INFO: task kworker/0:0:7 blocked for more than 143 seconds. Not tainted 6.2.0-rc5-next-20230123-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:0 state:D stack:24408 pid:7 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5301 [inline] __schedule+0x25d0/0x5a70 kernel/sched/core.c:6619 schedule+0xde/0x1a0 kernel/sched/core.c:6695 schedule_timeout+0x1e1/0x2a0 kernel/time/timer.c:2143 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106 r871xu_dev_remove+0x72/0x470 drivers/staging/rtl8712/usb_intf.c:595 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458 device_remove drivers/base/dd.c:542 [inline] device_remove+0x11f/0x170 drivers/base/dd.c:534 __device_release_driver drivers/base/dd.c:1240 [inline] device_release_driver_internal+0x443/0x610 drivers/base/dd.c:1263 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:488 device_del+0x48a/0xb80 drivers/base/core.c:3620 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1420 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2238 hub_port_connect drivers/usb/core/hub.c:5247 [inline] hub_port_connect_change drivers/usb/core/hub.c:5552 [inline] port_event drivers/usb/core/hub.c:5712 [inline] hub_event+0x1fb5/0x4840 drivers/usb/core/hub.c:5794 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390 process_scheduled_works kernel/workqueue.c:2453 [inline] worker_thread+0x858/0x1090 kernel/workqueue.c:2539 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 INFO: task kworker/1:0:22 blocked for more than 143 seconds. Not tainted 6.2.0-rc5-next-20230123-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:0 state:D stack:24728 pid:22 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5301 [inline] __schedule+0x25d0/0x5a70 kernel/sched/core.c:6619 schedule+0xde/0x1a0 kernel/sched/core.c:6695 schedule_timeout+0x1e1/0x2a0 kernel/time/timer.c:2143 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106 r871xu_dev_remove+0x72/0x470 drivers/staging/rtl8712/usb_intf.c:595 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458 device_remove drivers/base/dd.c:542 [inline] device_remove+0x11f/0x170 drivers/base/dd.c:534 __device_release_driver drivers/base/dd.c:1240 [inline] device_release_driver_internal+0x443/0x610 drivers/base/dd.c:1263 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:488 device_del+0x48a/0xb80 drivers/base/core.c:3620 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1420 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2238 hub_port_connect drivers/usb/core/hub.c:5247 [inline] hub_port_connect_change drivers/usb/core/hub.c:5552 [inline] port_event drivers/usb/core/hub.c:5712 [inline] hub_event+0x1fb5/0x4840 drivers/usb/core/hub.c:5794 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390 process_scheduled_works kernel/workqueue.c:2453 [inline] worker_thread+0x858/0x1090 kernel/workqueue.c:2539 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 INFO: task kworker/1:2:898 blocked for more than 143 seconds. Not tainted 6.2.0-rc5-next-20230123-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:2 state:D stack:24384 pid:898 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5301 [inline] __schedule+0x25d0/0x5a70 kernel/sched/core.c:6619 schedule+0xde/0x1a0 kernel/sched/core.c:6695 schedule_timeout+0x1e1/0x2a0 kernel/time/timer.c:2143 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106 r871xu_dev_remove+0x72/0x470 drivers/staging/rtl8712/usb_intf.c:595 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458 device_remove drivers/base/dd.c:542 [inline] device_remove+0x11f/0x170 drivers/base/dd.c:534 __device_release_driver drivers/base/dd.c:1240 [inline] device_release_driver_internal+0x443/0x610 drivers/base/dd.c:1263 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:488 device_del+0x48a/0xb80 drivers/base/core.c:3620 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1420 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2238 hub_port_connect drivers/usb/core/hub.c:5247 [inline] hub_port_connect_change drivers/usb/core/hub.c:5552 [inline] port_event drivers/usb/core/hub.c:5712 [inline] hub_event+0x1fb5/0x4840 drivers/usb/core/hub.c:5794 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390 process_scheduled_works kernel/workqueue.c:2453 [inline] worker_thread+0x858/0x1090 kernel/workqueue.c:2539 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 INFO: task kworker/0:2:900 blocked for more than 144 seconds. Not tainted 6.2.0-rc5-next-20230123-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:2 state:D stack:24808 pid:900 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5301 [inline] __schedule+0x25d0/0x5a70 kernel/sched/core.c:6619 schedule+0xde/0x1a0 kernel/sched/core.c:6695 schedule_timeout+0x1e1/0x2a0 kernel/time/timer.c:2143 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106 r871xu_dev_remove+0x72/0x470 drivers/staging/rtl8712/usb_intf.c:595 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458 device_remove drivers/base/dd.c:542 [inline] device_remove+0x11f/0x170 drivers/base/dd.c:534 __device_release_driver drivers/base/dd.c:1240 [inline] device_release_driver_internal+0x443/0x610 drivers/base/dd.c:1263 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:488 device_del+0x48a/0xb80 drivers/base/core.c:3620 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1420 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2238 hub_port_connect drivers/usb/core/hub.c:5247 [inline] hub_port_connect_change drivers/usb/core/hub.c:5552 [inline] port_event drivers/usb/core/hub.c:5712 [inline] hub_event+0x1fb5/0x4840 drivers/usb/core/hub.c:5794 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390 process_scheduled_works kernel/workqueue.c:2453 [inline] worker_thread+0x858/0x1090 kernel/workqueue.c:2539 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 INFO: task kworker/0:1:5158 blocked for more than 144 seconds. Not tainted 6.2.0-rc5-next-20230123-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:1 state:D stack:24232 pid:5158 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5301 [inline] __schedule+0x25d0/0x5a70 kernel/sched/core.c:6619 schedule+0xde/0x1a0 kernel/sched/core.c:6695 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6754 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0xa3b/0x1350 kernel/locking/mutex.c:747 unregister_netdev+0x12/0x30 net/core/dev.c:10912 r871xu_dev_remove+0x289/0x470 drivers/staging/rtl8712/usb_intf.c:597 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458 device_remove drivers/base/dd.c:542 [inline] device_remove+0x11f/0x170 drivers/base/dd.c:534 __device_release_driver drivers/base/dd.c:1240 [inline] device_release_driver_internal+0x443/0x610 drivers/base/dd.c:1263 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:488 device_del+0x48a/0xb80 drivers/base/core.c:3620 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1420 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2238 hub_port_connect drivers/usb/core/hub.c:5247 [inline] hub_port_connect_change drivers/usb/core/hub.c:5552 [inline] port_event drivers/usb/core/hub.c:5712 [inline] hub_event+0x1fb5/0x4840 drivers/usb/core/hub.c:5794 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390 process_scheduled_works kernel/workqueue.c:2453 [inline] worker_thread+0x858/0x1090 kernel/workqueue.c:2539 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 INFO: task kworker/1:1:5162 blocked for more than 144 seconds. Not tainted 6.2.0-rc5-next-20230123-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:1 state:D stack:24808 pid:5162 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5301 [inline] __schedule+0x25d0/0x5a70 kernel/sched/core.c:6619 schedule+0xde/0x1a0 kernel/sched/core.c:6695 schedule_timeout+0x1e1/0x2a0 kernel/time/timer.c:2143 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106 r871xu_dev_remove+0x72/0x470 drivers/staging/rtl8712/usb_intf.c:595 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458 device_remove drivers/base/dd.c:542 [inline] device_remove+0x11f/0x170 drivers/base/dd.c:534 __device_release_driver drivers/base/dd.c:1240 [inline] device_release_driver_internal+0x443/0x610 drivers/base/dd.c:1263 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:488 device_del+0x48a/0xb80 drivers/base/core.c:3620 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1420 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2238 hub_port_connect drivers/usb/core/hub.c:5247 [inline] hub_port_connect_change drivers/usb/core/hub.c:5552 [inline] port_event drivers/usb/core/hub.c:5712 [inline] hub_event+0x1fb5/0x4840 drivers/usb/core/hub.c:5794 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390 process_scheduled_works kernel/workqueue.c:2453 [inline] worker_thread+0x858/0x1090 kernel/workqueue.c:2539 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Showing all locks held in the system: 5 locks held by kworker/0:0/7: #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc900000c7da8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffff888021579190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff888021579190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4840 drivers/usb/core/hub.c:5740 #3: ffff88802a59e190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #3: ffff88802a59e190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2229 #4: ffff88801e407118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #4: ffff88801e407118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1063 [inline] #4: ffff88801e407118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1260 1 lock held by rcu_tasks_kthre/13: #0: ffffffff8c793cb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xcd0 kernel/rcu/tasks.h:516 1 lock held by rcu_tasks_trace/14: #0: ffffffff8c7939b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xcd0 kernel/rcu/tasks.h:516 5 locks held by kworker/1:0/22: #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc900001c7da8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffff8881473f9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff8881473f9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4840 drivers/usb/core/hub.c:5740 #3: ffff88802192c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #3: ffff88802192c190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2229 #4: ffff88802b0ac118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #4: ffff88802b0ac118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1063 [inline] #4: ffff88802b0ac118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1260 1 lock held by khungtaskd/28: #0: ffffffff8c794880 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x2d4 kernel/locking/lockdep.c:6544 2 locks held by kworker/u4:4/56: #0: ffff8880b993c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2f/0x120 kernel/sched/core.c:539 #1: ffff8880188148b0 (&mm->cid_lock){....}-{2:2}, at: mm_cid_get kernel/sched/sched.h:3299 [inline] #1: ffff8880188148b0 (&mm->cid_lock){....}-{2:2}, at: switch_mm_cid kernel/sched/sched.h:3321 [inline] #1: ffff8880188148b0 (&mm->cid_lock){....}-{2:2}, at: prepare_task_switch kernel/sched/core.c:5111 [inline] #1: ffff8880188148b0 (&mm->cid_lock){....}-{2:2}, at: context_switch kernel/sched/core.c:5252 [inline] #1: ffff8880188148b0 (&mm->cid_lock){....}-{2:2}, at: __schedule+0x2b2e/0x5a70 kernel/sched/core.c:6619 5 locks held by kworker/1:2/898: #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc90004d2fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffff8881473d1190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff8881473d1190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4840 drivers/usb/core/hub.c:5740 #3: ffff888021d0d190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #3: ffff888021d0d190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2229 #4: ffff88807832a118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #4: ffff88807832a118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1063 [inline] #4: ffff88807832a118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1260 5 locks held by kworker/0:2/900: #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc9000485fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffff8881473b9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff8881473b9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4840 drivers/usb/core/hub.c:5740 #3: ffff88802a59b190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #3: ffff88802a59b190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2229 #4: ffff888027fc8118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #4: ffff888027fc8118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1063 [inline] #4: ffff888027fc8118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1260 2 locks held by dhcpcd/4653: #0: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x1c4/0x1df0 net/ipv4/devinet.c:1071 #1: ffff888021f7cdf0 (&padapter->mutex_start){+.+.}-{3:3}, at: netdev_open+0x32/0x6a0 drivers/staging/rtl8712/os_intfs.c:391 2 locks held by getty/4757: #0: ffff88802753c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244 #1: ffffc900015a02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177 6 locks held by kworker/0:1/5158: #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc9000404fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffff8880216d9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff8880216d9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4840 drivers/usb/core/hub.c:5740 #3: ffff88807bfd5190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #3: ffff88807bfd5190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2229 #4: ffff88802b6b7118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #4: ffff88802b6b7118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1063 [inline] #4: ffff88802b6b7118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1260 #5: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdev+0x12/0x30 net/core/dev.c:10912 3 locks held by kworker/0:3/5160: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc9000405fda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 5 locks held by kworker/1:1/5162: #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc9000407fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffff8881473e1190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff8881473e1190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4840 drivers/usb/core/hub.c:5740 #3: ffff88802038c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #3: ffff88802038c190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2229 #4: ffff8880275cb118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #4: ffff8880275cb118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1063 [inline] #4: ffff8880275cb118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1260 3 locks held by udevd/5163: #0: ffff88801f88c088 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline] #0: ffff88801f88c088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x18e/0x690 fs/kernfs/file.c:280 #1: ffff888028272a00 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline] #1: ffff888028272a00 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x1b1/0x690 fs/kernfs/file.c:280 #2: ffff88802192c190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline] #2: ffff88802192c190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x40/0x2c0 drivers/usb/core/sysfs.c:874 3 locks held by kworker/1:3/5165: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc900040afda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by kworker/1:4/5167: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc900040bfda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by udevd/5169: #0: ffff88802973d488 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline] #0: ffff88802973d488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x18e/0x690 fs/kernfs/file.c:280 #1: ffff88802886c578 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline] #1: ffff88802886c578 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x1b1/0x690 fs/kernfs/file.c:280 #2: ffff88802038c190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline] #2: ffff88802038c190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x40/0x2c0 drivers/usb/core/sysfs.c:874 3 locks held by udevd/5171: #0: ffff88801d105c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline] #0: ffff88801d105c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x18e/0x690 fs/kernfs/file.c:280 #1: ffff888026a853a8 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline] #1: ffff888026a853a8 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x1b1/0x690 fs/kernfs/file.c:280 #2: ffff88807bfd5190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline] #2: ffff88807bfd5190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x40/0x2c0 drivers/usb/core/sysfs.c:874 3 locks held by kworker/0:6/5180: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc90004147da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by kworker/0:7/5181: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc90004157da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by kworker/1:5/5182: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc90004167da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by kworker/0:8/5228: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc9000410fda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by kworker/0:9/5229: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc9000424fda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by kworker/1:7/5247: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc90004297da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by kworker/1:8/5281: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc900042f7da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by kworker/1:9/5282: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc900042e7da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by kworker/1:10/5283: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc9000434fda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by kworker/1:11/5285: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc9000436fda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by kworker/1:12/5286: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc9000437fda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by kworker/0:11/5330: #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc90004137da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171 3 locks held by udevd/5504: #0: ffff88802a67c888 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline] #0: ffff88802a67c888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x18e/0x690 fs/kernfs/file.c:280 #1: ffff88807df38e88 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline] #1: ffff88807df38e88 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x1b1/0x690 fs/kernfs/file.c:280 #2: ffff888021d0d190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline] #2: ffff888021d0d190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x40/0x2c0 drivers/usb/core/sysfs.c:874 3 locks held by udevd/5505: #0: ffff88801ff79c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline] #0: ffff88801ff79c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x18e/0x690 fs/kernfs/file.c:280 #1: ffff888028892cb8 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline] #1: ffff888028892cb8 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x1b1/0x690 fs/kernfs/file.c:280 #2: ffff88802a59b190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline] #2: ffff88802a59b190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x40/0x2c0 drivers/usb/core/sysfs.c:874 3 locks held by kworker/1:13/8432: #0: ffff888027230138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888027230138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888027230138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888027230138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888027230138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888027230138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361 #1: ffffc9000c357da8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 net/ipv6/addrconf.c:4624 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc5-next-20230123-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x24/0x18a lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x32f/0x3c0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline] watchdog+0xcae/0x1050 kernel/hung_task.c:377 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 56 Comm: kworker/u4:4 Not tainted 6.2.0-rc5-next-20230123-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:26 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:67 [inline] RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:127 [inline] RIP: 0010:lock_is_held_type+0xee/0x140 kernel/locking/lockdep.c:5763 Code: c0 45 31 ed 44 39 f0 41 0f 94 c5 48 c7 c7 e0 61 4c 8a e8 35 15 00 00 b8 ff ff ff ff 65 0f c1 05 98 96 fd 75 83 f8 01 75 29 9c <58> f6 c4 02 75 3d 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 44 RSP: 0018:ffffc90001577920 EFLAGS: 00000046 RAX: 0000000000000001 RBX: 0000000000000006 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 RBP: ffffffff8c7947c0 R08: 0000000000000000 R09: ffffffff8e7425d7 R10: fffffbfff1ce84ba R11: 0000000000000000 R12: ffff888017f4d7c0 R13: 0000000000000000 R14: 00000000ffffffff R15: ffff888017f4e2c0 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fdb850890f0 CR3: 0000000012463000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_is_held include/linux/lockdep.h:288 [inline] rcu_read_lock_sched_held+0x3e/0x70 kernel/rcu/update.c:125 trace_tlb_flush include/trace/events/tlb.h:38 [inline] trace_tlb_flush+0x1b1/0x240 include/trace/events/tlb.h:38 switch_mm_irqs_off+0x668/0xbe0 arch/x86/mm/tlb.c:630 use_temporary_mm arch/x86/kernel/alternative.c:1494 [inline] __text_poke+0x2f7/0x8e0 arch/x86/kernel/alternative.c:1605 text_poke arch/x86/kernel/alternative.c:1669 [inline] text_poke_bp_batch+0x445/0x6b0 arch/x86/kernel/alternative.c:2025 text_poke_flush arch/x86/kernel/alternative.c:2129 [inline] text_poke_flush arch/x86/kernel/alternative.c:2126 [inline] text_poke_finish+0x1a/0x30 arch/x86/kernel/alternative.c:2136 arch_jump_label_transform_apply+0x17/0x30 arch/x86/kernel/jump_label.c:146 jump_label_update+0x32f/0x410 kernel/jump_label.c:829 static_key_enable_cpuslocked+0x1b5/0x270 kernel/jump_label.c:205 static_key_enable+0x1a/0x20 kernel/jump_label.c:218 toggle_allocation_gate mm/kfence/core.c:799 [inline] toggle_allocation_gate+0xf8/0x230 mm/kfence/core.c:791 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390 worker_thread+0x669/0x1090 kernel/workqueue.c:2537 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308