs/group.c:399
dpm_sysfs_remove+0x83/0xc0 drivers/base/power/sysfs.c:836
device_del+0x291/0x9b0 drivers/base/core.c:3876
device_unregister drivers/base/core.c:3942 [inline]
device_destroy+0xb7/0x190 drivers/base/core.c:4506
tty_unregister_device+0x6f/0x170 drivers/tty/tty_io.c:3321
gsm_unregister_devices drivers/tty/n_gsm.c:691 [inline]
gsm_cleanup_mux+0x497/0x940 drivers/tty/n_gsm.c:3097
gsmld_close+0x4a/0x120 drivers/tty/n_gsm.c:3604
tty_ldisc_kill+0xa3/0x1a0 drivers/tty/tty_ldisc.c:607
tty_ldisc_release+0x174/0x200 drivers/tty/tty_ldisc.c:775
tty_release_struct+0x2b/0xe0 drivers/tty/tty_io.c:1696
tty_release+0xd0c/0x12c0 drivers/tty/tty_io.c:1867
__fput+0x406/0x8b0 fs/file_table.c:422
task_work_run+0x24f/0x310 kernel/task_work.c:180
get_signal+0x15e6/0x1740 kernel/signal.c:2681
arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218
do_syscall_64+0x102/0x240 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcd6647dea9
RSP: 002b:00007fcd672ad0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: 0000000000000000 RBX: 00007fcd665abf80 RCX: 00007fcd6647dea9
RDX: 0000000020000040 RSI: 00000000404c4701 RDI: 0000000000000003
RBP: 00007fcd664ca4a4 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007fcd665abf80 R15: 00007ffc17d84568
INFO: task udevd:5336 blocked for more than 149 seconds.
Not tainted 6.9.0-rc6-next-20240501-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd state:D stack:25208 pid:5336 tgid:5336 ppid:4548 flags:0x00000002
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline]
__down_read_common kernel/locking/rwsem.c:1250 [inline]
__down_read kernel/locking/rwsem.c:1263 [inline]
down_read+0x705/0xa40 kernel/locking/rwsem.c:1528
kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159
lookup_fast+0x1f4/0x4a0
walk_component fs/namei.c:2000 [inline]
link_path_walk+0x60b/0xea0 fs/namei.c:2331
path_openat+0x24a/0x3280 fs/namei.c:3803
do_filp_open+0x235/0x490 fs/namei.c:3834
do_sys_openat2+0x13e/0x1d0 fs/open.c:1405
do_sys_open fs/open.c:1420 [inline]
__do_sys_openat fs/open.c:1436 [inline]
__se_sys_openat fs/open.c:1431 [inline]
__x64_sys_openat+0x247/0x2a0 fs/open.c:1431
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4ff4b169a4
RSP: 002b:00007ffd657fbb60 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4ff4b169a4
RDX: 0000000000080000 RSI: 00007ffd657fbc98 RDI: 00000000ffffff9c
RBP: 00007ffd657fbc98 R08: 0000000000000008 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000
R13: 0000556a0ee32b42 R14: 0000000000000001 R15: 0000556a1aeb8910
INFO: task syz-executor.1:5344 blocked for more than 150 seconds.
Not tainted 6.9.0-rc6-next-20240501-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:25048 pid:5344 tgid:5343 ppid:5111 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
rwsem_down_write_slowpath+0xeeb/0x13b0 kernel/locking/rwsem.c:1178
__down_write_common+0x1af/0x200 kernel/locking/rwsem.c:1306
kernfs_add_one+0x9a/0x8b0 fs/kernfs/dir.c:778
kernfs_create_dir_ns+0xd9/0x120 fs/kernfs/dir.c:1071
internal_create_group+0x4f5/0x11d0 fs/sysfs/group.c:167
loop_sysfs_init drivers/block/loop.c:742 [inline]
loop_configure+0xba3/0x1250 drivers/block/loop.c:1095
lo_ioctl+0x8f6/0x21a0
blkdev_ioctl+0x580/0x6b0 block/ioctl.c:640
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:907 [inline]
__se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcfe507dc0b
RSP: 002b:00007fcfe5e1ae50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fcfe507dc0b
RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000553e
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 00007fcfe5e1af80 R14: 00007fcfe5e1af40 R15: 00007fcfdae00000
INFO: task syz-executor.3:5352 blocked for more than 151 seconds.
Not tainted 6.9.0-rc6-next-20240501-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:27760 pid:5352 tgid:5351 ppid:5105 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
rwsem_down_write_slowpath+0xeeb/0x13b0 kernel/locking/rwsem.c:1178
__down_write_common+0x1af/0x200 kernel/locking/rwsem.c:1306
kernfs_remove_by_name_ns+0x7a/0x160 fs/kernfs/dir.c:1689
sysfs_slab_add+0x4d/0x290 mm/slub.c:6899
__kmem_cache_create+0x551/0x7d0 mm/slub.c:5864
create_cache mm/slab_common.c:230 [inline]
kmem_cache_create_usercopy+0x193/0x320 mm/slab_common.c:335
kmem_cache_create+0x13/0x20 mm/slab_common.c:390
create_pid_cachep kernel/pid_namespace.c:56 [inline]
create_pid_namespace kernel/pid_namespace.c:99 [inline]
copy_pid_ns+0x445/0x9d0 kernel/pid_namespace.c:153
create_new_namespaces+0x2c7/0x7b0 kernel/nsproxy.c:97
unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228
ksys_unshare+0x619/0xc10 kernel/fork.c:3323
__do_sys_unshare kernel/fork.c:3394 [inline]
__se_sys_unshare kernel/fork.c:3392 [inline]
__x64_sys_unshare+0x38/0x40 kernel/fork.c:3392
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f707947dea9
RSP: 002b:00007f707a2960c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f70795abf80 RCX: 00007f707947dea9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400
RBP: 00007f70794ca4a4 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f70795abf80 R15: 00007ffe50de9ac8
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
Showing all locks held in the system:
3 locks held by kworker/0:0/8:
1 lock held by khungtaskd/30:
#0: ffffffff8e333da0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
#0: ffffffff8e333da0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
#0: ffffffff8e333da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614
5 locks held by kworker/u9:0/53:
#0:
ffff8880237d7148
((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1:
ffffc90000bd7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
ffffc90000bd7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
#2: ffff8880662d9060 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
#3: ffff8880662d8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5539
#4: ffff888015ed6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_find_and_get_ns+0x71/0x110 fs/kernfs/dir.c:918
4 locks held by kworker/0:2/785:
5 locks held by kworker/u9:1/4492:
#0: ffff8880237d4148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
#0: ffff8880237d4148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1: ffffc9000e8bfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
#1: ffffc9000e8bfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
#2: ffff888065f01060 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
#3:
ffff888065f00078
(
&hdev->lock
){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5539
#4: ffff888015ed6948
(&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_find_and_get_ns+0x71/0x110 fs/kernfs/dir.c:918
1 lock held by udevd/4548:
#0:
ffff888015ed6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159
2 locks held by getty/4850:
#0:
ffff88804d9180a0 (&tty->ldisc_sem){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1:
ffffc900031332f0
(
&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2201
4 locks held by udevd/5094:
#0: ffff88801c305540 (&p->lock){+.+.}-{3:3}
, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182
#1:
ffff88807a695888
(&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
#2: ffff8880631a0c38 (kn->active#18){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
#3: ffff8880638d7190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:995 [inline]
#3: ffff8880638d7190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
1 lock held by syz-executor.3/5105:
#0: ffff888015ed6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159
5 locks held by kworker/u9:2/5107:
#0: ffff888022549948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
#0: ffff888022549948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1: ffffc90002d6fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
#1: ffffc90002d6fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
#2: ffff888065f3d060 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
#3:
ffff888065f3c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5539
#4: ffff888015ed6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_find_and_get_ns+0x71/0x110 fs/kernfs/dir.c:918
1 lock held by syz-executor.1/5111:
#0:
ffff888015ed6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159
5 locks held by kworker/u9:4/5113:
#0:
ffff8880237d5948 (
(wq_completion)hci1
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3206 [inline]
, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1:
ffffc900036c7d00
(
(work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
(work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
#2: ffff8880662dd060 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
#3: ffff8880662dc078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5539
#4: ffff888015ed6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_find_and_get_ns+0x71/0x110 fs/kernfs/dir.c:918
1 lock held by syz-executor.4/5115:
#0: ffff888015ed6948
(
&root->kernfs_rwsem){++++}-{3:3}
, at: kernfs_find_and_get_ns+0x71/0x110 fs/kernfs/dir.c:918
5 locks held by kworker/u9:7/5120:
#0:
ffff8880237d2948