usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a92, bcdDevice=74.31 usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 usb 6-1: config 0 descriptor?? usb 6-1: USB disconnect, device number 118 INFO: task kworker/1:0:17 blocked for more than 143 seconds. Not tainted 5.1.0-rc4-319354-g9a33b36 #3 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/1:0 D24112 17 2 0x80000000 Workqueue: usb_hub_wq hub_event Call Trace: schedule+0x8f/0x180 kernel/sched/core.c:3562 schedule_timeout+0x477/0xdb0 kernel/time/timer.c:1803 usb_start_wait_urb.constprop.0+0x2a2/0x2e0 drivers/net/usb/kaweth.c:1250 kaweth_internal_control_msg drivers/net/usb/kaweth.c:1286 [inline] kaweth_control.constprop.0+0x365/0x4f0 drivers/net/usb/kaweth.c:281 kaweth_read_configuration drivers/net/usb/kaweth.c:299 [inline] kaweth_probe.cold+0xb1/0x1359 drivers/net/usb/kaweth.c:1077 usb_probe_interface+0x31d/0x820 drivers/usb/core/driver.c:361 really_probe+0x2da/0xb10 drivers/base/dd.c:509 driver_probe_device+0x21d/0x350 drivers/base/dd.c:671 __device_attach_driver+0x1d8/0x290 drivers/base/dd.c:778 bus_for_each_drv+0x163/0x1e0 drivers/base/bus.c:454 __device_attach+0x223/0x3a0 drivers/base/dd.c:844 bus_probe_device+0x1f1/0x2a0 drivers/base/bus.c:514 device_add+0xad2/0x16e0 drivers/base/core.c:2106 usb_set_configuration+0xdf7/0x1740 drivers/usb/core/message.c:2021 generic_probe+0xa2/0xda drivers/usb/core/generic.c:210 usb_probe_device+0xc0/0x150 drivers/usb/core/driver.c:266 really_probe+0x2da/0xb10 drivers/base/dd.c:509 driver_probe_device+0x21d/0x350 drivers/base/dd.c:671 __device_attach_driver+0x1d8/0x290 drivers/base/dd.c:778 bus_for_each_drv+0x163/0x1e0 drivers/base/bus.c:454 __device_attach+0x223/0x3a0 drivers/base/dd.c:844 bus_probe_device+0x1f1/0x2a0 drivers/base/bus.c:514 device_add+0xad2/0x16e0 drivers/base/core.c:2106 usb_new_device.cold+0x537/0xccf drivers/usb/core/hub.c:2534 hub_port_connect drivers/usb/core/hub.c:5089 [inline] hub_port_connect_change drivers/usb/core/hub.c:5204 [inline] port_event drivers/usb/core/hub.c:5350 [inline] hub_event+0x138e/0x3b00 drivers/usb/core/hub.c:5432 process_one_work+0x90f/0x1580 kernel/workqueue.c:2269 worker_thread+0x9b/0xe20 kernel/workqueue.c:2415 kthread+0x313/0x420 kernel/kthread.c:253 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Showing all locks held in the system: 3 locks held by kworker/0:1/12: 5 locks held by kworker/1:0/17: #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 000000002f3bc81a ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 00000000dc51c627 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 00000000dc51c627 (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 000000004b7c99be (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #3: 000000004b7c99be (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #4: 000000001eacdf15 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #4: 000000001eacdf15 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 1 lock held by khungtaskd/23: #0: 00000000bd764b12 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:5059 5 locks held by kworker/0:3/585: #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 00000000a271f5c4 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 000000000a7c3236 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 000000000a7c3236 (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 0000000038f34356 (&port_dev->status_lock){+.+.}, at: usb_lock_port drivers/usb/core/hub.c:2994 [inline] #3: 0000000038f34356 (&port_dev->status_lock){+.+.}, at: hub_port_connect drivers/usb/core/hub.c:5020 [inline] #3: 0000000038f34356 (&port_dev->status_lock){+.+.}, at: hub_port_connect_change drivers/usb/core/hub.c:5204 [inline] #3: 0000000038f34356 (&port_dev->status_lock){+.+.}, at: port_event drivers/usb/core/hub.c:5350 [inline] #3: 0000000038f34356 (&port_dev->status_lock){+.+.}, at: hub_event+0x11a3/0x3b00 drivers/usb/core/hub.c:5432 #4: 000000007e926571 (hcd->address0_mutex){+.+.}, at: hub_port_init+0x1bb/0x2d30 drivers/usb/core/hub.c:4529 1 lock held by rsyslogd/5522: 2 locks held by getty/5612: #0: 00000000934214b9 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000101cfe57 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5613: #0: 00000000efc093a5 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 0000000047a31dff (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5614: #0: 000000002cc32d4e (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000ea4c4b6c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5615: #0: 00000000668a909d (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 000000001dc92210 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5616: #0: 0000000066539ab8 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 000000002808d0a9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5617: #0: 00000000aab558e7 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000b391d55f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5618: #0: 0000000032f684f4 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000eb536a09 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 6 locks held by kworker/1:4/5800: #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 000000001c8daef0 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 00000000852f34b6 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 00000000852f34b6 (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 0000000006c8489b (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #3: 0000000006c8489b (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #4: 00000000dbd838a3 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #4: 00000000dbd838a3 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #5: 000000002e83ea08 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #5: 000000002e83ea08 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 5 locks held by kworker/1:6/5998: usb-fuzzer-gadget dummy_udc.4: failed to start USB fuzzer: -22 #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 000000007cbbd9ba ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 0000000093f15136 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 0000000093f15136 (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 00000000f56b7889 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #3: 00000000f56b7889 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #4: 0000000076229196 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #4: 0000000076229196 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 5 locks held by kworker/0:6/6078: #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 000000002cb72c7f ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 00000000efd417c8 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 0000000057d2a362 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 0000000057d2a362 (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 00000000c5f0985a (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #3: 00000000c5f0985a (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #4: 0000000081633053 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #4: 0000000081633053 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 23 Comm: khungtaskd Not tainted 5.1.0-rc4-319354-g9a33b36 #3 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xe8/0x16e lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x48/0x87 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1a6/0x1bd lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline] watchdog+0x98e/0xe20 kernel/hung_task.c:288 kthread+0x313/0x420 kernel/kthread.c:253 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 7931 Comm: syz-executor.3 Not tainted 5.1.0-rc4-319354-g9a33b36 #3 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__update_load_avg_cfs_rq+0x15/0x8f0 kernel/sched/pelt.c:288 Code: 24 38 44 8b 44 24 40 e9 26 fc ff ff 66 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 57 <41> 56 41 55 41 54 49 89 fc 48 8d be 80 00 00 00 53 48 89 f3 48 89 RSP: 0018:ffff88809a767ae8 EFLAGS: 00000046 RAX: dffffc0000000000 RBX: ffff8880ad12d380 RCX: 0000000000000044 RDX: 1ffff11015a25a8f RSI: ffff8880ad12d380 RDI: 000000444e31124b RBP: ffff88809a767af0 R08: 000000000000002f R09: ffff8880ad12d478 R10: 0000000000000001 R11: ffff8880ad12e13b R12: 0000000000000000 R13: 000000444e31124b R14: 0000000000000001 R15: ffff88809ff0c180 FS: 0000000000a57940(0000) GS:ffff8880ad100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fad04f18000 CR3: 0000000093aea000 CR4: 00000000001406e0 Call Trace: update_cfs_rq_load_avg kernel/sched/fair.c:3426 [inline] update_load_avg+0x1fc/0x1980 kernel/sched/fair.c:3526 dequeue_task_fair+0x1b2/0x710 kernel/sched/fair.c:5282 __schedule+0x911/0x1d00 kernel/sched/core.c:3468 schedule+0x8f/0x180 kernel/sched/core.c:3562 freezable_schedule include/linux/freezer.h:172 [inline] do_nanosleep+0x206/0x6a0 kernel/time/hrtimer.c:1679 hrtimer_nanosleep+0x25d/0x510 kernel/time/hrtimer.c:1733 __do_sys_nanosleep kernel/time/hrtimer.c:1767 [inline] __se_sys_nanosleep kernel/time/hrtimer.c:1754 [inline] __x64_sys_nanosleep+0x1a2/0x220 kernel/time/hrtimer.c:1754 do_syscall_64+0xcf/0x4f0 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x486411 Code: 75 14 b8 23 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 e0 f8 ff c3 48 83 ec 08 e8 ea 53 fd ff 48 89 04 24 b8 23 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 54 fd ff 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007ffdaece7320 EFLAGS: 00000293 ORIG_RAX: 0000000000000023 RAX: ffffffffffffffda RBX: 000000000004816e RCX: 0000000000486411 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffdaece7330 RBP: 000000000073bf00 R08: 000000000004713a R09: 000000000004713a R10: 00007ffdaece7410 R11: 0000000000000293 R12: 0000000000000001 R13: 000000000073c900 R14: 0000000000047939 R15: 000000000073bfac