bridge0: port 1(bridge_slave_0) entered disabled state device bridge_slave_1 left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state device bridge_slave_0 left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state INFO: task syz-executor4:29515 blocked for more than 140 seconds. Not tainted 5.0.0-rc5 #60 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor4 D29856 29515 7799 0x20020000 Call Trace: context_switch kernel/sched/core.c:2844 [inline] __schedule+0x817/0x1cc0 kernel/sched/core.c:3485 schedule+0x92/0x180 kernel/sched/core.c:3529 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3587 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1310 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 mon_bin_compat_ioctl+0x186/0x3c0 drivers/usb/mon/mon_bin.c:1170 __do_compat_sys_ioctl fs/compat_ioctl.c:1052 [inline] __se_compat_sys_ioctl fs/compat_ioctl.c:998 [inline] __ia32_compat_sys_ioctl+0x197/0x620 fs/compat_ioctl.c:998 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x281/0xc98 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f0d869 Code: Bad RIP value. RSP: 002b:00000000f5ca60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c00c9207 RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Showing all locks held in the system: 4 locks held by kworker/u4:1/21: 1 lock held by khungtaskd/1040: #0: 000000001437bef2 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:4389 1 lock held by rsyslogd/7637: #0: 0000000066a18c65 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 fs/file.c:795 2 locks held by getty/7748: #0: 0000000050b79973 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 0000000019691d47 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 2 locks held by getty/7749: #0: 00000000517dd560 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 00000000a61069f5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 2 locks held by getty/7750: #0: 000000008d5ebd5e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 00000000fbeb6013 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 2 locks held by getty/7751: #0: 000000007ecc5ce2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 0000000092136b86 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 2 locks held by getty/7752: #0: 00000000b3720ad7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 000000000809f1ee (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 2 locks held by getty/7753: #0: 00000000cc5901ea (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 00000000d5e8fbed (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 2 locks held by getty/7754: #0: 0000000047216d6c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 0000000043cb66f3 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 2 locks held by kworker/0:9/11345: #0: 00000000e0518bfb ((wq_completion)"rcu_gp"){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000e0518bfb ((wq_completion)"rcu_gp"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000e0518bfb ((wq_completion)"rcu_gp"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000e0518bfb ((wq_completion)"rcu_gp"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 00000000e0518bfb ((wq_completion)"rcu_gp"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000e0518bfb ((wq_completion)"rcu_gp"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000e0518bfb ((wq_completion)"rcu_gp"){+.+.}, at: process_one_work+0x87e/0x1790 kernel/workqueue.c:2144 #1: 00000000e8a4558b ((work_completion)(&rew.rew_work)){+.+.}, at: process_one_work+0x8b4/0x1790 kernel/workqueue.c:2148 1 lock held by syz-executor4/11438: #0: 000000006a0b16f2 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/11450: #0: 00000000fd16334c (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/11779: #0: 00000000da2af65e (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/13322: #0: 000000000308e01f (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 3 locks held by kworker/1:6/14405: #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1790 kernel/workqueue.c:2144 #1: 00000000ee33d0da ((linkwatch_work).work){+.+.}, at: process_one_work+0x8b4/0x1790 kernel/workqueue.c:2148 #2: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77 1 lock held by syz-executor4/15039: #0: 000000001dd466fd (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/15079: #0: 0000000000779111 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/15097: #0: 00000000ccb34f68 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/15116: #0: 00000000707bd13d (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/15141: #0: 00000000b291d36f (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 3 locks held by kworker/0:14/15930: #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x87e/0x1790 kernel/workqueue.c:2144 #1: 00000000d50db9fe ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: process_one_work+0x8b4/0x1790 kernel/workqueue.c:2148 #2: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77 1 lock held by syz-executor4/16889: #0: 00000000b6929e92 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/16900: #0: 0000000070e814a6 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/17016: #0: 00000000b181aa20 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/17153: #0: 00000000fc25feb0 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/17272: #0: 00000000f1bffe5b (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/17396: #0: 000000007b84a5db (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/17511: #0: 000000003e9fc1b7 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/20411: #0: 00000000780e8000 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/20483: #0: 00000000c79b3c95 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/20532: #0: 00000000b3f40f5f (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/21442: #0: 000000002e992261 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/21905: #0: 000000002301e3a6 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/22196: #0: 00000000882d93c2 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/22657: #0: 00000000129017ab (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/24094: #0: 0000000009b81e67 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/25384: #0: 000000009cb398bf (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26067: #0: 00000000ff449597 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26228: #0: 000000009bcf60a9 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26260: #0: 00000000d9d9e5b3 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26567: #0: 00000000b92d5de2 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26602: #0: 00000000fdc97abd (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26669: #0: 000000000faab130 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26687: #0: 0000000009dae5c8 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26712: #0: 0000000027d2d852 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26736: #0: 00000000b6d3823c (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26765: #0: 00000000bf4b71d9 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26842: #0: 0000000010ae52fa (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26875: #0: 000000002de44ce9 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26933: #0: 000000000973d5ca (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26946: #0: 00000000a55b7198 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26961: #0: 0000000066607983 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26988: #0: 00000000258ac2f5 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/27525: #0: 00000000db549e9e (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/27850: #0: 00000000fa9c8c22 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/28338: #0: 000000005a484c60 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/3665: #0: 000000004571a9d8 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/3704: #0: 00000000a2071942 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/3786: #0: 0000000048a6ba08 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/3812: #0: 000000005cebe4e2 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/3961: #0: 000000003bec225b (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/3980: #0: 00000000c05f4461 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/16661: #0: 000000005fe796cf (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/16865: #0: 000000005fa6312c (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/17152: #0: 0000000000ec66f2 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/17408: #0: 00000000d30ef3dc (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/17537: #0: 000000003e6f4059 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/17789: #0: 00000000695395d2 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/17919: #0: 0000000039d78424 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/17948: #0: 00000000ed3361af (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/18068: #0: 000000001292d054 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/18490: #0: 00000000215cef89 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/18692: #0: 0000000008be5373 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/19579: #0: 00000000c10a75c6 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 3 locks held by kworker/1:1/20451: #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000cc96c59e ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1790 kernel/workqueue.c:2144 #1: 000000001e1cecfd (deferred_process_work){+.+.}, at: process_one_work+0x8b4/0x1790 kernel/workqueue.c:2148 #2: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77 1 lock held by syz-executor4/21026: #0: 000000005fa6f930 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/21049: #0: 00000000c972b5f0 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/21149: #0: 000000008467da0d (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/23086: #0: 00000000cde55958 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/23468: #0: 000000003822087a (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/23572: #0: 00000000444b624e (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/23706: #0: 00000000df0577b3 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 3 locks held by kworker/1:36/25487: #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 000000002a7c22bf ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x87e/0x1790 kernel/workqueue.c:2144 #1: 00000000bc37a32b ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: process_one_work+0x8b4/0x1790 kernel/workqueue.c:2148 #2: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77 1 lock held by syz-executor4/25531: #0: 0000000024f846ca (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/25577: #0: 000000007d1cf947 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/25798: #0: 000000002b4c9d75 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/25824: #0: 0000000000bbda89 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/25887: #0: 00000000b5369e1a (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26097: #0: 00000000967211af (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26113: #0: 00000000e41a07a8 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26148: #0: 000000001ababd80 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26277: #0: 00000000d6a85830 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/26999: #0: 00000000de8490ed (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/27136: #0: 0000000007b6a042 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/29504: #0: 00000000b295a323 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/29515: #0: 00000000b295a323 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/29521: #0: 000000009a3042e4 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/29534: #0: 000000001660db4b (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/29543: #0: 00000000a7e8dc79 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/29564: #0: 000000005a5c7d54 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/29598: #0: 00000000e842ff7f (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/29937: #0: 000000005e5a16d7 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/30070: #0: 000000009fa3b646 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/30317: #0: 0000000055538dc5 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/30554: #0: 000000001127b470 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/30582: #0: 000000004be50b3a (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/30653: #0: 00000000746dfbf8 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/30751: #0: 000000001174e2e7 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/30863: #0: 0000000044253325 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/31138: #0: 0000000006b7d04c (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/31776: #0: 00000000c65b9e88 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/32325: #0: 00000000edee876c (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/32474: #0: 00000000565e65cb (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/32480: #0: 00000000b809bf44 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/32488: #0: 0000000039e65d65 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/32599: #0: 0000000039fe699b (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/32610: #0: 000000004eb2f8cb (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/608: #0: 0000000006d9493d (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/698: #0: 0000000038ebf091 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/802: #0: 00000000fe531d95 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/859: #0: 00000000b7a04166 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/1020: #0: 000000005a008527 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/1056: #0: 0000000037add637 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/1107: #0: 00000000a64a5eb1 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/1162: #0: 000000004f977f2b (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/1211: #0: 0000000052861167 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/1332: #0: 0000000037b62190 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/1819: #0: 00000000323ebcdc (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/2212: #0: 00000000b848a172 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/2245: #0: 00000000e9ccb787 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/2287: #0: 0000000041de2a92 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/2323: #0: 00000000188a71db (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/2343: #0: 00000000adb8f1cb (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/2493: #0: 0000000012666702 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/2566: #0: 0000000068d5b525 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/2737: #0: 00000000e489b91d (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/3337: #0: 0000000082719f6a (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/4213: #0: 000000009afe3fd6 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/6133: #0: 00000000718a056e (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/6338: #0: 0000000059bd2277 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/6421: #0: 0000000060bef567 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/6444: #0: 00000000812dddfe (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/6454: #0: 000000008a9770e7 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor4/6457: #0: 00000000a44da496 (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 drivers/usb/mon/mon_bin.c:909 1 lock held by syz-executor0/6461: #0: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline] #0: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 net/core/rtnetlink.c:5127 1 lock held by syz-executor5/6467: #0: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline] #0: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 net/core/rtnetlink.c:5127 1 lock held by syz-executor1/6468: #0: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline] #0: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 net/core/rtnetlink.c:5127 1 lock held by syz-executor2/6469: #0: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline] #0: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 net/core/rtnetlink.c:5127 1 lock held by syz-executor3/6475: #0: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline] #0: 000000005f48f5f3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 net/core/rtnetlink.c:5127 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1040 Comm: khungtaskd Not tainted 5.0.0-rc5 #60 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x172/0x1f0 lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1be/0x236 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x9df/0xee0 kernel/hung_task.c:287 kthread+0x357/0x430 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 11345 Comm: kworker/0:9 Not tainted 5.0.0-rc5 #60 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events_power_efficient gc_worker RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:766 [inline] RIP: 0010:lock_acquire+0x1ea/0x3f0 kernel/locking/lockdep.c:3844 Code: 7c 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 c7 01 00 00 48 83 3d 02 31 3b 07 00 0f 84 3b 01 00 00 48 8b 7d c8 57 9d <0f> 1f 44 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 65 8b RSP: 0018:ffff88805aaffbf0 EFLAGS: 00000082 RAX: 1ffffffff112503e RBX: ffff888052a0e400 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: ffff888052a0ecf8 RDI: 0000000000000082 RBP: ffff88805aaffc38 R08: 0000000000000003 R09: 00000000000031c0 R10: ffff888052a0ecf8 R11: 0000000000000001 R12: ffffffff895d1688 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000008126d64 CR3: 00000000989e5000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: seqcount_lockdep_reader_access include/linux/seqlock.h:81 [inline] read_seqcount_begin include/linux/seqlock.h:164 [inline] nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:307 [inline] gc_worker+0x26a/0xea0 net/netfilter/nf_conntrack_core.c:1160 process_one_work+0x98e/0x1790 kernel/workqueue.c:2173 worker_thread+0x98/0xe40 kernel/workqueue.c:2319 kthread+0x357/0x430 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352