vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN INFO: task kworker/0:0:3 blocked for more than 140 seconds. Not tainted 4.14.258-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/0:0 D27216 3 2 0x80000000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:2811 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3387 schedule+0x8d/0x1b0 kernel/sched/core.c:3431 usb_kill_urb.part.0+0x125/0x190 drivers/usb/core/urb.c:691 usb_kill_urb+0x7c/0x90 drivers/usb/core/urb.c:686 usb_start_wait_urb+0x209/0x440 drivers/usb/core/message.c:62 vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN usb_internal_control_msg drivers/usb/core/message.c:100 [inline] usb_control_msg+0x302/0x450 drivers/usb/core/message.c:151 vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN usb_get_descriptor+0xc0/0x160 drivers/usb/core/message.c:652 usb_get_device_descriptor+0x71/0xd0 drivers/usb/core/message.c:924 hub_port_init+0x590/0x28b0 drivers/usb/core/hub.c:4691 hub_port_connect drivers/usb/core/hub.c:4954 [inline] hub_port_connect_change drivers/usb/core/hub.c:5144 [inline] port_event drivers/usb/core/hub.c:5250 [inline] hub_event+0x1948/0x3f60 drivers/usb/core/hub.c:5330 process_one_work+0x793/0x14a0 kernel/workqueue.c:2117 vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN worker_thread+0x5cc/0xff0 kernel/workqueue.c:2251 vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN INFO: task kworker/0:1:24 blocked for more than 140 seconds. Not tainted 4.14.258-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/0:1 D27416 24 2 0x80000000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:2811 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3387 schedule+0x8d/0x1b0 kernel/sched/core.c:3431 usb_kill_urb.part.0+0x125/0x190 drivers/usb/core/urb.c:691 usb_kill_urb+0x7c/0x90 drivers/usb/core/urb.c:686 usb_start_wait_urb+0x209/0x440 drivers/usb/core/message.c:62 usb_internal_control_msg drivers/usb/core/message.c:100 [inline] usb_control_msg+0x302/0x450 drivers/usb/core/message.c:151 usb_get_descriptor+0xc0/0x160 drivers/usb/core/message.c:652 usb_get_device_descriptor+0x71/0xd0 drivers/usb/core/message.c:924 vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN hub_port_init+0x590/0x28b0 drivers/usb/core/hub.c:4691 hub_port_connect drivers/usb/core/hub.c:4954 [inline] hub_port_connect_change drivers/usb/core/hub.c:5144 [inline] port_event drivers/usb/core/hub.c:5250 [inline] hub_event+0x1948/0x3f60 drivers/usb/core/hub.c:5330 process_one_work+0x793/0x14a0 kernel/workqueue.c:2117 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2251 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 INFO: task kworker/0:6:29701 blocked for more than 140 seconds. Not tainted 4.14.258-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/0:6 D28560 29701 2 0x80000000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:2811 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3387 schedule+0x8d/0x1b0 kernel/sched/core.c:3431 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3489 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893 hub_port_connect drivers/usb/core/hub.c:4921 [inline] hub_port_connect_change drivers/usb/core/hub.c:5144 [inline] port_event drivers/usb/core/hub.c:5250 [inline] hub_event+0x15ea/0x3f60 drivers/usb/core/hub.c:5330 process_one_work+0x793/0x14a0 kernel/workqueue.c:2117 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2251 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Showing all locks held in the system: 5 locks held by kworker/0:0/3: #0: ("usb_hub_wq"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2088 #1: ((&hub->events)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2092 #2: (&dev->mutex){....}, at: [] device_lock include/linux/device.h:1082 [inline] #2: (&dev->mutex){....}, at: [] hub_event+0x108/0x3f60 drivers/usb/core/hub.c:5276 #3: (&port_dev->status_lock){+.+.}, at: [] usb_lock_port drivers/usb/core/hub.c:2936 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_port_connect drivers/usb/core/hub.c:4920 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_port_connect_change drivers/usb/core/hub.c:5144 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] port_event drivers/usb/core/hub.c:5250 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_event+0x15c0/0x3f60 drivers/usb/core/hub.c:5330 #4: (hcd->address0_mutex){+.+.}, at: [] hub_port_connect drivers/usb/core/hub.c:4921 [inline] #4: (hcd->address0_mutex){+.+.}, at: [] hub_port_connect_change drivers/usb/core/hub.c:5144 [inline] #4: (hcd->address0_mutex){+.+.}, at: [] port_event drivers/usb/core/hub.c:5250 [inline] #4: (hcd->address0_mutex){+.+.}, at: [] hub_event+0x15ea/0x3f60 drivers/usb/core/hub.c:5330 5 locks held by kworker/0:1/24: #0: ("usb_hub_wq"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2088 #1: ((&hub->events)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2092 #2: (&dev->mutex){....}, at: [] device_lock include/linux/device.h:1082 [inline] #2: (&dev->mutex){....}, at: [] hub_event+0x108/0x3f60 drivers/usb/core/hub.c:5276 #3: (&port_dev->status_lock){+.+.}, at: [] usb_lock_port drivers/usb/core/hub.c:2936 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_port_connect drivers/usb/core/hub.c:4920 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_port_connect_change drivers/usb/core/hub.c:5144 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] port_event drivers/usb/core/hub.c:5250 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_event+0x15c0/0x3f60 drivers/usb/core/hub.c:5330 #4: (hcd->address0_mutex){+.+.}, at: [] hub_port_connect drivers/usb/core/hub.c:4921 [inline] #4: (hcd->address0_mutex){+.+.}, at: [] hub_port_connect_change drivers/usb/core/hub.c:5144 [inline] #4: (hcd->address0_mutex){+.+.}, at: [] port_event drivers/usb/core/hub.c:5250 [inline] #4: (hcd->address0_mutex){+.+.}, at: [] hub_event+0x15ea/0x3f60 drivers/usb/core/hub.c:5330 1 lock held by khungtaskd/1533: #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4548 5 locks held by kworker/0:6/29701: #0: ("usb_hub_wq"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2088 #1: ((&hub->events)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2092 #2: (&dev->mutex){....}, at: [] device_lock include/linux/device.h:1082 [inline] #2: (&dev->mutex){....}, at: [] hub_event+0x108/0x3f60 drivers/usb/core/hub.c:5276 #3: (&port_dev->status_lock){+.+.}, at: [] usb_lock_port drivers/usb/core/hub.c:2936 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_port_connect drivers/usb/core/hub.c:4920 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_port_connect_change drivers/usb/core/hub.c:5144 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] port_event drivers/usb/core/hub.c:5250 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_event+0x15c0/0x3f60 drivers/usb/core/hub.c:5330 #4: (hcd->address0_mutex){+.+.}, at: [] hub_port_connect drivers/usb/core/hub.c:4921 [inline] #4: (hcd->address0_mutex){+.+.}, at: [] hub_port_connect_change drivers/usb/core/hub.c:5144 [inline] #4: (hcd->address0_mutex){+.+.}, at: [] port_event drivers/usb/core/hub.c:5250 [inline] #4: (hcd->address0_mutex){+.+.}, at: [] hub_event+0x15ea/0x3f60 drivers/usb/core/hub.c:5330 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1533 Comm: khungtaskd Not tainted 4.14.258-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x13a/0x180 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline] watchdog+0x5b9/0xb40 kernel/hung_task.c:274 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 7985 Comm: syz-executor.0 Not tainted 4.14.258-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff888083ce8080 task.stack: ffff888083cf0000 RIP: 0010:lock_is_held include/linux/lockdep.h:437 [inline] RIP: 0010:rq_clock_task kernel/sched/sched.h:898 [inline] RIP: 0010:cfs_rq_clock_task kernel/sched/fair.c:4117 [inline] RIP: 0010:update_load_avg kernel/sched/fair.c:3414 [inline] RIP: 0010:set_next_entity+0xe63/0x1e50 kernel/sched/fair.c:3903 RSP: 0018:ffff888083cf7a68 EFLAGS: 00000002 RAX: 0000000000000003 RBX: ffffffff893d1e60 RCX: ffff888081450200 RDX: 0000000000000004 RSI: 00000000ffffffff RDI: ffff8880ba434398 RBP: ffff8880ba434420 R08: ffff8880ba434420 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff888081450238 R13: ffff888081450350 R14: ffff888081450358 R15: ffff8880ba434380 FS: 000055555625c400(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000564e7bcac890 CR3: 0000000083c29000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: pick_next_task_fair+0xaca/0x1450 kernel/sched/fair.c:6353 pick_next_task kernel/sched/core.c:3235 [inline] __schedule+0x502/0x1de0 kernel/sched/core.c:3360 schedule+0x8d/0x1b0 kernel/sched/core.c:3431 freezable_schedule include/linux/freezer.h:172 [inline] do_nanosleep+0x229/0x600 kernel/time/hrtimer.c:1483 hrtimer_nanosleep+0x1da/0x4b0 kernel/time/hrtimer.c:1537 common_nsleep+0x23/0x30 kernel/time/posix-timers.c:1206 SYSC_clock_nanosleep kernel/time/posix-timers.c:1233 [inline] SyS_clock_nanosleep+0x1ff/0x2d0 kernel/time/posix-timers.c:1211 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7fe57fb76bc1 RSP: 002b:00007ffcadb43210 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 RAX: ffffffffffffffda RBX: 0000000000001cce RCX: 00007fe57fb76bc1 RDX: 00007ffcadb43250 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007ffcadb432dc R08: 0000000000000000 R09: 000000b89ee81211 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 R13: 00000000000ae8de R14: 0000000000000002 R15: 00007ffcadb43340 Code: 0f 84 00 06 00 00 65 ff 0d 4b bf c6 7e 0f 85 2c fe ff ff e8 fc 5b c4 ff e9 22 fe ff ff 49 8d 7f 18 be ff ff ff ff 48 89 4c 24 10 <4c> 89 44 24 08 e8 23 73 05 00 4c 8b 44 24 08 85 c0 48 8b 4c 24 vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN ---------------- Code disassembly (best guess): 0: 0f 84 00 06 00 00 je 0x606 6: 65 ff 0d 4b bf c6 7e decl %gs:0x7ec6bf4b(%rip) # 0x7ec6bf58 d: 0f 85 2c fe ff ff jne 0xfffffe3f 13: e8 fc 5b c4 ff callq 0xffc45c14 18: e9 22 fe ff ff jmpq 0xfffffe3f 1d: 49 8d 7f 18 lea 0x18(%r15),%rdi 21: be ff ff ff ff mov $0xffffffff,%esi 26: 48 89 4c 24 10 mov %rcx,0x10(%rsp) * 2b: 4c 89 44 24 08 mov %r8,0x8(%rsp) <-- trapping instruction 30: e8 23 73 05 00 callq 0x57358 35: 4c 8b 44 24 08 mov 0x8(%rsp),%r8 3a: 85 c0 test %eax,%eax 3c: 48 rex.W 3d: 8b .byte 0x8b 3e: 4c rex.WR 3f: 24 .byte 0x24