ci starts bisection 2023-02-23 12:46:32.382171074 +0000 UTC m=+31317.392890480 bisecting fixing commit since 7e18e42e4b280c85b76967a9106a13ca61c16179 building syzkaller on 922294abb4c0bc72b24d8526d625110d73fa1b5a ensuring issue is reproducible on original commit 7e18e42e4b280c85b76967a9106a13ca61c16179 testing commit 7e18e42e4b280c85b76967a9106a13ca61c16179 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: bb803304bd65604cee2e39c59876320e4f0450c696402154e7ca92f38950a726 run #0: crashed: INFO: task hung in r871xu_dev_remove run #1: crashed: INFO: task hung in r871xu_dev_remove run #2: crashed: INFO: task hung in r871xu_dev_remove run #3: crashed: INFO: task hung in r871xu_dev_remove run #4: crashed: INFO: task hung in r871xu_dev_remove run #5: crashed: INFO: task hung in r871xu_dev_remove run #6: crashed: INFO: task hung in r871xu_dev_remove run #7: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor3450237590" "root@10.128.15.225:./syz-executor3450237590"]: exit status 1 Connection timed out during banner exchange Connection to 10.128.15.225 port 22 timed out lost connection run #8: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor824246754" "root@10.128.15.228:./syz-executor824246754"]: exit status 1 Connection timed out during banner exchange Connection to 10.128.15.228 port 22 timed out lost connection run #9: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor87998323" "root@10.128.1.144:./syz-executor87998323"]: exit status 1 Connection timed out during banner exchange Connection to 10.128.1.144 port 22 timed out lost connection run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK reproducer seems to be flaky testing current HEAD a5c95ca18a98d742d0a4a04063c32556b5b66378 testing commit a5c95ca18a98d742d0a4a04063c32556b5b66378 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a93b628f5b32270c42d3f82e74df21b1115fa93a1accb133d752fbb5b75761c4 run #0: crashed: INFO: task hung in r871xu_dev_remove run #1: crashed: INFO: task hung in r871xu_dev_remove run #2: crashed: INFO: task hung in r871xu_dev_remove run #3: crashed: INFO: task hung in r871xu_dev_remove run #4: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor2088633389" "root@10.128.15.224:./syz-executor2088633389"]: exit status 1 Connection timed out during banner exchange Connection to 10.128.15.224 port 22 timed out lost connection run #5: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor2464857669" "root@10.128.15.240:./syz-executor2464857669"]: exit status 1 Connection timed out during banner exchange Connection to 10.128.15.240 port 22 timed out lost connection run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK Reproducer flagged being flaky revisions tested: 2, total time: 39m2.275161289s (build: 14m53.15561928s, test: 23m16.200977989s) the crash still happens on HEAD commit msg: Merge tag 'drm-next-2023-02-23' of git://anongit.freedesktop.org/drm/drm crash: INFO: task hung in r871xu_dev_remove INFO: task kworker/0:0:6 blocked for more than 143 seconds. Not tainted 6.2.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:0 state:D stack:24560 pid:6 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5304 [inline] __schedule+0xc3e/0x5a70 kernel/sched/core.c:6622 schedule+0xda/0x1a0 kernel/sched/core.c:6698 schedule_timeout+0x229/0x270 kernel/time/timer.c:2143 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1ca/0x5c0 kernel/sched/completion.c:106 r871xu_dev_remove+0x65/0x3f0 drivers/staging/rtl8712/usb_intf.c:595 usb_unbind_interface+0x183/0x7e0 drivers/usb/core/driver.c:458 __device_release_driver drivers/base/dd.c:1253 [inline] device_release_driver_internal+0x3bc/0x600 drivers/base/dd.c:1279 bus_remove_device+0x295/0x550 drivers/base/bus.c:529 device_del+0x48d/0xb80 drivers/base/core.c:3624 usb_disable_device+0x29c/0x650 drivers/usb/core/message.c:1420 usb_disconnect+0x265/0x870 drivers/usb/core/hub.c:2238 hub_port_connect drivers/usb/core/hub.c:5247 [inline] hub_port_connect_change drivers/usb/core/hub.c:5552 [inline] port_event drivers/usb/core/hub.c:5712 [inline] hub_event+0x17f3/0x4240 drivers/usb/core/hub.c:5794 process_one_work+0x8ba/0x1590 kernel/workqueue.c:2390 process_scheduled_works kernel/workqueue.c:2453 [inline] worker_thread+0x738/0xec0 kernel/workqueue.c:2539 kthread+0x294/0x330 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 INFO: task kworker/1:1:25 blocked for more than 143 seconds. Not tainted 6.2.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:1 state:D stack:22528 pid:25 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5304 [inline] __schedule+0xc3e/0x5a70 kernel/sched/core.c:6622 schedule+0xda/0x1a0 kernel/sched/core.c:6698 schedule_timeout+0x229/0x270 kernel/time/timer.c:2143 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1ca/0x5c0 kernel/sched/completion.c:106 r871xu_dev_remove+0x65/0x3f0 drivers/staging/rtl8712/usb_intf.c:595 usb_unbind_interface+0x183/0x7e0 drivers/usb/core/driver.c:458 __device_release_driver drivers/base/dd.c:1253 [inline] device_release_driver_internal+0x3bc/0x600 drivers/base/dd.c:1279 bus_remove_device+0x295/0x550 drivers/base/bus.c:529 device_del+0x48d/0xb80 drivers/base/core.c:3624 usb_disable_device+0x29c/0x650 drivers/usb/core/message.c:1420 usb_disconnect+0x265/0x870 drivers/usb/core/hub.c:2238 hub_port_connect drivers/usb/core/hub.c:5247 [inline] hub_port_connect_change drivers/usb/core/hub.c:5552 [inline] port_event drivers/usb/core/hub.c:5712 [inline] hub_event+0x17f3/0x4240 drivers/usb/core/hub.c:5794 process_one_work+0x8ba/0x1590 kernel/workqueue.c:2390 process_scheduled_works kernel/workqueue.c:2453 [inline] worker_thread+0x738/0xec0 kernel/workqueue.c:2539 kthread+0x294/0x330 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 INFO: task kworker/0:3:2069 blocked for more than 143 seconds. Not tainted 6.2.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:3 state:D stack:25016 pid:2069 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5304 [inline] __schedule+0xc3e/0x5a70 kernel/sched/core.c:6622 schedule+0xda/0x1a0 kernel/sched/core.c:6698 schedule_timeout+0x229/0x270 kernel/time/timer.c:2143 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1ca/0x5c0 kernel/sched/completion.c:106 r871xu_dev_remove+0x65/0x3f0 drivers/staging/rtl8712/usb_intf.c:595 usb_unbind_interface+0x183/0x7e0 drivers/usb/core/driver.c:458 __device_release_driver drivers/base/dd.c:1253 [inline] device_release_driver_internal+0x3bc/0x600 drivers/base/dd.c:1279 bus_remove_device+0x295/0x550 drivers/base/bus.c:529 device_del+0x48d/0xb80 drivers/base/core.c:3624 usb_disable_device+0x29c/0x650 drivers/usb/core/message.c:1420 usb_disconnect+0x265/0x870 drivers/usb/core/hub.c:2238 hub_port_connect drivers/usb/core/hub.c:5247 [inline] hub_port_connect_change drivers/usb/core/hub.c:5552 [inline] port_event drivers/usb/core/hub.c:5712 [inline] hub_event+0x17f3/0x4240 drivers/usb/core/hub.c:5794 process_one_work+0x8ba/0x1590 kernel/workqueue.c:2390 process_scheduled_works kernel/workqueue.c:2453 [inline] worker_thread+0x738/0xec0 kernel/workqueue.c:2539 kthread+0x294/0x330 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 INFO: task kworker/0:5:5557 blocked for more than 144 seconds. Not tainted 6.2.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:5 state:D stack:24816 pid:5557 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5304 [inline] __schedule+0xc3e/0x5a70 kernel/sched/core.c:6622 schedule+0xda/0x1a0 kernel/sched/core.c:6698 schedule_timeout+0x229/0x270 kernel/time/timer.c:2143 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1ca/0x5c0 kernel/sched/completion.c:106 r871xu_dev_remove+0x65/0x3f0 drivers/staging/rtl8712/usb_intf.c:595 usb_unbind_interface+0x183/0x7e0 drivers/usb/core/driver.c:458 __device_release_driver drivers/base/dd.c:1253 [inline] device_release_driver_internal+0x3bc/0x600 drivers/base/dd.c:1279 bus_remove_device+0x295/0x550 drivers/base/bus.c:529 device_del+0x48d/0xb80 drivers/base/core.c:3624 usb_disable_device+0x29c/0x650 drivers/usb/core/message.c:1420 usb_disconnect+0x265/0x870 drivers/usb/core/hub.c:2238 hub_port_connect drivers/usb/core/hub.c:5247 [inline] hub_port_connect_change drivers/usb/core/hub.c:5552 [inline] port_event drivers/usb/core/hub.c:5712 [inline] hub_event+0x17f3/0x4240 drivers/usb/core/hub.c:5794 process_one_work+0x8ba/0x1590 kernel/workqueue.c:2390 process_scheduled_works kernel/workqueue.c:2453 [inline] worker_thread+0x738/0xec0 kernel/workqueue.c:2539 kthread+0x294/0x330 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 INFO: task kworker/0:7:5608 blocked for more than 144 seconds. Not tainted 6.2.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:7 state:D stack:24936 pid:5608 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5304 [inline] __schedule+0xc3e/0x5a70 kernel/sched/core.c:6622 schedule+0xda/0x1a0 kernel/sched/core.c:6698 schedule_timeout+0x229/0x270 kernel/time/timer.c:2143 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1ca/0x5c0 kernel/sched/completion.c:106 r871xu_dev_remove+0x65/0x3f0 drivers/staging/rtl8712/usb_intf.c:595 usb_unbind_interface+0x183/0x7e0 drivers/usb/core/driver.c:458 __device_release_driver drivers/base/dd.c:1253 [inline] device_release_driver_internal+0x3bc/0x600 drivers/base/dd.c:1279 bus_remove_device+0x295/0x550 drivers/base/bus.c:529 device_del+0x48d/0xb80 drivers/base/core.c:3624 usb_disable_device+0x29c/0x650 drivers/usb/core/message.c:1420 usb_disconnect+0x265/0x870 drivers/usb/core/hub.c:2238 hub_port_connect drivers/usb/core/hub.c:5247 [inline] hub_port_connect_change drivers/usb/core/hub.c:5552 [inline] port_event drivers/usb/core/hub.c:5712 [inline] hub_event+0x17f3/0x4240 drivers/usb/core/hub.c:5794 process_one_work+0x8ba/0x1590 kernel/workqueue.c:2390 process_scheduled_works kernel/workqueue.c:2453 [inline] worker_thread+0x738/0xec0 kernel/workqueue.c:2539 kthread+0x294/0x330 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 INFO: task kworker/1:8:6477 blocked for more than 144 seconds. Not tainted 6.2.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:8 state:D stack:24776 pid:6477 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5304 [inline] __schedule+0xc3e/0x5a70 kernel/sched/core.c:6622 schedule+0xda/0x1a0 kernel/sched/core.c:6698 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6757 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0xa37/0x1340 kernel/locking/mutex.c:747 unregister_netdev+0x9/0x20 net/core/dev.c:10914 r871xu_dev_remove+0x222/0x3f0 drivers/staging/rtl8712/usb_intf.c:597 usb_unbind_interface+0x183/0x7e0 drivers/usb/core/driver.c:458 __device_release_driver drivers/base/dd.c:1253 [inline] device_release_driver_internal+0x3bc/0x600 drivers/base/dd.c:1279 bus_remove_device+0x295/0x550 drivers/base/bus.c:529 device_del+0x48d/0xb80 drivers/base/core.c:3624 usb_disable_device+0x29c/0x650 drivers/usb/core/message.c:1420 usb_disconnect+0x265/0x870 drivers/usb/core/hub.c:2238 hub_port_connect drivers/usb/core/hub.c:5247 [inline] hub_port_connect_change drivers/usb/core/hub.c:5552 [inline] port_event drivers/usb/core/hub.c:5712 [inline] hub_event+0x17f3/0x4240 drivers/usb/core/hub.c:5794 process_one_work+0x8ba/0x1590 kernel/workqueue.c:2390 process_scheduled_works kernel/workqueue.c:2453 [inline] worker_thread+0x738/0xec0 kernel/workqueue.c:2539 kthread+0x294/0x330 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Showing all locks held in the system: 5 locks held by kworker/0:0/6: #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc900002cfdb8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffff888146fd5190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff888146fd5190 (&dev->mutex){....}-{3:3}, at: hub_event+0x122/0x4240 drivers/usb/core/hub.c:5740 #3: ffff8880208e4190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #3: ffff8880208e4190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xe7/0x870 drivers/usb/core/hub.c:2229 #4: ffff8880792d7118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #4: ffff8880792d7118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline] #4: ffff8880792d7118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x88/0x600 drivers/base/dd.c:1276 5 locks held by kworker/u4:1/10: #0: ffff8880b9d3b218 (&rq->__lock){-.-.}-{2:2}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8880b9d3b218 (&rq->__lock){-.-.}-{2:2}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff8880b9d3b218 (&rq->__lock){-.-.}-{2:2}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff8880b9d3b218 (&rq->__lock){-.-.}-{2:2}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff8880b9d3b218 (&rq->__lock){-.-.}-{2:2}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff8880b9d3b218 (&rq->__lock){-.-.}-{2:2}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffff8880b9d277c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2da/0x950 kernel/sched/psi.c:976 #2: ffff8880735c0d40 (&wdev->mtx){+.+.}-{3:3}, at: sdata_lock net/mac80211/ieee80211_i.h:1115 [inline] #2: ffff8880735c0d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0x8a/0x11e0 net/mac80211/ibss.c:1680 #3: ffffffff906f4f78 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x12e/0x3e0 lib/debugobjects.c:665 #4: ffff8880b9d2b298 (per_cpu_ptr(&cgroup_rstat_cpu_lock, cpu)){-.-.}-{2:2}, at: cgroup_rstat_flush_locked+0x135/0x10d0 kernel/cgroup/rstat.c:195 1 lock held by rcu_tasks_kthre/11: #0: ffffffff8b183070 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 kernel/rcu/tasks.h:510 1 lock held by rcu_tasks_trace/12: #0: ffffffff8b182d70 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 kernel/rcu/tasks.h:510 3 locks held by kworker/0:1/13: #0: ffff888026004d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888026004d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888026004d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888026004d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888026004d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888026004d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc9000033fdb8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffffffff8c90d708 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x9/0x20 net/ipv6/addrconf.c:4629 5 locks held by kworker/1:1/25: #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc90000c1fdb8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffff888147169190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff888147169190 (&dev->mutex){....}-{3:3}, at: hub_event+0x122/0x4240 drivers/usb/core/hub.c:5740 #3: ffff88807a985190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #3: ffff88807a985190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xe7/0x870 drivers/usb/core/hub.c:2229 #4: ffff8880296cc118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #4: ffff8880296cc118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline] #4: ffff8880296cc118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x88/0x600 drivers/base/dd.c:1276 1 lock held by khungtaskd/27: #0: ffffffff8b183bc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x330 kernel/locking/lockdep.c:6495 2 locks held by kworker/u4:2/40: #0: ffff8880b9c3b218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 kernel/sched/core.c:539 #1: ffffc90000d1fdb8 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 5 locks held by kworker/0:3/2069: #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc9000795fdb8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffff888146fdc190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff888146fdc190 (&dev->mutex){....}-{3:3}, at: hub_event+0x122/0x4240 drivers/usb/core/hub.c:5740 #3: ffff888078d95190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #3: ffff888078d95190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xe7/0x870 drivers/usb/core/hub.c:2229 #4: ffff88807973b118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #4: ffff88807973b118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline] #4: ffff88807973b118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x88/0x600 drivers/base/dd.c:1276 3 locks held by kworker/1:2/4356: #0: ffff888026004d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888026004d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888026004d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888026004d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888026004d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888026004d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc90002c4fdb8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffffffff8c90d708 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x9/0x20 net/ipv6/addrconf.c:4629 2 locks held by dhcpcd/4607: #0: ffffffff8c90d708 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x175/0x1740 net/ipv4/devinet.c:1071 #1: ffff88807147cdf0 (&padapter->mutex_start){+.+.}-{3:3}, at: netdev_open+0x30/0x5f0 drivers/staging/rtl8712/os_intfs.c:391 2 locks held by getty/4706: #0: ffff88814b4b2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:244 #1: ffffc900020282f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xb6f/0x1040 drivers/tty/n_tty.c:2177 3 locks held by kworker/1:5/5048: #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc900031afdb8 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffffffff8c90d708 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0x5/0x10 net/switchdev/switchdev.c:75 3 locks held by kworker/0:4/5049: #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc900031bfdb8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffffffff8c90d708 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xb/0x30 net/core/dev.c:10170 3 locks held by udevd/5387: #0: ffff88801ffe6488 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline] #0: ffff88801ffe6488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x15f/0x600 fs/kernfs/file.c:280 #1: ffff88807a23ea00 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline] #1: ffff88807a23ea00 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x182/0x600 fs/kernfs/file.c:280 #2: ffff888078d95190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline] #2: ffff888078d95190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x36/0x310 drivers/usb/core/sysfs.c:874 3 locks held by udevd/5392: #0: ffff8880724c2088 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline] #0: ffff8880724c2088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x15f/0x600 fs/kernfs/file.c:280 #1: ffff88802b5af4d0 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline] #1: ffff88802b5af4d0 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x182/0x600 fs/kernfs/file.c:280 #2: ffff88807a985190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline] #2: ffff88807a985190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x36/0x310 drivers/usb/core/sysfs.c:874 3 locks held by kworker/1:7/5556: #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc9000364fdb8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffffffff8c90d708 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xb/0x30 net/core/dev.c:10170 5 locks held by kworker/0:5/5557: #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc9000324fdb8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffff88801f5f7190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff88801f5f7190 (&dev->mutex){....}-{3:3}, at: hub_event+0x122/0x4240 drivers/usb/core/hub.c:5740 #3: ffff8880268a8190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #3: ffff8880268a8190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xe7/0x870 drivers/usb/core/hub.c:2229 #4: ffff888078c71118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #4: ffff888078c71118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline] #4: ffff888078c71118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x88/0x600 drivers/base/dd.c:1276 5 locks held by kworker/0:7/5608: #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc9000375fdb8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffff8880203d8190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff8880203d8190 (&dev->mutex){....}-{3:3}, at: hub_event+0x122/0x4240 drivers/usb/core/hub.c:5740 #3: ffff888075929190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #3: ffff888075929190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xe7/0x870 drivers/usb/core/hub.c:2229 #4: ffff88806b843118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #4: ffff88806b843118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline] #4: ffff88806b843118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x88/0x600 drivers/base/dd.c:1276 3 locks held by kworker/0:8/5615: #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc900037afdb8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffffffff8c90d708 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xb/0x30 net/core/dev.c:10170 3 locks held by kworker/0:9/5687: #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc9000374fdb8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffffffff8c90d708 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xb/0x30 net/core/dev.c:10170 3 locks held by udevd/5714: #0: ffff888079425488 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline] #0: ffff888079425488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x15f/0x600 fs/kernfs/file.c:280 #1: ffff888026c034d0 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline] #1: ffff888026c034d0 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x182/0x600 fs/kernfs/file.c:280 #2: ffff88806c19d190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline] #2: ffff88806c19d190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x36/0x310 drivers/usb/core/sysfs.c:874 3 locks held by udevd/5715: #0: ffff88807986c088 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline] #0: ffff88807986c088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x15f/0x600 fs/kernfs/file.c:280 #1: ffff88801b7d5bd0 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline] #1: ffff88801b7d5bd0 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x182/0x600 fs/kernfs/file.c:280 #2: ffff888075929190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline] #2: ffff888075929190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x36/0x310 drivers/usb/core/sysfs.c:874 3 locks held by udevd/5735: #0: ffff88801b809488 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline] #0: ffff88801b809488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x15f/0x600 fs/kernfs/file.c:280 #1: ffff8880268343e8 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline] #1: ffff8880268343e8 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x182/0x600 fs/kernfs/file.c:280 #2: ffff8880268a8190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline] #2: ffff8880268a8190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x36/0x310 drivers/usb/core/sysfs.c:874 3 locks held by kworker/0:10/6361: #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888010c69d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc9000a7c7db8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffffffff8c90d708 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0xb/0x30 net/core/dev.c:10170 6 locks held by kworker/1:8/6477: #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff888016555938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a0/0x1590 kernel/workqueue.c:2361 #1: ffffc9000ba2fdb8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7cf/0x1590 kernel/workqueue.c:2365 #2: ffff88814710d190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #2: ffff88814710d190 (&dev->mutex){....}-{3:3}, at: hub_event+0x122/0x4240 drivers/usb/core/hub.c:5740 #3: ffff88806c19d190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #3: ffff88806c19d190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xe7/0x870 drivers/usb/core/hub.c:2229 #4: ffff88806c010118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline] #4: ffff88806c010118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline] #4: ffff88806c010118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x88/0x600 drivers/base/dd.c:1276 #5: ffffffff8c90d708 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdev+0x9/0x20 net/core/dev.c:10914 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.2.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x60/0xa0 lib/dump_stack.c:106 nmi_cpu_backtrace+0x1d7/0x290 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x259/0x340 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline] watchdog+0xa26/0xe00 kernel/hung_task.c:377 kthread+0x294/0x330 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 980 Comm: kworker/u4:4 Not tainted 6.2.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 Workqueue: bat_events batadv_purge_orig RIP: 0010:hlock_class kernel/locking/lockdep.c:228 [inline] RIP: 0010:__lock_acquire+0x16f2/0x5d40 kernel/locking/lockdep.c:5052 Code: f8 66 81 e3 ff 1f 0f b7 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 40 6a b7 8f e8 96 6f 5e 00 48 0f a3 1d de 1b 5e 0e <0f> 83 2c 06 00 00 48 8d 1c 5b 48 c1 e3 06 48 81 c3 60 6e b7 8f 48 RSP: 0018:ffffc90004b17998 EFLAGS: 00000047 RAX: 0000000000000001 RBX: 0000000000000727 RCX: ffffffff81594e5a RDX: fffffbfff1f6ed65 RSI: 0000000000000008 RDI: ffffffff8fb76b20 RBP: ffff88801e732cea R08: 0000000000000000 R09: ffffffff8fb76b27 R10: fffffbfff1f6ed64 R11: 0000000000000000 R12: ffff88801e732cc8 R13: ffff88801e732240 R14: 0000000000000000 R15: babb584612a3c964 FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3051d43110 CR3: 000000002b066000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire kernel/locking/lockdep.c:5669 [inline] lock_acquire+0x1df/0x670 kernel/locking/lockdep.c:5634 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline] _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:178 spin_lock_bh include/linux/spinlock.h:355 [inline] batadv_purge_orig_ref+0x152/0x1090 net/batman-adv/originator.c:1243 batadv_purge_orig+0x11/0x60 net/batman-adv/originator.c:1272 process_one_work+0x8ba/0x1590 kernel/workqueue.c:2390 worker_thread+0x598/0xec0 kernel/workqueue.c:2537 kthread+0x294/0x330 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308