ci starts bisection 2023-01-31 07:30:01.988938442 +0000 UTC m=+735515.935000509
bisecting fixing commit since ed4643521e6af8ab8ed1e467630a85884d2696cf
building syzkaller on 89bc860804252dbacb8c2bea60b9204859f4afd7
ensuring issue is reproducible on original commit ed4643521e6af8ab8ed1e467630a85884d2696cf
testing commit ed4643521e6af8ab8ed1e467630a85884d2696cf gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 721bab1086422095644be120802b7b4430152bfcbdf9791abbe124faf4ce8c5e
run #0: crashed: SYZFAIL: wrong response packet
run #1: crashed: INFO: task hung in crda_timeout_work
run #2: crashed: INFO: task hung in r871xu_dev_remove
run #3: crashed: INFO: task hung in r871xu_dev_remove
run #4: crashed: INFO: task hung in addrconf_dad_work
run #5: crashed: INFO: task hung in crda_timeout_work
run #6: crashed: INFO: task hung in r871xu_dev_remove
run #7: crashed: INFO: task hung in r871xu_dev_remove
run #8: crashed: INFO: task hung in r871xu_dev_remove
run #9: crashed: INFO: task hung in crda_timeout_work
run #10: crashed: INFO: task hung in r871xu_dev_remove
run #11: crashed: INFO: task hung in r871xu_dev_remove
run #12: crashed: INFO: task hung in r871xu_dev_remove
run #13: crashed: INFO: task hung in r871xu_dev_remove
run #14: crashed: INFO: task hung in netdev_run_todo
run #15: crashed: INFO: task hung in r871xu_dev_remove
run #16: crashed: INFO: task hung in r871xu_dev_remove
run #17: crashed: INFO: task hung in r871xu_dev_remove
run #18: crashed: INFO: task hung in r871xu_dev_remove
run #19: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor3203979506" "root@10.128.1.102:./syz-executor3203979506"]: exit status 1
Connection timed out during banner exchange
Connection to 10.128.1.102 port 22 timed out
lost connection
testing current HEAD 9f266ccaa2f5228bfe67ad58a94ca4e0109b954a
testing commit 9f266ccaa2f5228bfe67ad58a94ca4e0109b954a gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: f9a8063e6e0ac02ec1fd05796946a39cbcf96fa3de488a68987da1c8e111b8cc
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: EOF
run #1: crashed: INFO: task hung in r871xu_dev_remove
run #2: crashed: INFO: task hung in r871xu_dev_remove
run #3: crashed: INFO: task hung in r871xu_dev_remove
run #4: crashed: INFO: task hung in r871xu_dev_remove
run #5: crashed: INFO: task hung in r871xu_dev_remove
run #6: crashed: INFO: task hung in r871xu_dev_remove
run #7: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor2539394625" "root@10.128.1.185:./syz-executor2539394625"]: exit status 1
Connection timed out during banner exchange
Connection to 10.128.1.185 port 22 timed out
lost connection
run #8: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor1816430870" "root@10.128.10.15:./syz-executor1816430870"]: exit status 1
Connection timed out during banner exchange
Connection to 10.128.10.15 port 22 timed out
lost connection
run #9: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor474977898" "root@10.128.10.17:./syz-executor474977898"]: exit status 1
Connection timed out during banner exchange
Connection to 10.128.10.17 port 22 timed out
lost connection
revisions tested: 2, total time: 34m17.410653149s (build: 15m51.971026852s, test: 17m27.203967147s)
the crash still happens on HEAD
commit msg: Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
crash: INFO: task hung in r871xu_dev_remove
INFO: task kworker/0:1:14 blocked for more than 143 seconds.
Not tainted 6.2.0-rc6-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:1 state:D stack:24544 pid:14 ppid:2 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5293 [inline]
__schedule+0xb4a/0x5410 kernel/sched/core.c:6606
schedule+0xde/0x1b0 kernel/sched/core.c:6682
schedule_timeout+0x1a3/0x260 kernel/time/timer.c:2143
do_wait_for_common kernel/sched/completion.c:85 [inline]
__wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106
r871xu_dev_remove+0x69/0x3f0 drivers/staging/rtl8712/usb_intf.c:595
usb_unbind_interface+0x187/0x7f0 drivers/usb/core/driver.c:458
__device_release_driver drivers/base/dd.c:1253 [inline]
device_release_driver_internal+0x3c0/0x600 drivers/base/dd.c:1279
bus_remove_device+0x299/0x550 drivers/base/bus.c:529
device_del+0x491/0xb80 drivers/base/core.c:3666
usb_disable_device+0x2a0/0x660 drivers/usb/core/message.c:1420
usb_disconnect.cold+0x1f5/0x623 drivers/usb/core/hub.c:2238
hub_port_connect drivers/usb/core/hub.c:5247 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5552 [inline]
port_event drivers/usb/core/hub.c:5712 [inline]
hub_event+0x17a0/0x3ce0 drivers/usb/core/hub.c:5794
process_one_work+0x8ba/0x14c0 kernel/workqueue.c:2289
process_scheduled_works kernel/workqueue.c:2352 [inline]
worker_thread+0x73c/0xec0 kernel/workqueue.c:2438
kthread+0x298/0x340 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
INFO: task kworker/0:2:892 blocked for more than 143 seconds.
Not tainted 6.2.0-rc6-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:2 state:D stack:24232 pid:892 ppid:2 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5293 [inline]
__schedule+0xb4a/0x5410 kernel/sched/core.c:6606
schedule+0xde/0x1b0 kernel/sched/core.c:6682
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6741
__mutex_lock_common kernel/locking/mutex.c:679 [inline]
__mutex_lock+0xa48/0x1360 kernel/locking/mutex.c:747
unregister_netdev+0xd/0x20 net/core/dev.c:10912
r871xu_dev_remove+0x226/0x3f0 drivers/staging/rtl8712/usb_intf.c:597
usb_unbind_interface+0x187/0x7f0 drivers/usb/core/driver.c:458
__device_release_driver drivers/base/dd.c:1253 [inline]
device_release_driver_internal+0x3c0/0x600 drivers/base/dd.c:1279
bus_remove_device+0x299/0x550 drivers/base/bus.c:529
device_del+0x491/0xb80 drivers/base/core.c:3666
usb_disable_device+0x2a0/0x660 drivers/usb/core/message.c:1420
usb_disconnect.cold+0x1f5/0x623 drivers/usb/core/hub.c:2238
hub_port_connect drivers/usb/core/hub.c:5247 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5552 [inline]
port_event drivers/usb/core/hub.c:5712 [inline]
hub_event+0x17a0/0x3ce0 drivers/usb/core/hub.c:5794
process_one_work+0x8ba/0x14c0 kernel/workqueue.c:2289
process_scheduled_works kernel/workqueue.c:2352 [inline]
worker_thread+0x73c/0xec0 kernel/workqueue.c:2438
kthread+0x298/0x340 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
INFO: task kworker/1:4:5041 blocked for more than 143 seconds.
Not tainted 6.2.0-rc6-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:4 state:D stack:24944 pid:5041 ppid:2 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5293 [inline]
__schedule+0xb4a/0x5410 kernel/sched/core.c:6606
schedule+0xde/0x1b0 kernel/sched/core.c:6682
schedule_timeout+0x1a3/0x260 kernel/time/timer.c:2143
do_wait_for_common kernel/sched/completion.c:85 [inline]
__wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106
r871xu_dev_remove+0x69/0x3f0 drivers/staging/rtl8712/usb_intf.c:595
usb_unbind_interface+0x187/0x7f0 drivers/usb/core/driver.c:458
__device_release_driver drivers/base/dd.c:1253 [inline]
device_release_driver_internal+0x3c0/0x600 drivers/base/dd.c:1279
bus_remove_device+0x299/0x550 drivers/base/bus.c:529
device_del+0x491/0xb80 drivers/base/core.c:3666
usb_disable_device+0x2a0/0x660 drivers/usb/core/message.c:1420
usb_disconnect.cold+0x1f5/0x623 drivers/usb/core/hub.c:2238
hub_port_connect drivers/usb/core/hub.c:5247 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5552 [inline]
port_event drivers/usb/core/hub.c:5712 [inline]
hub_event+0x17a0/0x3ce0 drivers/usb/core/hub.c:5794
process_one_work+0x8ba/0x14c0 kernel/workqueue.c:2289
process_scheduled_works kernel/workqueue.c:2352 [inline]
worker_thread+0x73c/0xec0 kernel/workqueue.c:2438
kthread+0x298/0x340 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
INFO: task kworker/0:6:5519 blocked for more than 144 seconds.
Not tainted 6.2.0-rc6-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:6 state:D stack:22632 pid:5519 ppid:2 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5293 [inline]
__schedule+0xb4a/0x5410 kernel/sched/core.c:6606
schedule+0xde/0x1b0 kernel/sched/core.c:6682
schedule_timeout+0x1a3/0x260 kernel/time/timer.c:2143
do_wait_for_common kernel/sched/completion.c:85 [inline]
__wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106
r871xu_dev_remove+0x69/0x3f0 drivers/staging/rtl8712/usb_intf.c:595
usb_unbind_interface+0x187/0x7f0 drivers/usb/core/driver.c:458
__device_release_driver drivers/base/dd.c:1253 [inline]
device_release_driver_internal+0x3c0/0x600 drivers/base/dd.c:1279
bus_remove_device+0x299/0x550 drivers/base/bus.c:529
device_del+0x491/0xb80 drivers/base/core.c:3666
usb_disable_device+0x2a0/0x660 drivers/usb/core/message.c:1420
usb_disconnect.cold+0x1f5/0x623 drivers/usb/core/hub.c:2238
hub_port_connect drivers/usb/core/hub.c:5247 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5552 [inline]
port_event drivers/usb/core/hub.c:5712 [inline]
hub_event+0x17a0/0x3ce0 drivers/usb/core/hub.c:5794
process_one_work+0x8ba/0x14c0 kernel/workqueue.c:2289
process_scheduled_works kernel/workqueue.c:2352 [inline]
worker_thread+0x73c/0xec0 kernel/workqueue.c:2438
kthread+0x298/0x340 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
INFO: task kworker/0:7:5520 blocked for more than 144 seconds.
Not tainted 6.2.0-rc6-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:7 state:D stack:24744 pid:5520 ppid:2 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5293 [inline]
__schedule+0xb4a/0x5410 kernel/sched/core.c:6606
schedule+0xde/0x1b0 kernel/sched/core.c:6682
schedule_timeout+0x1a3/0x260 kernel/time/timer.c:2143
do_wait_for_common kernel/sched/completion.c:85 [inline]
__wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106
r871xu_dev_remove+0x69/0x3f0 drivers/staging/rtl8712/usb_intf.c:595
usb_unbind_interface+0x187/0x7f0 drivers/usb/core/driver.c:458
__device_release_driver drivers/base/dd.c:1253 [inline]
device_release_driver_internal+0x3c0/0x600 drivers/base/dd.c:1279
bus_remove_device+0x299/0x550 drivers/base/bus.c:529
device_del+0x491/0xb80 drivers/base/core.c:3666
usb_disable_device+0x2a0/0x660 drivers/usb/core/message.c:1420
usb_disconnect.cold+0x1f5/0x623 drivers/usb/core/hub.c:2238
hub_port_connect drivers/usb/core/hub.c:5247 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5552 [inline]
port_event drivers/usb/core/hub.c:5712 [inline]
hub_event+0x17a0/0x3ce0 drivers/usb/core/hub.c:5794
process_one_work+0x8ba/0x14c0 kernel/workqueue.c:2289
process_scheduled_works kernel/workqueue.c:2352 [inline]
worker_thread+0x73c/0xec0 kernel/workqueue.c:2438
kthread+0x298/0x340 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
INFO: task kworker/0:8:5521 blocked for more than 144 seconds.
Not tainted 6.2.0-rc6-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:8 state:D stack:24984 pid:5521 ppid:2 flags:0x00004000
Workqueue: ipv6_addrconf addrconf_verify_work
Call Trace:
context_switch kernel/sched/core.c:5293 [inline]
__schedule+0xb4a/0x5410 kernel/sched/core.c:6606
schedule+0xde/0x1b0 kernel/sched/core.c:6682
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6741
__mutex_lock_common kernel/locking/mutex.c:679 [inline]
__mutex_lock+0xa48/0x1360 kernel/locking/mutex.c:747
addrconf_verify_work+0xd/0x20 net/ipv6/addrconf.c:4624
process_one_work+0x8ba/0x14c0 kernel/workqueue.c:2289
worker_thread+0x59c/0xec0 kernel/workqueue.c:2436
kthread+0x298/0x340 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
INFO: task kworker/1:7:5523 blocked for more than 144 seconds.
Not tainted 6.2.0-rc6-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:7 state:D stack:24920 pid:5523 ppid:2 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5293 [inline]
__schedule+0xb4a/0x5410 kernel/sched/core.c:6606
schedule+0xde/0x1b0 kernel/sched/core.c:6682
schedule_timeout+0x1a3/0x260 kernel/time/timer.c:2143
do_wait_for_common kernel/sched/completion.c:85 [inline]
__wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106
r871xu_dev_remove+0x69/0x3f0 drivers/staging/rtl8712/usb_intf.c:595
usb_unbind_interface+0x187/0x7f0 drivers/usb/core/driver.c:458
__device_release_driver drivers/base/dd.c:1253 [inline]
device_release_driver_internal+0x3c0/0x600 drivers/base/dd.c:1279
bus_remove_device+0x299/0x550 drivers/base/bus.c:529
device_del+0x491/0xb80 drivers/base/core.c:3666
usb_disable_device+0x2a0/0x660 drivers/usb/core/message.c:1420
usb_disconnect.cold+0x1f5/0x623 drivers/usb/core/hub.c:2238
hub_port_connect drivers/usb/core/hub.c:5247 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5552 [inline]
port_event drivers/usb/core/hub.c:5712 [inline]
hub_event+0x17a0/0x3ce0 drivers/usb/core/hub.c:5794
process_one_work+0x8ba/0x14c0 kernel/workqueue.c:2289
process_scheduled_works kernel/workqueue.c:2352 [inline]
worker_thread+0x73c/0xec0 kernel/workqueue.c:2438
kthread+0x298/0x340 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
INFO: task kworker/1:8:6710 blocked for more than 145 seconds.
Not tainted 6.2.0-rc6-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:8 state:D stack:28336 pid:6710 ppid:2 flags:0x00004000
Workqueue: ipv6_addrconf addrconf_verify_work
Call Trace:
context_switch kernel/sched/core.c:5293 [inline]
__schedule+0xb4a/0x5410 kernel/sched/core.c:6606
schedule+0xde/0x1b0 kernel/sched/core.c:6682
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6741
__mutex_lock_common kernel/locking/mutex.c:679 [inline]
__mutex_lock+0xa48/0x1360 kernel/locking/mutex.c:747
addrconf_verify_work+0xd/0x20 net/ipv6/addrconf.c:4624
process_one_work+0x8ba/0x14c0 kernel/workqueue.c:2289
worker_thread+0x59c/0xec0 kernel/workqueue.c:2436
kthread+0x298/0x340 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff8b17fb10 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507
1 lock held by rcu_tasks_trace/13:
#0: ffffffff8b17f810 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507
5 locks held by kworker/0:1/14:
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc90000137db8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffff88814723c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#2: ffff88814723c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x129/0x3ce0 drivers/usb/core/hub.c:5740
#3: ffff8880762d7190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#3: ffff8880762d7190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x623 drivers/usb/core/hub.c:2229
#4: ffff888015b29118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#4: ffff888015b29118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline]
#4: ffff888015b29118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x8c/0x600 drivers/base/dd.c:1276
3 locks held by kworker/1:0/22:
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc900001c7db8 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0x9/0x20 net/switchdev/switchdev.c:75
3 locks held by kworker/1:1/26:
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc90000a1fdb8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xf/0x40 net/core/dev.c:10171
1 lock held by khungtaskd/28:
#0: ffffffff8b180660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 kernel/locking/lockdep.c:6494
6 locks held by kworker/0:2/892:
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc90004cb7db8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffff88801f1dc190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#2: ffff88801f1dc190 (&dev->mutex){....}-{3:3}, at: hub_event+0x129/0x3ce0 drivers/usb/core/hub.c:5740
#3: ffff888076c67190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#3: ffff888076c67190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x623 drivers/usb/core/hub.c:2229
#4: ffff88806ba36118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#4: ffff88806ba36118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline]
#4: ffff88806ba36118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x8c/0x600 drivers/base/dd.c:1276
#5: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdev+0xd/0x20 net/core/dev.c:10912
3 locks held by kworker/1:2/1761:
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc90006527db8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xf/0x40 net/core/dev.c:10171
3 locks held by kworker/1:3/4358:
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc900067bfdb8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xf/0x40 net/core/dev.c:10171
2 locks held by dhcpcd/4609:
#0: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x186/0x1770 net/ipv4/devinet.c:1071
#1: ffff88806b85cdf0 (&padapter->mutex_start){+.+.}-{3:3}, at: netdev_open+0x34/0x5f0 drivers/staging/rtl8712/os_intfs.c:391
2 locks held by getty/4711:
#0: ffff88802917b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x23/0x80 drivers/tty/tty_ldisc.c:244
#1: ffffc900015a02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xb73/0x1040 drivers/tty/n_tty.c:2177
5 locks held by kworker/1:4/5041:
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc9000394fdb8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffff88801f174190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#2: ffff88801f174190 (&dev->mutex){....}-{3:3}, at: hub_event+0x129/0x3ce0 drivers/usb/core/hub.c:5740
#3: ffff888027dee190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#3: ffff888027dee190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x623 drivers/usb/core/hub.c:2229
#4: ffff88807df80118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#4: ffff88807df80118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline]
#4: ffff88807df80118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x8c/0x600 drivers/base/dd.c:1276
3 locks held by kworker/0:3/5042:
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc9000395fdb8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xf/0x40 net/core/dev.c:10171
3 locks held by udevd/5495:
#0: ffff88806c313888 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline]
#0: ffff88806c313888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x163/0x6e0 fs/kernfs/file.c:280
#1: ffff88801af48660 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline]
#1: ffff88801af48660 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x186/0x6e0 fs/kernfs/file.c:280
#2: ffff88807a78a190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline]
#2: ffff88807a78a190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x3a/0x310 drivers/usb/core/sysfs.c:874
3 locks held by udevd/5498:
#0: ffff88806c2bc888 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline]
#0: ffff88806c2bc888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x163/0x6e0 fs/kernfs/file.c:280
#1: ffff8880264a2830 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline]
#1: ffff8880264a2830 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x186/0x6e0 fs/kernfs/file.c:280
#2: ffff888076c67190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline]
#2: ffff888076c67190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x3a/0x310 drivers/usb/core/sysfs.c:874
3 locks held by kworker/0:5/5516:
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc90004d07db8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xf/0x40 net/core/dev.c:10171
3 locks held by kworker/1:6/5517:
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc90004d17db8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xf/0x40 net/core/dev.c:10171
5 locks held by kworker/0:6/5519:
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc900046bfdb8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffff88801f0ec190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#2: ffff88801f0ec190 (&dev->mutex){....}-{3:3}, at: hub_event+0x129/0x3ce0 drivers/usb/core/hub.c:5740
#3: ffff8880762d6190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#3: ffff8880762d6190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x623 drivers/usb/core/hub.c:2229
#4: ffff88807872c118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#4: ffff88807872c118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline]
#4: ffff88807872c118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x8c/0x600 drivers/base/dd.c:1276
5 locks held by kworker/0:7/5520:
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc90004d27db8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffff88801f18c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#2: ffff88801f18c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x129/0x3ce0 drivers/usb/core/hub.c:5740
#3: ffff88807a78a190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#3: ffff88807a78a190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x623 drivers/usb/core/hub.c:2229
#4: ffff8880750a7118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#4: ffff8880750a7118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline]
#4: ffff8880750a7118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x8c/0x600 drivers/base/dd.c:1276
3 locks held by kworker/0:8/5521:
#0: ffff888024a37138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888024a37138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888024a37138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888024a37138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888024a37138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888024a37138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc90004d37db8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xd/0x20 net/ipv6/addrconf.c:4624
3 locks held by kworker/0:9/5522:
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc90004d47db8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xf/0x40 net/core/dev.c:10171
5 locks held by kworker/1:7/5523:
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888140a52d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc90004d57db8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffff8881472cc190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#2: ffff8881472cc190 (&dev->mutex){....}-{3:3}, at: hub_event+0x129/0x3ce0 drivers/usb/core/hub.c:5740
#3: ffff88807df85190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#3: ffff88807df85190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x623 drivers/usb/core/hub.c:2229
#4: ffff8880267c0118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
#4: ffff8880267c0118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline]
#4: ffff8880267c0118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x8c/0x600 drivers/base/dd.c:1276
3 locks held by kworker/0:10/5572:
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc90004edfdb8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xf/0x40 net/core/dev.c:10171
3 locks held by udevd/5575:
#0: ffff888015d0dc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline]
#0: ffff888015d0dc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x163/0x6e0 fs/kernfs/file.c:280
#1: ffff88807c400660 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline]
#1: ffff88807c400660 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x186/0x6e0 fs/kernfs/file.c:280
#2: ffff8880762d7190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline]
#2: ffff8880762d7190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x3a/0x310 drivers/usb/core/sysfs.c:874
3 locks held by udevd/5699:
#0: ffff88801fbc2888 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline]
#0: ffff88801fbc2888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x163/0x6e0 fs/kernfs/file.c:280
#1: ffff88801af482c0 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline]
#1: ffff88801af482c0 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x186/0x6e0 fs/kernfs/file.c:280
#2: ffff8880762d6190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline]
#2: ffff8880762d6190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x3a/0x310 drivers/usb/core/sysfs.c:874
3 locks held by udevd/5927:
#0: ffff88807c33cc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline]
#0: ffff88807c33cc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x163/0x6e0 fs/kernfs/file.c:280
#1: ffff8880795fc0f0 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline]
#1: ffff8880795fc0f0 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x186/0x6e0 fs/kernfs/file.c:280
#2: ffff888027dee190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline]
#2: ffff888027dee190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x3a/0x310 drivers/usb/core/sysfs.c:874
3 locks held by kworker/0:11/5928:
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc900059afdb8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xf/0x40 net/core/dev.c:10171
3 locks held by kworker/0:12/6135:
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888010070d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc9000620fdb8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xf/0x40 net/core/dev.c:10171
3 locks held by kworker/1:8/6710:
#0: ffff888024a37138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888024a37138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888024a37138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888024a37138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888024a37138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888024a37138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a0/0x14c0 kernel/workqueue.c:2260
#1: ffffc9000b9e7db8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x14c0 kernel/workqueue.c:2264
#2: ffffffff8c8d12e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xd/0x20 net/ipv6/addrconf.c:4624
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x5b/0x81 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x18/0x106 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x259/0x2d0 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
watchdog+0x8c8/0xc60 kernel/hung_task.c:377
kthread+0x298/0x340 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 1019 Comm: kworker/u4:5 Not tainted 6.2.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Workqueue: bat_events batadv_nc_worker
RIP: 0010:__lock_acquire+0x2e/0x56d0 kernel/locking/lockdep.c:4913
Code: cf 41 56 49 89 fe 41 55 41 54 41 89 f4 55 89 d5 48 ba 00 00 00 00 00 fc ff df 53 48 81 ec 10 01 00 00 48 8b 84 24 48 01 00 00 <48> c7 84 24 90 00 00 00 b3 8a b5 41 48 c7 84 24 98 00 00 00 f8 28
RSP: 0018:ffffc90004ecfa28 EFLAGS: 00000086
RAX: 0000000000000000 RBX: 1ffff920009d9f75 RCX: 0000000000000002
RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff8b180660
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: fffffbfff19df89a R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffffffff8b180660 R15: 0000000000000002
FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9c131fd110 CR3: 000000001a7fb000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lock_acquire kernel/locking/lockdep.c:5668 [inline]
lock_acquire+0x1e3/0x630 kernel/locking/lockdep.c:5633
rcu_lock_acquire include/linux/rcupdate.h:325 [inline]
rcu_read_lock include/linux/rcupdate.h:764 [inline]
batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline]
batadv_nc_worker+0x10c/0xd80 net/batman-adv/network-coding.c:719
process_one_work+0x8ba/0x14c0 kernel/workqueue.c:2289
worker_thread+0x59c/0xec0 kernel/workqueue.c:2436
kthread+0x298/0x340 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308