BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 143s! BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 140s! Showing busy workqueues and worker pools: workqueue events: flags=0x0 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: kfree_rcu_monitor workqueue events_power_efficient: flags=0x80 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=4 refcnt=5 pending: neigh_periodic_work, neigh_managed_work, do_cache_clean, check_lifetime workqueue mm_percpu_wq: flags=0x8 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: vmstat_update workqueue kblockd: flags=0x18 pwq 7: cpus=1 node=0 flags=0x0 nice=-20 active=1 refcnt=2 pending: blk_mq_requeue_work workqueue usb_hub_wq: flags=0x4 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=4 refcnt=5 in-flight: 17878:hub_event hub_event ,9:hub_event hub_event pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=6 refcnt=7 in-flight: 4951:hub_event hub_event ,4940:hub_event hub_event ,16652:hub_event hub_event pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=0s workers=7 idle: 8 13124 806 20965 9168 pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=143s workers=6 idle: 4930 16651 19676 Showing backtraces of running workers in stalled CPU-bound worker pools: pool 6: task:kworker/1:6 state:R running task stack:21120 pid:4951 tgid:4951 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_timeout+0x136/0x2a0 kernel/time/timer.c:2581 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common+0x3de/0x5f0 kernel/sched/completion.c:116 usb_start_wait_urb+0x148/0x4c0 drivers/usb/core/message.c:64 usb_internal_control_msg drivers/usb/core/message.c:103 [inline] usb_control_msg+0x327/0x4b0 drivers/usb/core/message.c:154 gp8psk_usb_in_op+0x16e/0x270 drivers/media/usb/dvb-usb/gp8psk.c:42 gp8psk_power_ctrl+0x52a/0x560 drivers/media/usb/dvb-usb/gp8psk.c:204 dvb_usb_device_power_ctrl drivers/media/usb/dvb-usb/dvb-usb-init.c:259 [inline] dvb_usb_device_power_ctrl drivers/media/usb/dvb-usb/dvb-usb-init.c:249 [inline] dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:181 [inline] dvb_usb_device_init+0x83e/0x20a0 drivers/media/usb/dvb-usb/dvb-usb-init.c:310 gp8psk_usb_probe+0x51/0xe0 drivers/media/usb/dvb-usb/gp8psk.c:304 usb_probe_interface+0x309/0x9d0 drivers/usb/core/driver.c:399 call_driver_probe drivers/base/dd.c:578 [inline] really_probe+0x23e/0xa90 drivers/base/dd.c:657 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:799 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:829 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:957 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1029 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532 device_add+0x114b/0x1a70 drivers/base/core.c:3682 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294 call_driver_probe drivers/base/dd.c:578 [inline] really_probe+0x23e/0xa90 drivers/base/dd.c:657 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:799 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:829 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:957 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1029 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532 device_add+0x114b/0x1a70 drivers/base/core.c:3682 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2e58/0x4f40 drivers/usb/core/hub.c:5903 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf20 kernel/workqueue.c:3390 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 pool 6: task:kworker/1:5 state:R running task stack:20672 pid:4940 tgid:4940 ppid:2 flags:0x00004008 Workqueue: usb_hub_wq hub_event Call Trace: pool 6: task:kworker/1:3 state:R running task stack:21840 pid:16652 tgid:16652 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xcda/0x2f80 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_timeout+0x136/0x2a0 kernel/time/timer.c:2581 schedule_timeout_uninterruptible kernel/time/timer.c:2615 [inline] msleep+0x9c/0xd0 kernel/time/timer.c:2736 hub_port_debounce+0x183/0x3d0 drivers/usb/core/hub.c:4679 hub_port_debounce_be_stable drivers/usb/core/hub.h:183 [inline] hub_port_connect drivers/usb/core/hub.c:5373 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x3536/0x4f40 drivers/usb/core/hub.c:5903 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf20 kernel/workqueue.c:3390 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.11.0-rc4-syzkaller-00064-gfb9804096bb3 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:209 Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 74 78 b0 7e 65 8b 05 75 78 b0 7e a9 00 01 RSP: 0018:ffffc90000007e28 EFLAGS: 00000082 RAX: ffff8881f622c840 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff888101698000 RSI: ffffffff81409158 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000005 R09: 000000000000001f R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881f622c840 R13: 0000000000000001 R14: ffff8881f622c7c0 R15: ffff8881f622c7c0 FS: 0000000000000000(0000) GS:ffff8881f6200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055557c93d4a8 CR3: 0000000120f62000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __hrtimer_run_queues+0x148/0xcc0 kernel/time/hrtimer.c:1731 hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x10f/0x450 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x8b/0xb0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 kernel/kcov.c:219 Code: 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 54 15 00 00 85 c0 74 2b 8b 82 30 15 00 00 83 f8 02 75 20 <48> 8b 8a 38 15 00 00 8b 92 34 15 00 00 48 8b 01 48 83 c0 01 48 39 RSP: 0018:ffffc9000009e8b8 EFLAGS: 00000246 RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffc9000c7c2000 RDX: ffff888101698000 RSI: ffffffff814011c1 RDI: 0000000000000007 RBP: ffffc9000009e908 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffffc9000009e930 R14: 1ffffffff1141e40 R15: ffff888101698000 preempt_count arch/x86/include/asm/preempt.h:26 [inline] __timer_delete_sync+0x81/0x1b0 kernel/time/timer.c:1655 timer_delete_sync kernel/time/timer.c:1720 [inline] del_timer_sync include/linux/timer.h:185 [inline] schedule_timeout+0x140/0x2a0 kernel/time/timer.c:2582 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common+0x3de/0x5f0 kernel/sched/completion.c:116 usb_start_wait_urb+0x148/0x4c0 drivers/usb/core/message.c:64 usb_internal_control_msg drivers/usb/core/message.c:103 [inline] usb_control_msg+0x327/0x4b0 drivers/usb/core/message.c:154 _usbctrl_vendorreq_sync+0xc6/0x1f0 drivers/net/wireless/realtek/rtlwifi/usb.c:42 _usb_read_sync+0x11d/0x190 drivers/net/wireless/realtek/rtlwifi/usb.c:75 rtl_read_dword drivers/net/wireless/realtek/rtlwifi/wifi.h:2911 [inline] read_efuse_byte+0x612/0x910 drivers/net/wireless/realtek/rtlwifi/efuse.c:182 read_efuse+0xa40/0xd60 drivers/net/wireless/realtek/rtlwifi/efuse.c:295 efuse_read_all_map drivers/net/wireless/realtek/rtlwifi/efuse.c:648 [inline] rtl_efuse_shadow_map_update+0x1f8/0x2c0 drivers/net/wireless/realtek/rtlwifi/efuse.c:494 rtl_get_hwinfo+0xdb/0x880 drivers/net/wireless/realtek/rtlwifi/efuse.c:1224 _rtl92cu_read_adapter_info drivers/net/wireless/realtek/rtlwifi/rtl8192cu/hw.c:334 [inline] rtl92cu_read_eeprom_info+0x2bc/0x2730 drivers/net/wireless/realtek/rtlwifi/rtl8192cu/hw.c:411 rtl_usb_probe+0x915/0x24d0 drivers/net/wireless/realtek/rtlwifi/usb.c:1011 usb_probe_interface+0x309/0x9d0 drivers/usb/core/driver.c:399 call_driver_probe drivers/base/dd.c:578 [inline] really_probe+0x23e/0xa90 drivers/base/dd.c:657 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:799 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:829 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:957 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1029 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532 device_add+0x114b/0x1a70 drivers/base/core.c:3682 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:294 call_driver_probe drivers/base/dd.c:578 [inline] really_probe+0x23e/0xa90 drivers/base/dd.c:657 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:799 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:829 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:957 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:457 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1029 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:532 device_add+0x114b/0x1a70 drivers/base/core.c:3682 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2e58/0x4f40 drivers/usb/core/hub.c:5903 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf20 kernel/workqueue.c:3390 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 ---------------- Code disassembly (best guess): 0: be b0 01 00 00 mov $0x1b0,%esi 5: e8 a0 ff ff ff call 0xffffffaa a: 31 c0 xor %eax,%eax c: c3 ret d: cc int3 e: cc int3 f: cc int3 10: cc int3 11: 66 0f 1f 84 00 00 00 nopw 0x0(%rax,%rax,1) 18: 00 00 1a: 90 nop 1b: 90 nop 1c: 90 nop 1d: 90 nop 1e: 90 nop 1f: 90 nop 20: 90 nop 21: 90 nop 22: 90 nop 23: 90 nop 24: 90 nop 25: 90 nop 26: 90 nop 27: 90 nop 28: 90 nop 29: 90 nop * 2a: f3 0f 1e fa endbr64 <-- trapping instruction 2e: 65 48 8b 15 74 78 b0 mov %gs:0x7eb07874(%rip),%rdx # 0x7eb078aa 35: 7e 36: 65 8b 05 75 78 b0 7e mov %gs:0x7eb07875(%rip),%eax # 0x7eb078b2 3d: a9 .byte 0xa9 3e: 00 01 add %al,(%rcx)