INFO: task kworker/0:0:9 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:0 state:D stack:21496 pid:9 tgid:9 ppid:2 task_flags:0x4288060 flags:0x00080000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0xeb1/0x41f0 kernel/sched/core.c:6907 __schedule_loop kernel/sched/core.c:6989 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7004 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7061 rwsem_down_write_slowpath+0x530/0x1280 kernel/locking/rwsem.c:1185 __down_write_common kernel/locking/rwsem.c:1317 [inline] __down_write kernel/locking/rwsem.c:1326 [inline] down_write+0x1c7/0x1f0 kernel/locking/rwsem.c:1591 kernfs_remove_by_name_ns+0x3d/0xf0 fs/kernfs/dir.c:1717 bus_remove_device+0x18a/0x440 drivers/base/bus.c:609 device_del+0x376/0x9b0 drivers/base/core.c:3878 usb_disconnect+0x5b5/0x9a0 drivers/usb/core/hub.c:2376 hub_port_connect drivers/usb/core/hub.c:5407 [inline] hub_port_connect_change drivers/usb/core/hub.c:5707 [inline] port_event drivers/usb/core/hub.c:5871 [inline] hub_event+0x1d0c/0x4af0 drivers/usb/core/hub.c:5953 process_one_work+0x9d7/0x1920 kernel/workqueue.c:3275 process_scheduled_works kernel/workqueue.c:3358 [inline] worker_thread+0x5da/0xe40 kernel/workqueue.c:3439 kthread+0x370/0x450 kernel/kthread.c:467 ret_from_fork+0x6c3/0xcb0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task jbd2/sda1-8:2814 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jbd2/sda1-8 state:D stack:26840 pid:2814 tgid:2814 ppid:2 task_flags:0x240040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0xeb1/0x41f0 kernel/sched/core.c:6907 __schedule_loop kernel/sched/core.c:6989 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7004 io_schedule+0x8a/0xf0 kernel/sched/core.c:7831 bit_wait_io+0xd/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xdc/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] __wait_on_buffer+0x64/0x70 fs/buffer.c:124 wait_on_buffer include/linux/buffer_head.h:420 [inline] journal_wait_on_commit_record fs/jbd2/commit.c:171 [inline] jbd2_journal_commit_transaction+0x49a6/0x6900 fs/jbd2/commit.c:881 kjournald2+0x200/0x760 fs/jbd2/journal.c:201 kthread+0x370/0x450 kernel/kthread.c:467 ret_from_fork+0x6c3/0xcb0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz.1.34:5348 blocked for more than 144 seconds. Not tainted syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.34 state:D stack:27432 pid:5348 tgid:5347 ppid:2961 task_flags:0x40044c flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0xeb1/0x41f0 kernel/sched/core.c:6907 __schedule_loop kernel/sched/core.c:6989 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7004 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7061 rwsem_down_write_slowpath+0x530/0x1280 kernel/locking/rwsem.c:1185 __down_write_common kernel/locking/rwsem.c:1317 [inline] __down_write kernel/locking/rwsem.c:1326 [inline] down_write+0x1c7/0x1f0 kernel/locking/rwsem.c:1591 kernfs_remove_by_name_ns+0x3d/0xf0 fs/kernfs/dir.c:1717 sysfs_remove_file include/linux/sysfs.h:780 [inline] driver_remove_file drivers/base/driver.c:201 [inline] driver_remove_file+0x4a/0x60 drivers/base/driver.c:197 remove_bind_files drivers/base/bus.c:642 [inline] bus_remove_driver+0x248/0x2e0 drivers/base/bus.c:780 driver_unregister+0x76/0xb0 drivers/base/driver.c:277 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1751 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463 __fput+0x3ff/0xb40 fs/file_table.c:469 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x829/0x2aa0 kernel/exit.c:971 do_group_exit+0xd5/0x2a0 kernel/exit.c:1112 get_signal+0x1ec7/0x21e0 kernel/signal.c:3034 arch_do_signal_or_restart+0x91/0x7a0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x7e/0x430 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline] do_syscall_64+0x671/0x7b0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2a93f5c42b RSP: 002b:00007f2a929b4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f2a93f5c42b RDX: 00007f2a929b5fd0 RSI: 0000000080085502 RDI: 0000000000000003 RBP: 00007f2a929b5fd0 R08: 0000000000000001 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000000000000 R15: 00007f2a94010bf4 INFO: task syz.3.35:5350 blocked for more than 145 seconds. Not tainted syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.35 state:D stack:27432 pid:5350 tgid:5349 ppid:2964 task_flags:0x40044c flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0xeb1/0x41f0 kernel/sched/core.c:6907 __schedule_loop kernel/sched/core.c:6989 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7004 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7061 rwsem_down_write_slowpath+0x530/0x1280 kernel/locking/rwsem.c:1185 __down_write_common kernel/locking/rwsem.c:1317 [inline] __down_write kernel/locking/rwsem.c:1326 [inline] down_write+0x1c7/0x1f0 kernel/locking/rwsem.c:1591 kernfs_remove_by_name_ns+0x3d/0xf0 fs/kernfs/dir.c:1717 sysfs_remove_file include/linux/sysfs.h:780 [inline] driver_remove_file drivers/base/driver.c:201 [inline] driver_remove_file+0x4a/0x60 drivers/base/driver.c:197 remove_bind_files drivers/base/bus.c:642 [inline] bus_remove_driver+0x248/0x2e0 drivers/base/bus.c:780 driver_unregister+0x76/0xb0 drivers/base/driver.c:277 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1751 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463 __fput+0x3ff/0xb40 fs/file_table.c:469 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x829/0x2aa0 kernel/exit.c:971 do_group_exit+0xd5/0x2a0 kernel/exit.c:1112 get_signal+0x1ec7/0x21e0 kernel/signal.c:3034 arch_do_signal_or_restart+0x91/0x7a0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x7e/0x430 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline] do_syscall_64+0x671/0x7b0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fae5d37c42b RSP: 002b:00007fae5bdccf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fae5d37c42b RDX: 00007fae5bdcdfd0 RSI: 0000000080085502 RDI: 0000000000000003 RBP: 00007fae5bdcdfd0 R08: 0000000000000001 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000000000000 R15: 00007fae5d430bf4 INFO: task syz.2.36:5354 blocked for more than 146 seconds. Not tainted syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.36 state:D stack:27432 pid:5354 tgid:5353 ppid:2969 task_flags:0x40044c flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0xeb1/0x41f0 kernel/sched/core.c:6907 __schedule_loop kernel/sched/core.c:6989 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7004 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7061 rwsem_down_write_slowpath+0x530/0x1280 kernel/locking/rwsem.c:1185 __down_write_common kernel/locking/rwsem.c:1317 [inline] __down_write kernel/locking/rwsem.c:1326 [inline] down_write+0x1c7/0x1f0 kernel/locking/rwsem.c:1591 kernfs_remove_by_name_ns+0x3d/0xf0 fs/kernfs/dir.c:1717 sysfs_remove_file include/linux/sysfs.h:780 [inline] driver_remove_file drivers/base/driver.c:201 [inline] driver_remove_file+0x4a/0x60 drivers/base/driver.c:197 bus_remove_driver+0x105/0x2e0 drivers/base/bus.c:782 driver_unregister+0x76/0xb0 drivers/base/driver.c:277 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1751 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463 __fput+0x3ff/0xb40 fs/file_table.c:469 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x829/0x2aa0 kernel/exit.c:971 do_group_exit+0xd5/0x2a0 kernel/exit.c:1112 get_signal+0x1ec7/0x21e0 kernel/signal.c:3034 arch_do_signal_or_restart+0x91/0x7a0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x7e/0x430 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline] do_syscall_64+0x671/0x7b0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f43f488c42b RSP: 002b:00007f43f32dcf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f43f488c42b RDX: 00007f43f32ddfd0 RSI: 0000000080085502 RDI: 0000000000000003 RBP: 00007f43f32ddfd0 R08: 0000000000000001 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000000000005 R15: 00007f43f4940bf4 Showing all locks held in the system: 5 locks held by kworker/0:0/9: #0: ffff888102ac1d48 ( (wq_completion)usb_hub_wq ){+.+.}-{0:0} , at: process_one_work+0x1287/0x1920 kernel/workqueue.c:3250 #1: ffffc9000009fd18 ( (work_completion)(&hub->events) ){+.+.}-{0:0} , at: process_one_work+0x93c/0x1920 kernel/workqueue.c:3251 #2: ffff88810c322198 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:895 [inline] , at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899 #3: ffff88811ca20198 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:895 [inline] , at: __device_driver_lock drivers/base/dd.c:1106 [inline] , at: device_release_driver_internal+0xaa/0x600 drivers/base/dd.c:1304 #4: ffff888101298188 ( &root->kernfs_rwsem ){++++}-{4:4} , at: kernfs_remove_by_name_ns+0x3d/0xf0 fs/kernfs/dir.c:1717 1 lock held by kworker/R-mm_pe/13: 5 locks held by kworker/1:0/23: 1 lock held by kworker/1:1/28: 1 lock held by khungtaskd/30: #0: ffffffff896e05a0 ( rcu_read_lock ){....}-{1:3} , at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline] , at: rcu_read_lock include/linux/rcupdate.h:850 [inline] , at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 4 locks held by kworker/u8:4/63: #0: ffff888101299148 ( (wq_completion)netns ){+.+.}-{0:0} , at: process_one_work+0x1287/0x1920 kernel/workqueue.c:3250 #1: ffffc90000587d18 ( net_cleanup_work ){+.+.}-{0:0} , at: process_one_work+0x93c/0x1920 kernel/workqueue.c:3251 #2: ffffffff8aae0830 ( pernet_ops_rwsem ){++++}-{4:4} , at: cleanup_net+0xb8/0x9e0 net/core/net_namespace.c:675 #3: ffffffff896ec080 ( rcu_state.barrier_mutex ){+.+.}-{4:4} , at: rcu_barrier+0x48/0x6d0 kernel/rcu/tree.c:3828 5 locks held by kworker/1:2/1116: 1 lock held by udevd/2853: #0: ffff888101298188 ( &root->kernfs_rwsem ){++++}-{4:4} , at: kernfs_dop_revalidate+0x397/0x740 fs/kernfs/dir.c:1167 2 locks held by getty/2915: #0: ffff888112d790a0 ( &tty->ldisc_sem ){++++}-{0:0} , at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900000432f0 ( &ldata->atomic_read_lock ){+.+.}-{4:4} , at: n_tty_read+0x419/0x1500 drivers/tty/n_tty.c:2211 1 lock held by syz-executor/2960: #0: ffffffff896ec1b8 ( rcu_state.exp_mutex ){+.+.}-{4:4} , at: exp_funnel_lock+0x27f/0x3c0 kernel/rcu/tree_exp.h:311 1 lock held by syz-executor/2961: #0: ffffffff896ec1b8 ( rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 kernel/rcu/tree_exp.h:343 4 locks held by udevd/5199: #0: ffff888112ab22f0 ( &p->lock ){+.+.}-{4:4} , at: seq_read_iter+0xe1/0x1270 fs/seq_file.c:183 #1: ffff888119531488 ( &of->mutex){+.+.}-{4:4} , at: kernfs_seq_start+0x4f/0x2a0 fs/kernfs/file.c:172 #2: ffff8881152cfa58 ( kn->active #9 ){.+.+}-{0:0} , at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] , at: kernfs_seq_start+0xbc/0x2a0 fs/kernfs/file.c:173 #3: ffff8881143a0198 ( &dev->mutex ){....}-{4:4} , at: device_lock_interruptible include/linux/device.h:900 [inline] , at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 6 locks held by kworker/1:3/5212: 5 locks held by kworker/1:4/5214: 4 locks held by kworker/1:5/5223: #0: ffff888102ac1d48 ( (wq_completion)usb_hub_wq ){+.+.}-{0:0} , at: process_one_work+0x1287/0x1920 kernel/workqueue.c:3250 #1: ffffc9000353fd18 ( (work_completion)(&hub->events) ){+.+.}-{0:0} , at: process_one_work+0x93c/0x1920 kernel/workqueue.c:3251 #2: ffff88810bf72198 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:895 [inline] , at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899 #3: ffff888101298188 ( &root->kernfs_rwsem ){++++}-{4:4} , at: kernfs_activate fs/kernfs/dir.c:1430 [inline] , at: kernfs_add_one+0x54f/0x850 fs/kernfs/dir.c:839 3 locks held by kworker/0:4/5250: 1 lock held by udevd/5327: #0: ffff888101298188 ( &root->kernfs_rwsem ){++++}-{4:4} , at: kernfs_dop_revalidate+0xa5/0x740 fs/kernfs/dir.c:1185 1 lock held by syz.1.34/5348: #0: ffff888101298188 ( &root->kernfs_rwsem ){++++}-{4:4} , at: kernfs_remove_by_name_ns+0x3d/0xf0 fs/kernfs/dir.c:1717 1 lock held by syz.3.35/5350: 1 lock held by syz.2.36/5354: #0: ffff888101298188 ( &root->kernfs_rwsem ){++++}-{4:4} , at: kernfs_remove_by_name_ns+0x3d/0xf0 fs/kernfs/dir.c:1717 1 lock held by syz-executor/5362: #0: ffff888101298188 ( &root->kernfs_rwsem ){++++}-{4:4} , at: kernfs_dop_revalidate+0xa5/0x740 fs/kernfs/dir.c:1185 1 lock held by syz-executor/5363: #0: ffff888101298188 ( &root->kernfs_rwsem ){++++}-{4:4} , at: kernfs_dop_revalidate+0xa5/0x740 fs/kernfs/dir.c:1185 1 lock held by syz-executor/5366: #0: ffff888101298188 ( &root->kernfs_rwsem ){++++}-{4:4} , at: kernfs_dop_revalidate+0xa5/0x740 fs/kernfs/dir.c:1185 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xd25/0x1050 kernel/hung_task.c:515 kthread+0x370/0x450 kernel/kthread.c:467 ret_from_fork+0x6c3/0xcb0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: yealink 2-1:36.0: unexpected response 0 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Workqueue: events_power_efficient gc_worker RIP: 0010:io_serial_out+0x8f/0xb0 drivers/tty/serial/8250/8250_port.c:407 Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d c3 cc cc cc cc e8 31 24 f6 fe eb a0 e8 ba 24 f6 RSP: 0018:ffffc900001a8450 EFLAGS: 00000002 RAX: 0000000000000039 RBX: 00000000000003f8 RCX: 0000000000000000 RDX: 00000000000003f8 RSI: ffffffff831f6585 RDI: ffffffff941ae5c0 RBP: ffffffff941ae580 R08: 0000000000000001 R09: 000000000000001f R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000039 R14: 0000000000000010 R15: ffffffff831f6520 FS: 0000000000000000(0000) GS:ffff8882687d3000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000004200 CR3: 00000000094ae000 CR4: 00000000003506f0 Call Trace: serial_port_out include/linux/serial_core.h:811 [inline] serial8250_console_putchar drivers/tty/serial/8250/8250_port.c:3192 [inline] serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3264 [inline] serial8250_console_write+0xde8/0x1900 drivers/tty/serial/8250/8250_port.c:3342 console_emit_next_record kernel/printk/printk.c:3183 [inline] console_flush_one_record+0x790/0xe50 kernel/printk/printk.c:3269 console_flush_all kernel/printk/printk.c:3343 [inline] __console_flush_and_unlock kernel/printk/printk.c:3373 [inline] console_unlock+0x103/0x260 kernel/printk/printk.c:3413 vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2479 dev_vprintk_emit+0x394/0x3e0 drivers/base/core.c:4913 dev_printk_emit+0xd2/0x10d drivers/base/core.c:4924 __dev_printk+0xcb/0x100 drivers/base/core.c:4936 _dev_err+0xef/0x127 drivers/base/core.c:4979 urb_irq_callback.cold+0x81/0xfd drivers/input/misc/yealink.c:435 __usb_hcd_giveback_urb+0x38d/0x610 drivers/usb/core/hcd.c:1657 usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1741 dummy_timer+0xd85/0x3670 drivers/usb/gadget/udc/dummy_hcd.c:1995 __run_hrtimer kernel/time/hrtimer.c:1785 [inline] __hrtimer_run_queues+0x50e/0xa70 kernel/time/hrtimer.c:1849 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1866 handle_softirqs+0x1de/0x9d0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xed/0x150 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0x8f/0xb0 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__seqprop_spinlock_sequence include/linux/seqlock.h:228 [inline] RIP: 0010:nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:343 [inline] RIP: 0010:gc_worker+0x2bb/0x1630 net/netfilter/nf_conntrack_core.c:1548 Code: 00 00 48 c7 c7 88 29 f0 8a e8 01 a5 15 fb 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 0f a2 38 fb 58 48 85 db 0f 85 93 0f 00 00 20 a7 38 fb 8b 1d 9a 16 77 04 89 dd 31 ff 83 e5 01 89 ee e8 bc RSP: 0018:ffffc9000018fb58 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff86791d76 RDX: ffff888102690000 RSI: ffffffff86791d85 RDI: ffff888102690000 RBP: 000000000000ef07 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 0000000000040000 R14: 0000000000007784 R15: 0000000000001770 process_one_work+0x9d7/0x1920 kernel/workqueue.c:3275 process_scheduled_works kernel/workqueue.c:3358 [inline] worker_thread+0x5da/0xe40 kernel/workqueue.c:3439 kthread+0x370/0x450 kernel/kthread.c:467 ret_from_fork+0x6c3/0xcb0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245