syzbot


INFO: rcu detected stall in kvm_dev_ioctl (4)

Status: auto-obsoleted due to no activity on 2023/04/10 15:34
Subsystems: mm
[Documentation on labels]
First crash: 518d, last: 518d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in kvm_dev_ioctl (2) kernel 1 1572d 1572d 0/26 closed as invalid on 2020/01/08 05:23
upstream INFO: rcu detected stall in kvm_dev_ioctl (3) kernel 3 1572d 1572d 0/26 closed as invalid on 2020/01/09 08:13
upstream INFO: rcu detected stall in kvm_dev_ioctl kernel 4 1607d 1608d 0/26 closed as invalid on 2019/12/04 14:04
linux-4.19 BUG: soft lockup in kvm_dev_ioctl 1 1082d 1082d 0/1 auto-closed as invalid on 2021/09/08 20:48

Sample crash report:
rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: {
 1-...D
 } 2665 jiffies s: 35689 root: 0x2/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
 __do_sys_wait4+0x13f/0x150 kernel/exit.c:1734
NMI backtrace for cpu 1
CPU: 1 PID: 17975 Comm: syz-executor.1 Not tainted 6.1.0-rc6-syzkaller-00315-gfaf68e3523c2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
RIP: 0010:__sanitizer_cov_trace_switch+0x16/0x90 kernel/kcov.c:323
Code: 89 fe bf 07 00 00 00 e9 78 fe ff ff 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 56 41 55 41 54 49 89 fc 55 48 89 f5 53 48 8b 46 08 <48> 83 f8 20 74 63 77 44 48 83 f8 08 74 53 48 83 f8 10 75 2f 41 bd
RSP: 0018:ffffc900001dfce0 EFLAGS: 00000046
RAX: 0000000000000008 RBX: 000000000000006c RCX: 0000000000000004
RDX: 1ffffffff149a200 RSI: ffffffff8b867d00 RDI: 0000000000000075
RBP: ffffffff8b867d00 R08: 0000000000000000 R09: 0000000000000075
R10: 000000000000006c R11: 0000000000000001 R12: 0000000000000075
R13: ffffffff8a4d1001 R14: 1ffff9200003bfa5 R15: 0000000000000001
FS:  00007facfaf9b700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f19195a7580 CR3: 000000007ee2c000 CR4: 00000000003526e0
Call Trace:
 <IRQ>
 format_decode+0x3e0/0xb50 lib/vsprintf.c:2610
 vsnprintf+0x15d/0x16b0 lib/vsprintf.c:2752
 sprintf+0xc4/0x100 lib/vsprintf.c:3004
 print_time kernel/printk/printk.c:1274 [inline]
 info_print_prefix+0x248/0x340 kernel/printk/printk.c:1300
 record_print_text+0x14d/0x3e0 kernel/printk/printk.c:1349
 console_emit_next_record.constprop.0+0x6bf/0x840 kernel/printk/printk.c:2714
 console_flush_all kernel/printk/printk.c:2793 [inline]
 console_unlock+0x3c2/0x600 kernel/printk/printk.c:2860
 vprintk_emit+0x1bd/0x600 kernel/printk/printk.c:2268
 vprintk+0x84/0xa0 kernel/printk/printk_safe.c:50
 _printk+0xbe/0xf1 kernel/printk/printk.c:2289
 printk_stack_address arch/x86/kernel/dumpstack.c:72 [inline]
 show_trace_log_lvl+0x221/0x2ba arch/x86/kernel/dumpstack.c:282
 sched_show_task kernel/sched/core.c:8897 [inline]
 sched_show_task+0x450/0x5c0 kernel/sched/core.c:8871
 show_state_filter+0xf4/0x310 kernel/sched/core.c:8942
 k_spec drivers/tty/vt/keyboard.c:667 [inline]
 k_spec+0xe5/0x140 drivers/tty/vt/keyboard.c:656
 kbd_keycode drivers/tty/vt/keyboard.c:1524 [inline]
 kbd_event+0xce1/0x1790 drivers/tty/vt/keyboard.c:1543
 input_to_handler+0x3b9/0x4c0 drivers/input/input.c:130
 input_pass_values.part.0+0x230/0x710 drivers/input/input.c:159
 input_pass_values drivers/input/input.c:146 [inline]
 input_event_dispose+0x5cf/0x730 drivers/input/input.c:374
 input_handle_event+0x120/0xe70 drivers/input/input.c:402
 input_event drivers/input/input.c:431 [inline]
 input_event+0x83/0xa0 drivers/input/input.c:423
 input_sync include/linux/input.h:450 [inline]
 hidinput_report_event+0xb2/0x100 drivers/hid/hid-input.c:1655
 hid_report_raw_event+0x33c/0x1270 drivers/hid/hid-core.c:2005
 hid_input_report+0x363/0x4d0 drivers/hid/hid-core.c:2066
 hid_irq_in+0x50f/0x690 drivers/hid/usbhid/hid-core.c:284
 __usb_hcd_giveback_urb+0x2b0/0x5c0 drivers/usb/core/hcd.c:1671
 usb_hcd_giveback_urb+0x384/0x430 drivers/usb/core/hcd.c:1754
 dummy_timer+0x1203/0x32d0 drivers/usb/gadget/udc/dummy_hcd.c:1988
 call_timer_fn+0x1da/0x7c0 kernel/time/timer.c:1474
 expire_timers kernel/time/timer.c:1519 [inline]
 __run_timers.part.0+0x6a2/0xaf0 kernel/time/timer.c:1790
 __run_timers kernel/time/timer.c:1768 [inline]
 run_timer_softirq+0xb7/0x1d0 kernel/time/timer.c:1803
 __do_softirq+0x1fb/0xadc kernel/softirq.c:571
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650
 irq_exit_rcu+0x9/0x20 kernel/softirq.c:662
 sysvec_apic_timer_interrupt+0x97/0xc0 arch/x86/kernel/apic/apic.c:1107
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:mt_slot+0xa6/0x170 lib/maple_tree.c:808
Code: 28 e2 f7 48 8d 7b 18 be ff ff ff ff e8 b3 33 4f 00 31 ff 89 c3 89 c6 e8 b8 24 e2 f7 85 db 74 37 e8 ff 27 e2 f7 4c 89 e0 5b 5d <41> 5c c3 e8 f2 27 e2 f7 48 89 da 48 b8 00 00 00 00 00 fc ff df 48
RSP: 0018:ffffc9000ad97b18 EFLAGS: 00000212
RAX: ffff8880742e66c0 RBX: ffff88807d018658 RCX: ffffc9000c32a000
RDX: 0000000000040000 RSI: ffffffff899df121 RDI: 0000000000000005
RBP: ffffc9000ad97ca8 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880742e66c0
R13: 00007facfa3d0fff R14: 000000000000000f R15: 000000000000000a
 mas_slot lib/maple_tree.c:835 [inline]
 mas_next_nentry+0x7c5/0xab0 lib/maple_tree.c:4689
 mas_next_entry lib/maple_tree.c:4751 [inline]
 mas_find+0x1da/0xd10 lib/maple_tree.c:6014
 mm_take_all_locks+0x171/0x880 mm/mmap.c:3553
 __mmu_notifier_register+0x548/0x6f0 mm/mmu_notifier.c:657
 mmu_notifier_register+0x3c/0xa0 mm/mmu_notifier.c:728
 kvm_init_mmu_notifier arch/x86/kvm/../../../virt/kvm/kvm_main.c:913 [inline]
 kvm_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:1215 [inline]
 kvm_dev_ioctl_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:4931 [inline]
 kvm_dev_ioctl+0xed3/0x1d20 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4973
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7facfa28c0d9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007facfaf9b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007facfa3abf80 RCX: 00007facfa28c0d9
RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003
RBP: 00007facfa2e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007facfa4cfb1f R14: 00007facfaf9b300 R15: 0000000000022000
 </TASK>
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f1134c89cb7
RSP: 002b:00007ffec3ff4360 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
RAX: ffffffffffffffda RBX: 0000000000000e62 RCX: 00007f1134c89cb7
RDX: 0000000040000000 RSI: 00007ffec3ff439c RDI: 00000000ffffffff
RBP: 00007ffec3ff439c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 00007ffec3ff4490 R14: 00007f1134dac9d8 R15: 000000000000000c
 </TASK>
task:kworker/u5:4    state:I stack:27656 pid:3676  ppid:2      flags:0x00004000
Workqueue:  0x0 (hci4)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 worker_thread+0x160/0x1090 kernel/workqueue.c:2457
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:kworker/u5:5    state:I stack:28032 pid:3680  ppid:2      flags:0x00004000
Workqueue:  0x0 (hci2)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 worker_thread+0x160/0x1090 kernel/workqueue.c:2457
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:syz-executor.0  state:S stack:23096 pid:3681  ppid:3660   flags:0x00000000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 do_wait+0x730/0xd70 kernel/exit.c:1562
 kernel_wait4+0x150/0x260 kernel/exit.c:1706
 __do_sys_wait4+0x13f/0x150 kernel/exit.c:1734
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fe664689cb7
RSP: 002b:00007fe6648cfd50 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
RAX: ffffffffffffffda RBX: 0000000000000940 RCX: 00007fe664689cb7
RDX: 0000000040000000 RSI: 00007fe6648cfddc RDI: 00000000ffffffff
RBP: 00007fe6648cfddc R08: 0000000000000000 R09: 00007fe6648cfc10
R10: 0000000000000000 R11: 0000000000000293 R12: 0000555557222810
R13: 0000555557222883 R14: 0000000000000005 R15: 00007fe6648cfe40
 </TASK>
task:syz-executor.3  state:D stack:24464 pid:3682  ppid:3667   flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 synchronize_rcu_expedited+0x39f/0x780 kernel/rcu/tree_exp.h:961
 namespace_unlock+0x1af/0x410 fs/namespace.c:1497
 do_umount fs/namespace.c:1720 [inline]
 path_umount+0x67b/0x10b0 fs/namespace.c:1802
 ksys_umount fs/namespace.c:1825 [inline]
 __do_sys_umount fs/namespace.c:1830 [inline]
 __se_sys_umount fs/namespace.c:1828 [inline]
 __x64_sys_umount+0x15d/0x190 fs/namespace.c:1828
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f1134c8d547
RSP: 002b:00007f1134ecec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: ffffffffffffffda RBX: 0000000000000a6f RCX: 00007f1134c8d547
RDX: 00007f1134eced4b RSI: 000000000000000a RDI: 00007f1134eced40
RBP: 00007f1134eced40 R08: 00000000ffffffff R09: 00007f1134eceb10
R10: 0000555556933883 R11: 0000000000000246 R12: 00007f1134ce6b24
R13: 00007f1134ecfe00 R14: 0000555556933810 R15: 00007f1134ecfe40
 </TASK>
task:syz-executor.5  state:S stack:24288 pid:3683  ppid:3662   flags:0x00000000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 do_wait+0x730/0xd70 kernel/exit.c:1562
 kernel_wait4+0x150/0x260 kernel/exit.c:1706
 __do_sys_wait4+0x13f/0x150 kernel/exit.c:1734
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f1919489cb7
RSP: 002b:00007f19196cfd50 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
RAX: ffffffffffffffda RBX: 000000000000085f RCX: 00007f1919489cb7
RDX: 0000000040000000 RSI: 00007f19196cfddc RDI: 00000000ffffffff
RBP: 00007f19196cfddc R08: 0000000000000000 R09: 00007f19196cfc10
R10: 0000000000000000 R11: 0000000000000293 R12: 0000555555c61810
R13: 0000555555c61883 R14: 0000000000000005 R15: 00007f19196cfe40
 </TASK>
task:kworker/1:3     state:I stack:21648 pid:3684  ppid:2      flags:0x00004000
Workqueue:  0x0 (rcu_gp)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 worker_thread+0x160/0x1090 kernel/workqueue.c:2457
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:syz-executor.1  state:S stack:24632 pid:3687  ppid:3664   flags:0x00000000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 do_wait+0x730/0xd70 kernel/exit.c:1562
 kernel_wait4+0x150/0x260 kernel/exit.c:1706
 __do_sys_wait4+0x13f/0x150 kernel/exit.c:1734
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7facfa289cb7
RSP: 002b:00007facfa4cfd50 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
RAX: ffffffffffffffda RBX: 00000000000003c9 RCX: 00007facfa289cb7
RDX: 0000000040000000 RSI: 00007facfa4cfddc RDI: 00000000ffffffff
RBP: 00007facfa4cfddc R08: 0000000000000000 R09: 00007facfa4cfc10
R10: 0000000000000000 R11: 0000000000000293 R12: 0000555556810810
R13: 0000555556810883 R14: 0000000000000005 R15: 00007facfa4cfe40
 </TASK>
task:syz-executor.2  state:S stack:23408 pid:3688  ppid:3661   flags:0x00000000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 pipe_read+0xa87/0x1110 fs/pipe.c:378
 call_read_iter include/linux/fs.h:2185 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x7fa/0x930 fs/read_write.c:470
 ksys_read+0x1ec/0x250 fs/read_write.c:613
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f76cf63defc
RSP: 002b:00007f76cf8cfd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007f76cf8cfe00 RCX: 00007f76cf63defc
RDX: 0000000000000040 RSI: 00007f76cf7a8020 RDI: 00000000000000f9
RBP: 0000000000000003 R08: 0000000000000000 R09: ffff000000000000
R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000061
R13: 000000000011912f R14: 0000000000000000 R15: 00007f76cf8cfe40
 </TASK>
task:syz-executor.4  state:S stack:23400 pid:3689  ppid:3666   flags:0x00000000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 pipe_read+0xa87/0x1110 fs/pipe.c:378
 call_read_iter include/linux/fs.h:2185 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x7fa/0x930 fs/read_write.c:470
 ksys_read+0x1ec/0x250 fs/read_write.c:613
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fea3543defc
RSP: 002b:00007fea356cfd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fea356cfe00 RCX: 00007fea3543defc
RDX: 0000000000000040 RSI: 00007fea355a8020 RDI: 00000000000000f9
RBP: 0000000000000003 R08: 0000000000000000 R09: ffff000000000000
R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000032
R13: 0000000000119ac7 R14: 0000000000000006 R15: 00007fea356cfe40
 </TASK>
task:bond0           state:I stack:29872 pid:3690  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:bond0           state:I stack:29936 pid:3691  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:bond0           state:I stack:30616 pid:3693  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:bond0           state:I stack:29944 pid:3695  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:bond0           state:I stack:29944 pid:3696  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:bond0           state:I stack:30616 pid:3700  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg0    state:I stack:29664 pid:3701  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg1    state:I stack:29664 pid:3702  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg0    state:I stack:29664 pid:3703  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg1    state:I stack:30616 pid:3705  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg2    state:I stack:29664 pid:3706  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg0    state:I stack:30616 pid:3707  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg2    state:I stack:30616 pid:3708  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg1    state:I stack:29664 pid:3709  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg0    state:I stack:29944 pid:3710  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg2    state:I stack:29944 pid:3711  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg0    state:I stack:29936 pid:3712  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg1    state:I stack:29664 pid:3713  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg1    state:I stack:29936 pid:3714  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg2    state:I stack:29872 pid:3715  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg2    state:I stack:29936 pid:3716  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg0    state:I stack:29856 pid:3717  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg1    state:I stack:29856 pid:3718  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:wg-crypt-wg2    state:I stack:30616 pid:3719  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:kworker/1:4     state:I stack:21976 pid:3721  ppid:2      flags:0x00004000
Workqueue:  0x0 (wg-crypt-wg2)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 worker_thread+0x160/0x1090 kernel/workqueue.c:2457
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:kworker/1:6     state:R  running task     stack:22056 pid:3725  ppid:2      flags:0x00004000
Workqueue:  0x0 (events)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 worker_thread+0x160/0x1090 kernel/workqueue.c:2457
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:kworker/u4:6    state:I stack:26456 pid:4382  ppid:2      flags:0x00004000
Workqueue:  0x0 (bat_events)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 worker_thread+0x160/0x1090 kernel/workqueue.c:2457
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:kworker/u4:7    state:I stack:26456 pid:4588  ppid:2      flags:0x00004000
Workqueue:  0x0 (bat_events)
Call Trace:
 <TASK>
 </TASK>
task:kworker/u4:9    state:I stack:27176 pid:4740  ppid:2      flags:0x00004000
Workqueue:  0x0 (phy11)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 worker_thread+0x160/0x1090 kernel/workqueue.c:2457
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:bond1           state:I stack:30344 pid:4755  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:kworker/1:8     state:I stack:22152 pid:4779  ppid:2      flags:0x00004000
Workqueue:  0x0 (wg-crypt-wg1)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 worker_thread+0x160/0x1090 kernel/workqueue.c:2457
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:bond2           state:I stack:30616 pid:4801  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:bond1           state:I stack:30616 pid:4809  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:kworker/1:9     state:I stack:21608 pid:5066  ppid:2      flags:0x00004000
Workqueue:  0x0 (events)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 worker_thread+0x160/0x1090 kernel/workqueue.c:2457
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:kworker/u4:10   state:D stack:26776 pid:5084  ppid:2      flags:0x00004000
Workqueue: events_unbound io_ring_exit_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 </TASK>
task:kworker/0:12    state:D stack:22272 pid:5275  ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 schedule_timeout+0x1df/0x2a0 kernel/time/timer.c:1911
 ___down_common kernel/locking/semaphore.c:225 [inline]
 __down_common+0x3b2/0x8a0 kernel/locking/semaphore.c:246
 down+0x74/0xa0 kernel/locking/semaphore.c:63
 hid_device_remove+0x29/0x200 drivers/hid/hid-core.c:2623
 device_remove+0xc8/0x170 drivers/base/dd.c:548
 __device_release_driver drivers/base/dd.c:1249 [inline]
 device_release_driver_internal+0x4a5/0x700 drivers/base/dd.c:1275
 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:529
 device_del+0x4f7/0xc80 drivers/base/core.c:3704
 hid_remove_device drivers/hid/hid-core.c:2800 [inline]
 hid_destroy_device+0xe5/0x150 drivers/hid/hid-core.c:2819
 usbhid_disconnect+0xa3/0xe0 drivers/hid/usbhid/hid-core.c:1451
 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:550 [inline]
 device_remove+0x11f/0x170 drivers/base/dd.c:542
 __device_release_driver drivers/base/dd.c:1249 [inline]
 device_release_driver_internal+0x4a5/0x700 drivers/base/dd.c:1275
 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:529
 device_del+0x4f7/0xc80 drivers/base/core.c:3704
 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1419
 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2235
 hub_port_connect drivers/usb/core/hub.c:5197 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5497 [inline]
 port_event drivers/usb/core/hub.c:5653 [inline]
 hub_event+0x1f8a/0x45d0 drivers/usb/core/hub.c:5735
 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289
 worker_thread+0x669/0x1090 kernel/workqueue.c:2436
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:kworker/0:13    state:I stack:21992 pid:5276  ppid:2      flags:0x00004000
Workqueue:  0x0 (rcu_gp)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 worker_thread+0x160/0x1090 kernel/workqueue.c:2457
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:kworker/0:15    state:I stack:21984 pid:5283  ppid:2      flags:0x00004000
Workqueue:  0x0 (wg-crypt-wg1)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 worker_thread+0x160/0x1090 kernel/workqueue.c:2457
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:kworker/0:16    state:D stack:22584 pid:5284  ppid:2      flags:0x00004000
Workqueue: rcu_gp wait_rcu_exp_gp
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 schedule_timeout+0x14e/0x2a0 kernel/time/timer.c:1935
 synchronize_rcu_expedited_wait_once kernel/rcu/tree_exp.h:571 [inline]
 synchronize_rcu_expedited_wait kernel/rcu/tree_exp.h:622 [inline]
 rcu_exp_wait_wake+0x28f/0xf20 kernel/rcu/tree_exp.h:688
 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289
 worker_thread+0x669/0x1090 kernel/workqueue.c:2436
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:bond1           state:I stack:30616 pid:5814  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:bond2           state:I stack:30616 pid:5818  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:bond3           state:I stack:30344 pid:5821  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:kworker/u4:0    state:D stack:27176 pid:17545 ppid:2      flags:0x00004000
Workqueue: events_unbound io_ring_exit_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 schedule_timeout+0x14e/0x2a0 kernel/time/timer.c:1935
 do_wait_for_common kernel/sched/completion.c:85 [inline]
 __wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106
 io_ring_exit_work+0x2af/0xc32 io_uring/io_uring.c:2763
 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289
 worker_thread+0x669/0x1090 kernel/workqueue.c:2436
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:rcK             state:S stack:25856 pid:17971 ppid:1      flags:0x00000000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 pipe_read+0xa87/0x1110 fs/pipe.c:378
 call_read_iter include/linux/fs.h:2185 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x7fa/0x930 fs/read_write.c:470
 ksys_read+0x1ec/0x250 fs/read_write.c:613
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f46f49e18fe
RSP: 002b:00007ffc6eeb0fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f46f49e18fe
RDX: 0000000000000080 RSI: 00007ffc6eeb1068 RDI: 0000000000000003
RBP: 00007ffc6eeb1068 R08: 0000000000000000 R09: 00007f46f4ab1a60
R10: 00007f46f4855ad0 R11: 0000000000000246 R12: 0000000000000080
R13: 00007f46f4855788 R14: 0000000000000001 R15: 0000000000000000
 </TASK>
task:syz-executor.5  state:D stack:28232 pid:17972 ppid:3683   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095
 __down_read_common kernel/locking/rwsem.c:1260 [inline]
 __down_read kernel/locking/rwsem.c:1269 [inline]
 down_read+0xe6/0x450 kernel/locking/rwsem.c:1511
 mmap_read_lock include/linux/mmap_lock.h:117 [inline]
 exit_mm kernel/exit.c:492 [inline]
 do_exit+0x921/0x2a30 kernel/exit.c:807
 do_group_exit+0xd4/0x2a0 kernel/exit.c:950
 get_signal+0x21b1/0x2440 kernel/signal.c:2858
 arch_do_signal_or_restart+0x86/0x2300 arch/x86/kernel/signal.c:869
 exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
 exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296
 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f191948c0d9
RSP: 002b:00007f19196cfb98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffdfc RBX: 00007f19195abf8c RCX: 00007f191948c0d9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f19195abf8c
RBP: 00007f19195abf80 R08: 00007ffeb61f9080 R09: 0000000000000000
R10: 00007f19196cfc80 R11: 0000000000000246 R12: 0000000000118ceb
R13: 00007f19196cfc80 R14: 00007f19196cfca0 R15: 0000000000000032
 </TASK>
task:syz-executor.5  state:D stack:28440 pid:17977 ppid:3683   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6656
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0xa48/0x1360 kernel/locking/mutex.c:747
 mm_take_all_locks+0x14f/0x880 mm/mmap.c:3551
 __mmu_notifier_register+0x548/0x6f0 mm/mmu_notifier.c:657
 mmu_notifier_register+0x3c/0xa0 mm/mmu_notifier.c:728
 kvm_init_mmu_notifier arch/x86/kvm/../../../virt/kvm/kvm_main.c:913 [inline]
 kvm_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:1215 [inline]
 kvm_dev_ioctl_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:4931 [inline]
 kvm_dev_ioctl+0xed3/0x1d20 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4973
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f191948c0d9
RSP: 002b:00007f191a17c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f19195abf80 RCX: 00007f191948c0d9
RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003
RBP: 00007f19194e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f19196cfb1f R14: 00007f191a17c300 R15: 0000000000022000
 </TASK>
task:syz-executor.1  state:D stack:28232 pid:17973 ppid:3687   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095
 __down_read_common kernel/locking/rwsem.c:1260 [inline]
 __down_read kernel/locking/rwsem.c:1269 [inline]
 down_read+0xe6/0x450 kernel/locking/rwsem.c:1511
 mmap_read_lock include/linux/mmap_lock.h:117 [inline]
 exit_mm kernel/exit.c:492 [inline]
 do_exit+0x921/0x2a30 kernel/exit.c:807
 do_group_exit+0xd4/0x2a0 kernel/exit.c:950
 get_signal+0x21b1/0x2440 kernel/signal.c:2858
 arch_do_signal_or_restart+0x86/0x2300 arch/x86/kernel/signal.c:869
 exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
 exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296
 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7facfa28c0d9
RSP: 002b:00007facfa4cfb98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffdfc RBX: 00007facfa3abf8c RCX: 00007facfa28c0d9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007facfa3abf8c
RBP: 00007facfa3abf80 R08: 00007fffadfd5080 R09: 0000000000000000
R10: 00007facfa4cfc80 R11: 0000000000000246 R12: 0000000000118ce9
R13: 00007facfa4cfc80 R14: 00007facfa4cfca0 R15: 0000000000000032
 </TASK>
task:syz-executor.1  state:R  running task     stack:28440 pid:17975 ppid:3687   flags:0x0000400c
Call Trace:
 <IRQ>
 sched_show_task kernel/sched/core.c:8897 [inline]
 sched_show_task+0x450/0x5c0 kernel/sched/core.c:8871
 show_state_filter+0xf4/0x310 kernel/sched/core.c:8942
 k_spec drivers/tty/vt/keyboard.c:667 [inline]
 k_spec+0xe5/0x140 drivers/tty/vt/keyboard.c:656
 kbd_keycode drivers/tty/vt/keyboard.c:1524 [inline]
 kbd_event+0xce1/0x1790 drivers/tty/vt/keyboard.c:1543
 input_to_handler+0x3b9/0x4c0 drivers/input/input.c:130
 input_pass_values.part.0+0x230/0x710 drivers/input/input.c:159
 input_pass_values drivers/input/input.c:146 [inline]
 input_event_dispose+0x5cf/0x730 drivers/input/input.c:374
 input_handle_event+0x120/0xe70 drivers/input/input.c:402
 input_event drivers/input/input.c:431 [inline]
 input_event+0x83/0xa0 drivers/input/input.c:423
 input_sync include/linux/input.h:450 [inline]
 hidinput_report_event+0xb2/0x100 drivers/hid/hid-input.c:1655
 hid_report_raw_event+0x33c/0x1270 drivers/hid/hid-core.c:2005
 hid_input_report+0x363/0x4d0 drivers/hid/hid-core.c:2066
 hid_irq_in+0x50f/0x690 drivers/hid/usbhid/hid-core.c:284
 __usb_hcd_giveback_urb+0x2b0/0x5c0 drivers/usb/core/hcd.c:1671
 usb_hcd_giveback_urb+0x384/0x430 drivers/usb/core/hcd.c:1754
 dummy_timer+0x1203/0x32d0 drivers/usb/gadget/udc/dummy_hcd.c:1988
 call_timer_fn+0x1da/0x7c0 kernel/time/timer.c:1474
 expire_timers kernel/time/timer.c:1519 [inline]
 __run_timers.part.0+0x6a2/0xaf0 kernel/time/timer.c:1790
 __run_timers kernel/time/timer.c:1768 [inline]
 run_timer_softirq+0xb7/0x1d0 kernel/time/timer.c:1803
 __do_softirq+0x1fb/0xadc kernel/softirq.c:571
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650
 irq_exit_rcu+0x9/0x20 kernel/softirq.c:662
 sysvec_apic_timer_interrupt+0x97/0xc0 arch/x86/kernel/apic/apic.c:1107
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:mt_slot+0xa6/0x170 lib/maple_tree.c:808
Code: 28 e2 f7 48 8d 7b 18 be ff ff ff ff e8 b3 33 4f 00 31 ff 89 c3 89 c6 e8 b8 24 e2 f7 85 db 74 37 e8 ff 27 e2 f7 4c 89 e0 5b 5d <41> 5c c3 e8 f2 27 e2 f7 48 89 da 48 b8 00 00 00 00 00 fc ff df 48
RSP: 0018:ffffc9000ad97b18 EFLAGS: 00000212
RAX: ffff8880742e66c0 RBX: ffff88807d018658 RCX: ffffc9000c32a000
RDX: 0000000000040000 RSI: ffffffff899df121 RDI: 0000000000000005
RBP: ffffc9000ad97ca8 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880742e66c0
R13: 00007facfa3d0fff R14: 000000000000000f R15: 000000000000000a
 mas_slot lib/maple_tree.c:835 [inline]
 mas_next_nentry+0x7c5/0xab0 lib/maple_tree.c:4689
 mas_next_entry lib/maple_tree.c:4751 [inline]
 mas_find+0x1da/0xd10 lib/maple_tree.c:6014
 mm_take_all_locks+0x171/0x880 mm/mmap.c:3553
 __mmu_notifier_register+0x548/0x6f0 mm/mmu_notifier.c:657
 mmu_notifier_register+0x3c/0xa0 mm/mmu_notifier.c:728
 kvm_init_mmu_notifier arch/x86/kvm/../../../virt/kvm/kvm_main.c:913 [inline]
 kvm_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:1215 [inline]
 kvm_dev_ioctl_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:4931 [inline]
 kvm_dev_ioctl+0xed3/0x1d20 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4973
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7facfa28c0d9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007facfaf9b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007facfa3abf80 RCX: 00007facfa28c0d9
RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003
RBP: 00007facfa2e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007facfa4cfb1f R14: 00007facfaf9b300 R15: 0000000000022000
 </TASK>
task:kvm             state:I stack:29664 pid:17976 ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:kvm             state:I stack:30616 pid:17978 ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
task:rcK             state:D stack:25856 pid:17983 ppid:17971  flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 io_schedule+0xbe/0x130 kernel/sched/core.c:8741
 folio_wait_bit_common+0x394/0x9b0 mm/filemap.c:1296
 folio_put_wait_locked mm/filemap.c:1465 [inline]
 filemap_update_page mm/filemap.c:2472 [inline]
 filemap_get_pages+0x1217/0x16b0 mm/filemap.c:2605
 filemap_read+0x315/0xc00 mm/filemap.c:2675
 generic_file_read_iter+0x3b4/0x5a0 mm/filemap.c:2821
 ext4_file_read_iter+0x1d9/0x690 fs/ext4/file.c:147
 __kernel_read+0x2ca/0x7c0 fs/read_write.c:428
 kernel_read+0xc3/0x1c0 fs/read_write.c:446
 prepare_binprm fs/exec.c:1657 [inline]
 search_binary_handler fs/exec.c:1711 [inline]
 exec_binprm fs/exec.c:1768 [inline]
 bprm_execve fs/exec.c:1837 [inline]
 bprm_execve+0x70e/0x19f0 fs/exec.c:1799
 do_execveat_common+0x724/0x890 fs/exec.c:1942
 do_execve fs/exec.c:2016 [inline]
 __do_sys_execve fs/exec.c:2092 [inline]
 __se_sys_execve fs/exec.c:2087 [inline]
 __x64_sys_execve+0x93/0xc0 fs/exec.c:2087
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f46f49bf337
RSP: 002b:00007ffc6eeb0e48 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
RAX: ffffffffffffffda RBX: 00005577f56eada8 RCX: 00007f46f49bf337
RDX: 00005577f56eae08 RSI: 00005577f56eada8 RDI: 00005577f56eae60
RBP: 00005577f56eae60 R08: 00005577f56eae65 R09: 00007f46f4ab1a60
R10: 00005577f56ead70 R11: 0000000000000246 R12: 00005577f56eae08
R13: 00007f46f4b64ff4 R14: 00005577f56eae08 R15: 0000000000000000
 </TASK>
task:syz-executor.0  state:D stack:28112 pid:17988 ppid:3681   flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095
 __down_read_common kernel/locking/rwsem.c:1260 [inline]
 __down_read kernel/locking/rwsem.c:1269 [inline]
 down_read+0xe6/0x450 kernel/locking/rwsem.c:1511
 mmap_read_lock include/linux/mmap_lock.h:117 [inline]
 do_user_addr_fault+0xa51/0x1210 arch/x86/mm/fault.c:1379
 handle_page_fault arch/x86/mm/fault.c:1519 [inline]
 exc_page_fault+0x98/0x170 arch/x86/mm/fault.c:1575
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x7fe6646276c6
RSP: 002b:00007fe6648cfae8 EFLAGS: 00010287
RAX: 0000001b30824000 RBX: 00007fe6647ac018 RCX: 0000001b30820000
RDX: 0000001b30824004 RSI: 0000001b30823dd4 RDI: 000000009cde5433
RBP: 000000009cde5433 R08: 0000001b30c20000 R09: 000000009cde5437
R10: 00007ffe0a4bc090 R11: 0000000000036306 R12: 00007fe6647a0000
R13: 0000000000000001 R14: 0000000000000853 R15: ffffffff81c05f26
 </TASK>
task:syz-executor.0  state:D stack:28040 pid:17990 ppid:3681   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6656
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0xa48/0x1360 kernel/locking/mutex.c:747
 mm_take_all_locks+0x14f/0x880 mm/mmap.c:3551
 __mmu_notifier_register+0x548/0x6f0 mm/mmu_notifier.c:657
 mmu_notifier_register+0x3c/0xa0 mm/mmu_notifier.c:728
 kvm_init_mmu_notifier arch/x86/kvm/../../../virt/kvm/kvm_main.c:913 [inline]
 kvm_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:1215 [inline]
 kvm_dev_ioctl_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:4931 [inline]
 kvm_dev_ioctl+0xed3/0x1d20 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4973
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fe66468c0d9
RSP: 002b:00007fe6653b7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fe6647abf80 RCX: 00007fe66468c0d9
RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003
RBP: 00007fe6646e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe6648cfb1f R14: 00007fe6653b7300 R15: 0000000000022000
 </TASK>
task:syz-executor.0  state:D stack:27888 pid:17992 ppid:3681   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095
 __down_read_common kernel/locking/rwsem.c:1260 [inline]
 __down_read kernel/locking/rwsem.c:1269 [inline]
 down_read+0xe6/0x450 kernel/locking/rwsem.c:1511
 mmap_read_lock include/linux/mmap_lock.h:117 [inline]
 exit_mm kernel/exit.c:492 [inline]
 do_exit+0x921/0x2a30 kernel/exit.c:807
 do_group_exit+0xd4/0x2a0 kernel/exit.c:950
 get_signal+0x21b1/0x2440 kernel/signal.c:2858
 arch_do_signal_or_restart+0x86/0x2300 arch/x86/kernel/signal.c:869
 exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
 exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296
 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fe66468c0d9
RSP: 002b:00007fe665396218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007fe6647ac058 RCX: 00007fe66468c0d9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe6647ac058
RBP: 00007fe6647ac050 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6647ac05c
R13: 00007fe6648cfb1f R14: 00007fe665396300 R15: 0000000000022000
 </TASK>
task:kvm             state:I stack:29856 pid:17991 ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5209 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6521
 schedule+0xde/0x1b0 kernel/sched/core.c:6597
 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>

Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
 #0: ffffffff8c58f0f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507
1 lock held by rcu_tasks_trace/13:
 #0: ffffffff8c58edf0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507
2 locks held by kworker/u4:2/33:
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260
 #1: ffffc90000aa7da8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264
1 lock held by khugepaged/35:
 #0: ffffffff8c6895e8 (lock#3){+.+.}-{3:3}, at: __lru_add_drain_all+0x62/0x7b0 mm/swap.c:873
2 locks held by kworker/u4:3/46:
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260
 #1: ffffc90000b77da8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264
2 locks held by getty/3313:
 #0: ffff888028094098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244
 #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177
1 lock held by syz-executor.3/3682:
 #0: ffffffff8c59a8f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:292 [inline]
 #0: ffffffff8c59a8f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x5df/0x780 kernel/rcu/tree_exp.h:946
2 locks held by kworker/u4:10/5084:
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260
 #1: ffffc90004e27da8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264
6 locks held by kworker/0:12/5275:
 #0: ffff888012f09938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012f09938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012f09938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012f09938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
 #0: ffff888012f09938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
 #0: ffff888012f09938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260
 #1: ffffc90006337da8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264
 #2: ffff888022064190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline]
 #2: ffff888022064190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x45d0 drivers/usb/core/hub.c:5681
 #3: ffff88823bd24990 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline]
 #3: ffff88823bd24990 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2226
 #4: ffff8880780f3118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline]
 #4: ffff8880780f3118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline]
 #4: ffff8880780f3118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x700 drivers/base/dd.c:1272
 #5: ffff888077eada20 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline]
 #5: ffff888077eada20 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline]
 #5: ffff888077eada20 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x700 drivers/base/dd.c:1272
2 locks held by kworker/0:16/5284:
 #0: ffff888012066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
 #0: ffff888012066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
 #0: ffff888012066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260
 #1: ffffc90008ccfda8 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264
2 locks held by kworker/u4:0/17545:
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
 #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260
 #1: ffffc90004b6fda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264
1 lock held by syz-executor.5/17972:
 #0: ffff88807c971718 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:117 [inline]
 #0: ffff88807c971718 (&mm->mmap_lock#2){++++}-{3:3}, at: exit_mm kernel/exit.c:492 [inline]
 #0: ffff88807c971718 (&mm->mmap_lock#2){++++}-{3:3}, at: do_exit+0x921/0x2a30 kernel/exit.c:807
2 locks held by syz-executor.5/17977:
 #0: ffff88807c971718 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:71 [inline]
 #0: ffff88807c971718 (&mm->mmap_lock#2){++++}-{3:3}, at: mmu_notifier_register+0x2a/0xa0 mm/mmu_notifier.c:727
 #1: ffffffff8c6c2ee8 (mm_all_locks_mutex){+.+.}-{3:3}, at: mm_take_all_locks+0x14f/0x880 mm/mmap.c:3551
1 lock held by syz-executor.1/17973:
 #0: ffff88807c975858 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:117 [inline]
 #0: ffff88807c975858 (&mm->mmap_lock#2){++++}-{3:3}, at: exit_mm kernel/exit.c:492 [inline]
 #0: ffff88807c975858 (&mm->mmap_lock#2){++++}-{3:3}, at: do_exit+0x921/0x2a30 kernel/exit.c:807
7 locks held by syz-executor.1/17975:
 #0: ffff88807c975858 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:71 [inline]
 #0: ffff88807c975858 (&mm->mmap_lock#2){++++}-{3:3}, at: mmu_notifier_register+0x2a/0xa0 mm/mmu_notifier.c:727
 #1: ffffffff8c6c2ee8 (mm_all_locks_mutex){+.+.}-{3:3}, at: mm_take_all_locks+0x14f/0x880 mm/mmap.c:3551
 #2: ffffc900001e0d60 ((&dum_hcd->timer)){+.-.}-{0:0}, at: lockdep_copy_map include/linux/lockdep.h:31 [inline]
 #2: ffffc900001e0d60 ((&dum_hcd->timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x7c0 kernel/time/timer.c:1464
 #3: ffff88807bbc4230 (&dev->event_lock#2){-.-.}-{2:2}, at: input_event drivers/input/input.c:430 [inline]
 #3: ffff88807bbc4230 (&dev->event_lock#2){-.-.}-{2:2}, at: input_event+0x70/0xa0 drivers/input/input.c:423
 #4: ffffffff8c58fc40 (rcu_read_lock){....}-{1:2}, at: input_pass_values.part.0+0x0/0x710 drivers/input/input.c:2522
 #5: ffffffff8d010598 (kbd_event_lock){..-.}-{2:2}, at: spin_lock include/linux/spinlock.h:350 [inline]
 #5: ffffffff8d010598 (kbd_event_lock){..-.}-{2:2}, at: kbd_event+0x8a/0x1790 drivers/tty/vt/keyboard.c:1537
 #6: ffffffff8c58fc40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 kernel/locking/lockdep.c:6494
1 lock held by rcK/17983:
 #0: ffff888026cb8548 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1471 [inline]
 #0: ffff888026cb8548 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xb2/0x19f0 fs/exec.c:1805
1 lock held by syz-executor.0/17988:
 #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:117 [inline]
 #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: do_user_addr_fault+0xa51/0x1210 arch/x86/mm/fault.c:1379
2 locks held by syz-executor.0/17990:
 #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:71 [inline]
 #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: mmu_notifier_register+0x2a/0xa0 mm/mmu_notifier.c:727
 #1: ffffffff8c6c2ee8 (mm_all_locks_mutex){+.+.}-{3:3}, at: mm_take_all_locks+0x14f/0x880 mm/mmap.c:3551
1 lock held by syz-executor.0/17992:
 #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:117 [inline]
 #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: exit_mm kernel/exit.c:492 [inline]
 #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: do_exit+0x921/0x2a30 kernel/exit.c:807

=============================================

keytouch 0003:0926:3333.01A3: can't resubmit intr, dummy_hcd.2-1/input0, status -19

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/11/27 11:25 upstream faf68e3523c2 74a66371 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: rcu detected stall in kvm_dev_ioctl
* Struck through repros no longer work on HEAD.