rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-...D } 2665 jiffies s: 35689 root: 0x2/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 0 to CPUs 1: __do_sys_wait4+0x13f/0x150 kernel/exit.c:1734 NMI backtrace for cpu 1 CPU: 1 PID: 17975 Comm: syz-executor.1 Not tainted 6.1.0-rc6-syzkaller-00315-gfaf68e3523c2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:__sanitizer_cov_trace_switch+0x16/0x90 kernel/kcov.c:323 Code: 89 fe bf 07 00 00 00 e9 78 fe ff ff 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 56 41 55 41 54 49 89 fc 55 48 89 f5 53 48 8b 46 08 <48> 83 f8 20 74 63 77 44 48 83 f8 08 74 53 48 83 f8 10 75 2f 41 bd RSP: 0018:ffffc900001dfce0 EFLAGS: 00000046 RAX: 0000000000000008 RBX: 000000000000006c RCX: 0000000000000004 RDX: 1ffffffff149a200 RSI: ffffffff8b867d00 RDI: 0000000000000075 RBP: ffffffff8b867d00 R08: 0000000000000000 R09: 0000000000000075 R10: 000000000000006c R11: 0000000000000001 R12: 0000000000000075 R13: ffffffff8a4d1001 R14: 1ffff9200003bfa5 R15: 0000000000000001 FS: 00007facfaf9b700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f19195a7580 CR3: 000000007ee2c000 CR4: 00000000003526e0 Call Trace: format_decode+0x3e0/0xb50 lib/vsprintf.c:2610 vsnprintf+0x15d/0x16b0 lib/vsprintf.c:2752 sprintf+0xc4/0x100 lib/vsprintf.c:3004 print_time kernel/printk/printk.c:1274 [inline] info_print_prefix+0x248/0x340 kernel/printk/printk.c:1300 record_print_text+0x14d/0x3e0 kernel/printk/printk.c:1349 console_emit_next_record.constprop.0+0x6bf/0x840 kernel/printk/printk.c:2714 console_flush_all kernel/printk/printk.c:2793 [inline] console_unlock+0x3c2/0x600 kernel/printk/printk.c:2860 vprintk_emit+0x1bd/0x600 kernel/printk/printk.c:2268 vprintk+0x84/0xa0 kernel/printk/printk_safe.c:50 _printk+0xbe/0xf1 kernel/printk/printk.c:2289 printk_stack_address arch/x86/kernel/dumpstack.c:72 [inline] show_trace_log_lvl+0x221/0x2ba arch/x86/kernel/dumpstack.c:282 sched_show_task kernel/sched/core.c:8897 [inline] sched_show_task+0x450/0x5c0 kernel/sched/core.c:8871 show_state_filter+0xf4/0x310 kernel/sched/core.c:8942 k_spec drivers/tty/vt/keyboard.c:667 [inline] k_spec+0xe5/0x140 drivers/tty/vt/keyboard.c:656 kbd_keycode drivers/tty/vt/keyboard.c:1524 [inline] kbd_event+0xce1/0x1790 drivers/tty/vt/keyboard.c:1543 input_to_handler+0x3b9/0x4c0 drivers/input/input.c:130 input_pass_values.part.0+0x230/0x710 drivers/input/input.c:159 input_pass_values drivers/input/input.c:146 [inline] input_event_dispose+0x5cf/0x730 drivers/input/input.c:374 input_handle_event+0x120/0xe70 drivers/input/input.c:402 input_event drivers/input/input.c:431 [inline] input_event+0x83/0xa0 drivers/input/input.c:423 input_sync include/linux/input.h:450 [inline] hidinput_report_event+0xb2/0x100 drivers/hid/hid-input.c:1655 hid_report_raw_event+0x33c/0x1270 drivers/hid/hid-core.c:2005 hid_input_report+0x363/0x4d0 drivers/hid/hid-core.c:2066 hid_irq_in+0x50f/0x690 drivers/hid/usbhid/hid-core.c:284 __usb_hcd_giveback_urb+0x2b0/0x5c0 drivers/usb/core/hcd.c:1671 usb_hcd_giveback_urb+0x384/0x430 drivers/usb/core/hcd.c:1754 dummy_timer+0x1203/0x32d0 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x1da/0x7c0 kernel/time/timer.c:1474 expire_timers kernel/time/timer.c:1519 [inline] __run_timers.part.0+0x6a2/0xaf0 kernel/time/timer.c:1790 __run_timers kernel/time/timer.c:1768 [inline] run_timer_softirq+0xb7/0x1d0 kernel/time/timer.c:1803 __do_softirq+0x1fb/0xadc kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650 irq_exit_rcu+0x9/0x20 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x97/0xc0 arch/x86/kernel/apic/apic.c:1107 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:mt_slot+0xa6/0x170 lib/maple_tree.c:808 Code: 28 e2 f7 48 8d 7b 18 be ff ff ff ff e8 b3 33 4f 00 31 ff 89 c3 89 c6 e8 b8 24 e2 f7 85 db 74 37 e8 ff 27 e2 f7 4c 89 e0 5b 5d <41> 5c c3 e8 f2 27 e2 f7 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 RSP: 0018:ffffc9000ad97b18 EFLAGS: 00000212 RAX: ffff8880742e66c0 RBX: ffff88807d018658 RCX: ffffc9000c32a000 RDX: 0000000000040000 RSI: ffffffff899df121 RDI: 0000000000000005 RBP: ffffc9000ad97ca8 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880742e66c0 R13: 00007facfa3d0fff R14: 000000000000000f R15: 000000000000000a mas_slot lib/maple_tree.c:835 [inline] mas_next_nentry+0x7c5/0xab0 lib/maple_tree.c:4689 mas_next_entry lib/maple_tree.c:4751 [inline] mas_find+0x1da/0xd10 lib/maple_tree.c:6014 mm_take_all_locks+0x171/0x880 mm/mmap.c:3553 __mmu_notifier_register+0x548/0x6f0 mm/mmu_notifier.c:657 mmu_notifier_register+0x3c/0xa0 mm/mmu_notifier.c:728 kvm_init_mmu_notifier arch/x86/kvm/../../../virt/kvm/kvm_main.c:913 [inline] kvm_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:1215 [inline] kvm_dev_ioctl_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:4931 [inline] kvm_dev_ioctl+0xed3/0x1d20 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4973 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7facfa28c0d9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007facfaf9b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007facfa3abf80 RCX: 00007facfa28c0d9 RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 RBP: 00007facfa2e7ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007facfa4cfb1f R14: 00007facfaf9b300 R15: 0000000000022000 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f1134c89cb7 RSP: 002b:00007ffec3ff4360 EFLAGS: 00000293 ORIG_RAX: 000000000000003d RAX: ffffffffffffffda RBX: 0000000000000e62 RCX: 00007f1134c89cb7 RDX: 0000000040000000 RSI: 00007ffec3ff439c RDI: 00000000ffffffff RBP: 00007ffec3ff439c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 00007ffec3ff4490 R14: 00007f1134dac9d8 R15: 000000000000000c task:kworker/u5:4 state:I stack:27656 pid:3676 ppid:2 flags:0x00004000 Workqueue: 0x0 (hci4) Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 worker_thread+0x160/0x1090 kernel/workqueue.c:2457 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:kworker/u5:5 state:I stack:28032 pid:3680 ppid:2 flags:0x00004000 Workqueue: 0x0 (hci2) Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 worker_thread+0x160/0x1090 kernel/workqueue.c:2457 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:syz-executor.0 state:S stack:23096 pid:3681 ppid:3660 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 do_wait+0x730/0xd70 kernel/exit.c:1562 kernel_wait4+0x150/0x260 kernel/exit.c:1706 __do_sys_wait4+0x13f/0x150 kernel/exit.c:1734 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fe664689cb7 RSP: 002b:00007fe6648cfd50 EFLAGS: 00000293 ORIG_RAX: 000000000000003d RAX: ffffffffffffffda RBX: 0000000000000940 RCX: 00007fe664689cb7 RDX: 0000000040000000 RSI: 00007fe6648cfddc RDI: 00000000ffffffff RBP: 00007fe6648cfddc R08: 0000000000000000 R09: 00007fe6648cfc10 R10: 0000000000000000 R11: 0000000000000293 R12: 0000555557222810 R13: 0000555557222883 R14: 0000000000000005 R15: 00007fe6648cfe40 task:syz-executor.3 state:D stack:24464 pid:3682 ppid:3667 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 synchronize_rcu_expedited+0x39f/0x780 kernel/rcu/tree_exp.h:961 namespace_unlock+0x1af/0x410 fs/namespace.c:1497 do_umount fs/namespace.c:1720 [inline] path_umount+0x67b/0x10b0 fs/namespace.c:1802 ksys_umount fs/namespace.c:1825 [inline] __do_sys_umount fs/namespace.c:1830 [inline] __se_sys_umount fs/namespace.c:1828 [inline] __x64_sys_umount+0x15d/0x190 fs/namespace.c:1828 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f1134c8d547 RSP: 002b:00007f1134ecec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: ffffffffffffffda RBX: 0000000000000a6f RCX: 00007f1134c8d547 RDX: 00007f1134eced4b RSI: 000000000000000a RDI: 00007f1134eced40 RBP: 00007f1134eced40 R08: 00000000ffffffff R09: 00007f1134eceb10 R10: 0000555556933883 R11: 0000000000000246 R12: 00007f1134ce6b24 R13: 00007f1134ecfe00 R14: 0000555556933810 R15: 00007f1134ecfe40 task:syz-executor.5 state:S stack:24288 pid:3683 ppid:3662 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 do_wait+0x730/0xd70 kernel/exit.c:1562 kernel_wait4+0x150/0x260 kernel/exit.c:1706 __do_sys_wait4+0x13f/0x150 kernel/exit.c:1734 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f1919489cb7 RSP: 002b:00007f19196cfd50 EFLAGS: 00000293 ORIG_RAX: 000000000000003d RAX: ffffffffffffffda RBX: 000000000000085f RCX: 00007f1919489cb7 RDX: 0000000040000000 RSI: 00007f19196cfddc RDI: 00000000ffffffff RBP: 00007f19196cfddc R08: 0000000000000000 R09: 00007f19196cfc10 R10: 0000000000000000 R11: 0000000000000293 R12: 0000555555c61810 R13: 0000555555c61883 R14: 0000000000000005 R15: 00007f19196cfe40 task:kworker/1:3 state:I stack:21648 pid:3684 ppid:2 flags:0x00004000 Workqueue: 0x0 (rcu_gp) Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 worker_thread+0x160/0x1090 kernel/workqueue.c:2457 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:syz-executor.1 state:S stack:24632 pid:3687 ppid:3664 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 do_wait+0x730/0xd70 kernel/exit.c:1562 kernel_wait4+0x150/0x260 kernel/exit.c:1706 __do_sys_wait4+0x13f/0x150 kernel/exit.c:1734 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7facfa289cb7 RSP: 002b:00007facfa4cfd50 EFLAGS: 00000293 ORIG_RAX: 000000000000003d RAX: ffffffffffffffda RBX: 00000000000003c9 RCX: 00007facfa289cb7 RDX: 0000000040000000 RSI: 00007facfa4cfddc RDI: 00000000ffffffff RBP: 00007facfa4cfddc R08: 0000000000000000 R09: 00007facfa4cfc10 R10: 0000000000000000 R11: 0000000000000293 R12: 0000555556810810 R13: 0000555556810883 R14: 0000000000000005 R15: 00007facfa4cfe40 task:syz-executor.2 state:S stack:23408 pid:3688 ppid:3661 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 pipe_read+0xa87/0x1110 fs/pipe.c:378 call_read_iter include/linux/fs.h:2185 [inline] new_sync_read fs/read_write.c:389 [inline] vfs_read+0x7fa/0x930 fs/read_write.c:470 ksys_read+0x1ec/0x250 fs/read_write.c:613 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f76cf63defc RSP: 002b:00007f76cf8cfd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00007f76cf8cfe00 RCX: 00007f76cf63defc RDX: 0000000000000040 RSI: 00007f76cf7a8020 RDI: 00000000000000f9 RBP: 0000000000000003 R08: 0000000000000000 R09: ffff000000000000 R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000061 R13: 000000000011912f R14: 0000000000000000 R15: 00007f76cf8cfe40 task:syz-executor.4 state:S stack:23400 pid:3689 ppid:3666 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 pipe_read+0xa87/0x1110 fs/pipe.c:378 call_read_iter include/linux/fs.h:2185 [inline] new_sync_read fs/read_write.c:389 [inline] vfs_read+0x7fa/0x930 fs/read_write.c:470 ksys_read+0x1ec/0x250 fs/read_write.c:613 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fea3543defc RSP: 002b:00007fea356cfd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00007fea356cfe00 RCX: 00007fea3543defc RDX: 0000000000000040 RSI: 00007fea355a8020 RDI: 00000000000000f9 RBP: 0000000000000003 R08: 0000000000000000 R09: ffff000000000000 R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000032 R13: 0000000000119ac7 R14: 0000000000000006 R15: 00007fea356cfe40 task:bond0 state:I stack:29872 pid:3690 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:bond0 state:I stack:29936 pid:3691 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:bond0 state:I stack:30616 pid:3693 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:bond0 state:I stack:29944 pid:3695 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:bond0 state:I stack:29944 pid:3696 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:bond0 state:I stack:30616 pid:3700 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg0 state:I stack:29664 pid:3701 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg1 state:I stack:29664 pid:3702 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg0 state:I stack:29664 pid:3703 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg1 state:I stack:30616 pid:3705 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg2 state:I stack:29664 pid:3706 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg0 state:I stack:30616 pid:3707 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg2 state:I stack:30616 pid:3708 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg1 state:I stack:29664 pid:3709 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg0 state:I stack:29944 pid:3710 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg2 state:I stack:29944 pid:3711 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg0 state:I stack:29936 pid:3712 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg1 state:I stack:29664 pid:3713 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg1 state:I stack:29936 pid:3714 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg2 state:I stack:29872 pid:3715 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg2 state:I stack:29936 pid:3716 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg0 state:I stack:29856 pid:3717 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg1 state:I stack:29856 pid:3718 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:wg-crypt-wg2 state:I stack:30616 pid:3719 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:kworker/1:4 state:I stack:21976 pid:3721 ppid:2 flags:0x00004000 Workqueue: 0x0 (wg-crypt-wg2) Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 worker_thread+0x160/0x1090 kernel/workqueue.c:2457 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:kworker/1:6 state:R running task stack:22056 pid:3725 ppid:2 flags:0x00004000 Workqueue: 0x0 (events) Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 worker_thread+0x160/0x1090 kernel/workqueue.c:2457 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:kworker/u4:6 state:I stack:26456 pid:4382 ppid:2 flags:0x00004000 Workqueue: 0x0 (bat_events) Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 worker_thread+0x160/0x1090 kernel/workqueue.c:2457 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:kworker/u4:7 state:I stack:26456 pid:4588 ppid:2 flags:0x00004000 Workqueue: 0x0 (bat_events) Call Trace: task:kworker/u4:9 state:I stack:27176 pid:4740 ppid:2 flags:0x00004000 Workqueue: 0x0 (phy11) Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 worker_thread+0x160/0x1090 kernel/workqueue.c:2457 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:bond1 state:I stack:30344 pid:4755 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:kworker/1:8 state:I stack:22152 pid:4779 ppid:2 flags:0x00004000 Workqueue: 0x0 (wg-crypt-wg1) Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 worker_thread+0x160/0x1090 kernel/workqueue.c:2457 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:bond2 state:I stack:30616 pid:4801 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:bond1 state:I stack:30616 pid:4809 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:kworker/1:9 state:I stack:21608 pid:5066 ppid:2 flags:0x00004000 Workqueue: 0x0 (events) Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 worker_thread+0x160/0x1090 kernel/workqueue.c:2457 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:kworker/u4:10 state:D stack:26776 pid:5084 ppid:2 flags:0x00004000 Workqueue: events_unbound io_ring_exit_work Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 task:kworker/0:12 state:D stack:22272 pid:5275 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 schedule_timeout+0x1df/0x2a0 kernel/time/timer.c:1911 ___down_common kernel/locking/semaphore.c:225 [inline] __down_common+0x3b2/0x8a0 kernel/locking/semaphore.c:246 down+0x74/0xa0 kernel/locking/semaphore.c:63 hid_device_remove+0x29/0x200 drivers/hid/hid-core.c:2623 device_remove+0xc8/0x170 drivers/base/dd.c:548 __device_release_driver drivers/base/dd.c:1249 [inline] device_release_driver_internal+0x4a5/0x700 drivers/base/dd.c:1275 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:529 device_del+0x4f7/0xc80 drivers/base/core.c:3704 hid_remove_device drivers/hid/hid-core.c:2800 [inline] hid_destroy_device+0xe5/0x150 drivers/hid/hid-core.c:2819 usbhid_disconnect+0xa3/0xe0 drivers/hid/usbhid/hid-core.c:1451 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458 device_remove drivers/base/dd.c:550 [inline] device_remove+0x11f/0x170 drivers/base/dd.c:542 __device_release_driver drivers/base/dd.c:1249 [inline] device_release_driver_internal+0x4a5/0x700 drivers/base/dd.c:1275 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:529 device_del+0x4f7/0xc80 drivers/base/core.c:3704 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1419 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2235 hub_port_connect drivers/usb/core/hub.c:5197 [inline] hub_port_connect_change drivers/usb/core/hub.c:5497 [inline] port_event drivers/usb/core/hub.c:5653 [inline] hub_event+0x1f8a/0x45d0 drivers/usb/core/hub.c:5735 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x669/0x1090 kernel/workqueue.c:2436 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:kworker/0:13 state:I stack:21992 pid:5276 ppid:2 flags:0x00004000 Workqueue: 0x0 (rcu_gp) Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 worker_thread+0x160/0x1090 kernel/workqueue.c:2457 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:kworker/0:15 state:I stack:21984 pid:5283 ppid:2 flags:0x00004000 Workqueue: 0x0 (wg-crypt-wg1) Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 worker_thread+0x160/0x1090 kernel/workqueue.c:2457 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:kworker/0:16 state:D stack:22584 pid:5284 ppid:2 flags:0x00004000 Workqueue: rcu_gp wait_rcu_exp_gp Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 schedule_timeout+0x14e/0x2a0 kernel/time/timer.c:1935 synchronize_rcu_expedited_wait_once kernel/rcu/tree_exp.h:571 [inline] synchronize_rcu_expedited_wait kernel/rcu/tree_exp.h:622 [inline] rcu_exp_wait_wake+0x28f/0xf20 kernel/rcu/tree_exp.h:688 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x669/0x1090 kernel/workqueue.c:2436 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:bond1 state:I stack:30616 pid:5814 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:bond2 state:I stack:30616 pid:5818 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:bond3 state:I stack:30344 pid:5821 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:kworker/u4:0 state:D stack:27176 pid:17545 ppid:2 flags:0x00004000 Workqueue: events_unbound io_ring_exit_work Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 schedule_timeout+0x14e/0x2a0 kernel/time/timer.c:1935 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106 io_ring_exit_work+0x2af/0xc32 io_uring/io_uring.c:2763 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x669/0x1090 kernel/workqueue.c:2436 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:rcK state:S stack:25856 pid:17971 ppid:1 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 pipe_read+0xa87/0x1110 fs/pipe.c:378 call_read_iter include/linux/fs.h:2185 [inline] new_sync_read fs/read_write.c:389 [inline] vfs_read+0x7fa/0x930 fs/read_write.c:470 ksys_read+0x1ec/0x250 fs/read_write.c:613 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f46f49e18fe RSP: 002b:00007ffc6eeb0fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f46f49e18fe RDX: 0000000000000080 RSI: 00007ffc6eeb1068 RDI: 0000000000000003 RBP: 00007ffc6eeb1068 R08: 0000000000000000 R09: 00007f46f4ab1a60 R10: 00007f46f4855ad0 R11: 0000000000000246 R12: 0000000000000080 R13: 00007f46f4855788 R14: 0000000000000001 R15: 0000000000000000 task:syz-executor.5 state:D stack:28232 pid:17972 ppid:3683 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 mmap_read_lock include/linux/mmap_lock.h:117 [inline] exit_mm kernel/exit.c:492 [inline] do_exit+0x921/0x2a30 kernel/exit.c:807 do_group_exit+0xd4/0x2a0 kernel/exit.c:950 get_signal+0x21b1/0x2440 kernel/signal.c:2858 arch_do_signal_or_restart+0x86/0x2300 arch/x86/kernel/signal.c:869 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f191948c0d9 RSP: 002b:00007f19196cfb98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffdfc RBX: 00007f19195abf8c RCX: 00007f191948c0d9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f19195abf8c RBP: 00007f19195abf80 R08: 00007ffeb61f9080 R09: 0000000000000000 R10: 00007f19196cfc80 R11: 0000000000000246 R12: 0000000000118ceb R13: 00007f19196cfc80 R14: 00007f19196cfca0 R15: 0000000000000032 task:syz-executor.5 state:D stack:28440 pid:17977 ppid:3683 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6656 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0xa48/0x1360 kernel/locking/mutex.c:747 mm_take_all_locks+0x14f/0x880 mm/mmap.c:3551 __mmu_notifier_register+0x548/0x6f0 mm/mmu_notifier.c:657 mmu_notifier_register+0x3c/0xa0 mm/mmu_notifier.c:728 kvm_init_mmu_notifier arch/x86/kvm/../../../virt/kvm/kvm_main.c:913 [inline] kvm_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:1215 [inline] kvm_dev_ioctl_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:4931 [inline] kvm_dev_ioctl+0xed3/0x1d20 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4973 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f191948c0d9 RSP: 002b:00007f191a17c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f19195abf80 RCX: 00007f191948c0d9 RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 RBP: 00007f19194e7ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f19196cfb1f R14: 00007f191a17c300 R15: 0000000000022000 task:syz-executor.1 state:D stack:28232 pid:17973 ppid:3687 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 mmap_read_lock include/linux/mmap_lock.h:117 [inline] exit_mm kernel/exit.c:492 [inline] do_exit+0x921/0x2a30 kernel/exit.c:807 do_group_exit+0xd4/0x2a0 kernel/exit.c:950 get_signal+0x21b1/0x2440 kernel/signal.c:2858 arch_do_signal_or_restart+0x86/0x2300 arch/x86/kernel/signal.c:869 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7facfa28c0d9 RSP: 002b:00007facfa4cfb98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffdfc RBX: 00007facfa3abf8c RCX: 00007facfa28c0d9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007facfa3abf8c RBP: 00007facfa3abf80 R08: 00007fffadfd5080 R09: 0000000000000000 R10: 00007facfa4cfc80 R11: 0000000000000246 R12: 0000000000118ce9 R13: 00007facfa4cfc80 R14: 00007facfa4cfca0 R15: 0000000000000032 task:syz-executor.1 state:R running task stack:28440 pid:17975 ppid:3687 flags:0x0000400c Call Trace: sched_show_task kernel/sched/core.c:8897 [inline] sched_show_task+0x450/0x5c0 kernel/sched/core.c:8871 show_state_filter+0xf4/0x310 kernel/sched/core.c:8942 k_spec drivers/tty/vt/keyboard.c:667 [inline] k_spec+0xe5/0x140 drivers/tty/vt/keyboard.c:656 kbd_keycode drivers/tty/vt/keyboard.c:1524 [inline] kbd_event+0xce1/0x1790 drivers/tty/vt/keyboard.c:1543 input_to_handler+0x3b9/0x4c0 drivers/input/input.c:130 input_pass_values.part.0+0x230/0x710 drivers/input/input.c:159 input_pass_values drivers/input/input.c:146 [inline] input_event_dispose+0x5cf/0x730 drivers/input/input.c:374 input_handle_event+0x120/0xe70 drivers/input/input.c:402 input_event drivers/input/input.c:431 [inline] input_event+0x83/0xa0 drivers/input/input.c:423 input_sync include/linux/input.h:450 [inline] hidinput_report_event+0xb2/0x100 drivers/hid/hid-input.c:1655 hid_report_raw_event+0x33c/0x1270 drivers/hid/hid-core.c:2005 hid_input_report+0x363/0x4d0 drivers/hid/hid-core.c:2066 hid_irq_in+0x50f/0x690 drivers/hid/usbhid/hid-core.c:284 __usb_hcd_giveback_urb+0x2b0/0x5c0 drivers/usb/core/hcd.c:1671 usb_hcd_giveback_urb+0x384/0x430 drivers/usb/core/hcd.c:1754 dummy_timer+0x1203/0x32d0 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x1da/0x7c0 kernel/time/timer.c:1474 expire_timers kernel/time/timer.c:1519 [inline] __run_timers.part.0+0x6a2/0xaf0 kernel/time/timer.c:1790 __run_timers kernel/time/timer.c:1768 [inline] run_timer_softirq+0xb7/0x1d0 kernel/time/timer.c:1803 __do_softirq+0x1fb/0xadc kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650 irq_exit_rcu+0x9/0x20 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x97/0xc0 arch/x86/kernel/apic/apic.c:1107 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:mt_slot+0xa6/0x170 lib/maple_tree.c:808 Code: 28 e2 f7 48 8d 7b 18 be ff ff ff ff e8 b3 33 4f 00 31 ff 89 c3 89 c6 e8 b8 24 e2 f7 85 db 74 37 e8 ff 27 e2 f7 4c 89 e0 5b 5d <41> 5c c3 e8 f2 27 e2 f7 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 RSP: 0018:ffffc9000ad97b18 EFLAGS: 00000212 RAX: ffff8880742e66c0 RBX: ffff88807d018658 RCX: ffffc9000c32a000 RDX: 0000000000040000 RSI: ffffffff899df121 RDI: 0000000000000005 RBP: ffffc9000ad97ca8 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880742e66c0 R13: 00007facfa3d0fff R14: 000000000000000f R15: 000000000000000a mas_slot lib/maple_tree.c:835 [inline] mas_next_nentry+0x7c5/0xab0 lib/maple_tree.c:4689 mas_next_entry lib/maple_tree.c:4751 [inline] mas_find+0x1da/0xd10 lib/maple_tree.c:6014 mm_take_all_locks+0x171/0x880 mm/mmap.c:3553 __mmu_notifier_register+0x548/0x6f0 mm/mmu_notifier.c:657 mmu_notifier_register+0x3c/0xa0 mm/mmu_notifier.c:728 kvm_init_mmu_notifier arch/x86/kvm/../../../virt/kvm/kvm_main.c:913 [inline] kvm_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:1215 [inline] kvm_dev_ioctl_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:4931 [inline] kvm_dev_ioctl+0xed3/0x1d20 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4973 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7facfa28c0d9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007facfaf9b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007facfa3abf80 RCX: 00007facfa28c0d9 RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 RBP: 00007facfa2e7ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007facfa4cfb1f R14: 00007facfaf9b300 R15: 0000000000022000 task:kvm state:I stack:29664 pid:17976 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:kvm state:I stack:30616 pid:17978 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:rcK state:D stack:25856 pid:17983 ppid:17971 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 io_schedule+0xbe/0x130 kernel/sched/core.c:8741 folio_wait_bit_common+0x394/0x9b0 mm/filemap.c:1296 folio_put_wait_locked mm/filemap.c:1465 [inline] filemap_update_page mm/filemap.c:2472 [inline] filemap_get_pages+0x1217/0x16b0 mm/filemap.c:2605 filemap_read+0x315/0xc00 mm/filemap.c:2675 generic_file_read_iter+0x3b4/0x5a0 mm/filemap.c:2821 ext4_file_read_iter+0x1d9/0x690 fs/ext4/file.c:147 __kernel_read+0x2ca/0x7c0 fs/read_write.c:428 kernel_read+0xc3/0x1c0 fs/read_write.c:446 prepare_binprm fs/exec.c:1657 [inline] search_binary_handler fs/exec.c:1711 [inline] exec_binprm fs/exec.c:1768 [inline] bprm_execve fs/exec.c:1837 [inline] bprm_execve+0x70e/0x19f0 fs/exec.c:1799 do_execveat_common+0x724/0x890 fs/exec.c:1942 do_execve fs/exec.c:2016 [inline] __do_sys_execve fs/exec.c:2092 [inline] __se_sys_execve fs/exec.c:2087 [inline] __x64_sys_execve+0x93/0xc0 fs/exec.c:2087 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f46f49bf337 RSP: 002b:00007ffc6eeb0e48 EFLAGS: 00000246 ORIG_RAX: 000000000000003b RAX: ffffffffffffffda RBX: 00005577f56eada8 RCX: 00007f46f49bf337 RDX: 00005577f56eae08 RSI: 00005577f56eada8 RDI: 00005577f56eae60 RBP: 00005577f56eae60 R08: 00005577f56eae65 R09: 00007f46f4ab1a60 R10: 00005577f56ead70 R11: 0000000000000246 R12: 00005577f56eae08 R13: 00007f46f4b64ff4 R14: 00005577f56eae08 R15: 0000000000000000 task:syz-executor.0 state:D stack:28112 pid:17988 ppid:3681 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 mmap_read_lock include/linux/mmap_lock.h:117 [inline] do_user_addr_fault+0xa51/0x1210 arch/x86/mm/fault.c:1379 handle_page_fault arch/x86/mm/fault.c:1519 [inline] exc_page_fault+0x98/0x170 arch/x86/mm/fault.c:1575 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570 RIP: 0033:0x7fe6646276c6 RSP: 002b:00007fe6648cfae8 EFLAGS: 00010287 RAX: 0000001b30824000 RBX: 00007fe6647ac018 RCX: 0000001b30820000 RDX: 0000001b30824004 RSI: 0000001b30823dd4 RDI: 000000009cde5433 RBP: 000000009cde5433 R08: 0000001b30c20000 R09: 000000009cde5437 R10: 00007ffe0a4bc090 R11: 0000000000036306 R12: 00007fe6647a0000 R13: 0000000000000001 R14: 0000000000000853 R15: ffffffff81c05f26 task:syz-executor.0 state:D stack:28040 pid:17990 ppid:3681 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6656 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0xa48/0x1360 kernel/locking/mutex.c:747 mm_take_all_locks+0x14f/0x880 mm/mmap.c:3551 __mmu_notifier_register+0x548/0x6f0 mm/mmu_notifier.c:657 mmu_notifier_register+0x3c/0xa0 mm/mmu_notifier.c:728 kvm_init_mmu_notifier arch/x86/kvm/../../../virt/kvm/kvm_main.c:913 [inline] kvm_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:1215 [inline] kvm_dev_ioctl_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:4931 [inline] kvm_dev_ioctl+0xed3/0x1d20 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4973 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fe66468c0d9 RSP: 002b:00007fe6653b7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fe6647abf80 RCX: 00007fe66468c0d9 RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 RBP: 00007fe6646e7ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fe6648cfb1f R14: 00007fe6653b7300 R15: 0000000000022000 task:syz-executor.0 state:D stack:27888 pid:17992 ppid:3681 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 mmap_read_lock include/linux/mmap_lock.h:117 [inline] exit_mm kernel/exit.c:492 [inline] do_exit+0x921/0x2a30 kernel/exit.c:807 do_group_exit+0xd4/0x2a0 kernel/exit.c:950 get_signal+0x21b1/0x2440 kernel/signal.c:2858 arch_do_signal_or_restart+0x86/0x2300 arch/x86/kernel/signal.c:869 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fe66468c0d9 RSP: 002b:00007fe665396218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007fe6647ac058 RCX: 00007fe66468c0d9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe6647ac058 RBP: 00007fe6647ac050 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6647ac05c R13: 00007fe6648cfb1f R14: 00007fe665396300 R15: 0000000000022000 task:kvm state:I stack:29856 pid:17991 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6521 schedule+0xde/0x1b0 kernel/sched/core.c:6597 rescuer_thread+0x784/0xcf0 kernel/workqueue.c:2599 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffffffff8c58f0f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by rcu_tasks_trace/13: #0: ffffffff8c58edf0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 2 locks held by kworker/u4:2/33: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc90000aa7da8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 1 lock held by khugepaged/35: #0: ffffffff8c6895e8 (lock#3){+.+.}-{3:3}, at: __lru_add_drain_all+0x62/0x7b0 mm/swap.c:873 2 locks held by kworker/u4:3/46: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc90000b77da8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 2 locks held by getty/3313: #0: ffff888028094098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244 #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177 1 lock held by syz-executor.3/3682: #0: ffffffff8c59a8f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:292 [inline] #0: ffffffff8c59a8f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x5df/0x780 kernel/rcu/tree_exp.h:946 2 locks held by kworker/u4:10/5084: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc90004e27da8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 6 locks held by kworker/0:12/5275: #0: ffff888012f09938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012f09938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012f09938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012f09938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888012f09938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888012f09938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc90006337da8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 #2: ffff888022064190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline] #2: ffff888022064190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x45d0 drivers/usb/core/hub.c:5681 #3: ffff88823bd24990 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline] #3: ffff88823bd24990 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2226 #4: ffff8880780f3118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline] #4: ffff8880780f3118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline] #4: ffff8880780f3118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x700 drivers/base/dd.c:1272 #5: ffff888077eada20 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline] #5: ffff888077eada20 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline] #5: ffff888077eada20 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x700 drivers/base/dd.c:1272 2 locks held by kworker/0:16/5284: #0: ffff888012066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888012066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888012066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc90008ccfda8 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 2 locks held by kworker/u4:0/17545: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc90004b6fda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 1 lock held by syz-executor.5/17972: #0: ffff88807c971718 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:117 [inline] #0: ffff88807c971718 (&mm->mmap_lock#2){++++}-{3:3}, at: exit_mm kernel/exit.c:492 [inline] #0: ffff88807c971718 (&mm->mmap_lock#2){++++}-{3:3}, at: do_exit+0x921/0x2a30 kernel/exit.c:807 2 locks held by syz-executor.5/17977: #0: ffff88807c971718 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:71 [inline] #0: ffff88807c971718 (&mm->mmap_lock#2){++++}-{3:3}, at: mmu_notifier_register+0x2a/0xa0 mm/mmu_notifier.c:727 #1: ffffffff8c6c2ee8 (mm_all_locks_mutex){+.+.}-{3:3}, at: mm_take_all_locks+0x14f/0x880 mm/mmap.c:3551 1 lock held by syz-executor.1/17973: #0: ffff88807c975858 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:117 [inline] #0: ffff88807c975858 (&mm->mmap_lock#2){++++}-{3:3}, at: exit_mm kernel/exit.c:492 [inline] #0: ffff88807c975858 (&mm->mmap_lock#2){++++}-{3:3}, at: do_exit+0x921/0x2a30 kernel/exit.c:807 7 locks held by syz-executor.1/17975: #0: ffff88807c975858 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:71 [inline] #0: ffff88807c975858 (&mm->mmap_lock#2){++++}-{3:3}, at: mmu_notifier_register+0x2a/0xa0 mm/mmu_notifier.c:727 #1: ffffffff8c6c2ee8 (mm_all_locks_mutex){+.+.}-{3:3}, at: mm_take_all_locks+0x14f/0x880 mm/mmap.c:3551 #2: ffffc900001e0d60 ((&dum_hcd->timer)){+.-.}-{0:0}, at: lockdep_copy_map include/linux/lockdep.h:31 [inline] #2: ffffc900001e0d60 ((&dum_hcd->timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x7c0 kernel/time/timer.c:1464 #3: ffff88807bbc4230 (&dev->event_lock#2){-.-.}-{2:2}, at: input_event drivers/input/input.c:430 [inline] #3: ffff88807bbc4230 (&dev->event_lock#2){-.-.}-{2:2}, at: input_event+0x70/0xa0 drivers/input/input.c:423 #4: ffffffff8c58fc40 (rcu_read_lock){....}-{1:2}, at: input_pass_values.part.0+0x0/0x710 drivers/input/input.c:2522 #5: ffffffff8d010598 (kbd_event_lock){..-.}-{2:2}, at: spin_lock include/linux/spinlock.h:350 [inline] #5: ffffffff8d010598 (kbd_event_lock){..-.}-{2:2}, at: kbd_event+0x8a/0x1790 drivers/tty/vt/keyboard.c:1537 #6: ffffffff8c58fc40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 kernel/locking/lockdep.c:6494 1 lock held by rcK/17983: #0: ffff888026cb8548 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1471 [inline] #0: ffff888026cb8548 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xb2/0x19f0 fs/exec.c:1805 1 lock held by syz-executor.0/17988: #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:117 [inline] #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: do_user_addr_fault+0xa51/0x1210 arch/x86/mm/fault.c:1379 2 locks held by syz-executor.0/17990: #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:71 [inline] #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: mmu_notifier_register+0x2a/0xa0 mm/mmu_notifier.c:727 #1: ffffffff8c6c2ee8 (mm_all_locks_mutex){+.+.}-{3:3}, at: mm_take_all_locks+0x14f/0x880 mm/mmap.c:3551 1 lock held by syz-executor.0/17992: #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:117 [inline] #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: exit_mm kernel/exit.c:492 [inline] #0: ffff88807486c298 (&mm->mmap_lock#2){++++}-{3:3}, at: do_exit+0x921/0x2a30 kernel/exit.c:807 ============================================= keytouch 0003:0926:3333.01A3: can't resubmit intr, dummy_hcd.2-1/input0, status -19