vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd: connection closed vhci_hcd: stop threads vhci_hcd: release socket vhci_hcd: disconnect device INFO: task kworker/0:1:14 blocked for more than 140 seconds. Not tainted 4.19.172-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/0:1 D26296 14 2 0x80000000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:3517 vhci_hcd vhci_hcd.0: port 1 already used schedule+0x8d/0x1b0 syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:3561 usb_kill_urb.part.0+0x197/0x220 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/urb.c:697 usb_kill_urb+0x7c/0x90 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/urb.c:692 vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) usb_start_wait_urb+0x252/0x4c0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:63 vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd: connection closed vhci_hcd: stop threads usb_internal_control_msg syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:101 [inline] usb_control_msg+0x31c/0x4a0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:152 vhci_hcd: release socket vhci_hcd: disconnect device hub_port_init+0x12dc/0x2fa0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:4654 hub_port_connect syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5020 [inline] hub_port_connect_change syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5203 [inline] port_event syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5311 [inline] hub_event+0x1cd4/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5391 vhci_hcd vhci_hcd.0: port 1 already used process_one_work+0x864/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2155 vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) worker_thread+0x64c/0x1130 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2298 vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd: connection closed vhci_hcd: stop threads vhci_hcd: release socket vhci_hcd vhci_hcd.0: port 1 already used kthread+0x33f/0x460 syzkaller/managers/linux-4-19/kernel/kernel/kthread.c:259 vhci_hcd vhci_hcd.0: port 1 already used vhci_hcd: disconnect device ret_from_fork+0x24/0x30 syzkaller/managers/linux-4-19/kernel/arch/x86/entry/entry_64.S:415 vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) INFO: task kworker/1:1:34 blocked for more than 140 seconds. vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) Not tainted 4.19.172-syzkaller #0 vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd: connection closed vhci_hcd: stop threads "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. vhci_hcd vhci_hcd.0: port 1 already used kworker/1:1 D26024 34 2 0x80000000 vhci_hcd: release socket vhci_hcd: connection closed Workqueue: usb_hub_wq hub_event vhci_hcd: disconnect device Call Trace: context_switch syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:3517 vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) schedule+0x8d/0x1b0 syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:3561 vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd: stop threads usb_kill_urb.part.0+0x197/0x220 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/urb.c:697 vhci_hcd: release socket vhci_hcd: disconnect device vhci_hcd: connection closed vhci_hcd: stop threads vhci_hcd vhci_hcd.0: port 1 already used vhci_hcd: release socket vhci_hcd: disconnect device vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) usb_kill_urb+0x7c/0x90 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/urb.c:692 vhci_hcd: connection closed vhci_hcd: stop threads usb_start_wait_urb+0x252/0x4c0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:63 vhci_hcd: release socket vhci_hcd: disconnect device usb_internal_control_msg syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:101 [inline] usb_control_msg+0x31c/0x4a0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:152 hub_port_init+0x12dc/0x2fa0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:4654 hub_port_connect syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5020 [inline] hub_port_connect_change syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5203 [inline] port_event syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5311 [inline] hub_event+0x1cd4/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5391 process_one_work+0x864/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2155 worker_thread+0x64c/0x1130 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2298 kthread+0x33f/0x460 syzkaller/managers/linux-4-19/kernel/kernel/kthread.c:259 ret_from_fork+0x24/0x30 syzkaller/managers/linux-4-19/kernel/arch/x86/entry/entry_64.S:415 INFO: task kworker/1:2:3589 blocked for more than 140 seconds. Not tainted 4.19.172-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/1:2 D25712 3589 2 0x80000000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:3517 vhci_hcd vhci_hcd.0: port 1 already used vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) schedule+0x8d/0x1b0 syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:3561 vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) usb_kill_urb.part.0+0x197/0x220 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/urb.c:697 vhci_hcd: connection closed vhci_hcd: stop threads vhci_hcd: release socket vhci_hcd: disconnect device usb_kill_urb+0x7c/0x90 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/urb.c:692 usb_start_wait_urb+0x252/0x4c0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:63 vhci_hcd vhci_hcd.0: port 1 already used vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) usb_internal_control_msg syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:101 [inline] usb_control_msg+0x31c/0x4a0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:152 vhci_hcd: connection closed vhci_hcd: stop threads vhci_hcd: release socket hub_port_init+0x12dc/0x2fa0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:4654 vhci_hcd: disconnect device hub_port_connect syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5020 [inline] hub_port_connect_change syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5203 [inline] port_event syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5311 [inline] hub_event+0x1cd4/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5391 vhci_hcd vhci_hcd.0: port 1 already used process_one_work+0x864/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2155 vhci_hcd vhci_hcd.0: port 1 already used worker_thread+0x64c/0x1130 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2298 kthread+0x33f/0x460 syzkaller/managers/linux-4-19/kernel/kernel/kthread.c:259 ret_from_fork+0x24/0x30 syzkaller/managers/linux-4-19/kernel/arch/x86/entry/entry_64.S:415 INFO: task kworker/0:2:4381 blocked for more than 140 seconds. Not tainted 4.19.172-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/0:2 D25856 4381 2 0x80000000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:3517 vhci_hcd vhci_hcd.0: port 1 already used schedule+0x8d/0x1b0 syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:3561 usb_kill_urb.part.0+0x197/0x220 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/urb.c:697 usb_kill_urb+0x7c/0x90 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/urb.c:692 usb_start_wait_urb+0x252/0x4c0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:63 vhci_hcd vhci_hcd.0: port 1 already used usb_internal_control_msg syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:101 [inline] usb_control_msg+0x31c/0x4a0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:152 hub_port_init+0x12dc/0x2fa0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:4654 hub_port_connect syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5020 [inline] hub_port_connect_change syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5203 [inline] port_event syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5311 [inline] hub_event+0x1cd4/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5391 process_one_work+0x864/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2155 worker_thread+0x64c/0x1130 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2298 kthread+0x33f/0x460 syzkaller/managers/linux-4-19/kernel/kernel/kthread.c:259 ret_from_fork+0x24/0x30 syzkaller/managers/linux-4-19/kernel/arch/x86/entry/entry_64.S:415 INFO: task kworker/0:3:9381 blocked for more than 140 seconds. Not tainted 4.19.172-syzkaller #0 vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) kworker/0:3 D25816 9381 2 0x80000000 vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) Workqueue: usb_hub_wq hub_event vhci_hcd: connection closed vhci_hcd: stop threads Call Trace: vhci_hcd: release socket vhci_hcd: connection closed context_switch syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:3517 vhci_hcd: disconnect device schedule+0x8d/0x1b0 syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:3561 vhci_hcd: stop threads usb_kill_urb.part.0+0x197/0x220 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/urb.c:697 vhci_hcd: release socket usb_kill_urb+0x7c/0x90 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/urb.c:692 vhci_hcd: disconnect device usb_start_wait_urb+0x252/0x4c0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:63 vhci_hcd vhci_hcd.0: port 1 already used usb_internal_control_msg syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:101 [inline] usb_control_msg+0x31c/0x4a0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:152 hub_port_init+0x12dc/0x2fa0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:4654 hub_port_connect syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5020 [inline] hub_port_connect_change syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5203 [inline] port_event syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5311 [inline] hub_event+0x1cd4/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5391 process_one_work+0x864/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2155 worker_thread+0x64c/0x1130 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2298 vhci_hcd vhci_hcd.0: port 1 already used kthread+0x33f/0x460 syzkaller/managers/linux-4-19/kernel/kernel/kthread.c:259 ret_from_fork+0x24/0x30 syzkaller/managers/linux-4-19/kernel/arch/x86/entry/entry_64.S:415 INFO: task kworker/1:4:9382 blocked for more than 140 seconds. Not tainted 4.19.172-syzkaller #0 vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd: connection closed vhci_hcd: stop threads kworker/1:4 D25336 9382 2 0x80000000 vhci_hcd: connection closed vhci_hcd: connection closed Workqueue: usb_hub_wq hub_event vhci_hcd: release socket Call Trace: vhci_hcd: disconnect device context_switch syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:3517 vhci_hcd: stop threads vhci_hcd: release socket vhci_hcd: disconnect device schedule+0x8d/0x1b0 syzkaller/managers/linux-4-19/kernel/kernel/sched/core.c:3561 vhci_hcd: stop threads usb_kill_urb.part.0+0x197/0x220 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/urb.c:697 vhci_hcd: release socket vhci_hcd: disconnect device usb_kill_urb+0x7c/0x90 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/urb.c:692 usb_start_wait_urb+0x252/0x4c0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:63 usb_internal_control_msg syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:101 [inline] usb_control_msg+0x31c/0x4a0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/message.c:152 hub_port_init+0x12dc/0x2fa0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:4654 hub_port_connect syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5020 [inline] hub_port_connect_change syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5203 [inline] port_event syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5311 [inline] hub_event+0x1cd4/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5391 process_one_work+0x864/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2155 worker_thread+0x64c/0x1130 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2298 kthread+0x33f/0x460 syzkaller/managers/linux-4-19/kernel/kernel/kthread.c:259 ret_from_fork+0x24/0x30 syzkaller/managers/linux-4-19/kernel/arch/x86/entry/entry_64.S:415 Showing all locks held in the system: vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) 5 locks held by kworker/0:1/14: vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd: connection closed vhci_hcd: stop threads #0: 000000006500c533 ((wq_completion)"usb_hub_wq"){+.+.}, at: process_one_work+0x767/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2126 vhci_hcd: release socket vhci_hcd vhci_hcd.0: port 1 already used vhci_hcd: disconnect device #1: 00000000e82572c3 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x79c/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2130 vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) #2: 00000000d1f97d2c (&dev->mutex){....}, at: device_lock syzkaller/managers/linux-4-19/kernel/./include/linux/device.h:1173 [inline] #2: 00000000d1f97d2c (&dev->mutex){....}, at: hub_event+0x11e/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5337 vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd vhci_hcd.0: port 1 already used #3: 0000000050cb0869 (&port_dev->status_lock){+.+.}, at: usb_lock_port syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:2977 [inline] #3: 0000000050cb0869 (&port_dev->status_lock){+.+.}, at: hub_port_connect syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5019 [inline] #3: 0000000050cb0869 (&port_dev->status_lock){+.+.}, at: hub_port_connect_change syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5203 [inline] #3: 0000000050cb0869 (&port_dev->status_lock){+.+.}, at: port_event syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5311 [inline] #3: 0000000050cb0869 (&port_dev->status_lock){+.+.}, at: hub_event+0x1cbf/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5391 vhci_hcd: connection closed vhci_hcd: stop threads #4: 00000000143a76d4 (hcd->address0_mutex){+.+.}, at: hub_port_init+0x1b9/0x2fa0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:4528 vhci_hcd: release socket 5 locks held by kworker/u4:2/33: vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) 5 locks held by kworker/1:1/34: vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) #0: 000000006500c533 ((wq_completion)"usb_hub_wq"){+.+.}, at: process_one_work+0x767/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2126 vhci_hcd: disconnect device #1: 000000003f8bfad6 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x79c/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2130 #2: 00000000b788a11c (&dev->mutex){....}, at: device_lock syzkaller/managers/linux-4-19/kernel/./include/linux/device.h:1173 [inline] #2: 00000000b788a11c (&dev->mutex){....}, at: hub_event+0x11e/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5337 vhci_hcd: connection closed vhci_hcd: stop threads #3: 00000000b1fdebc2 (&port_dev->status_lock){+.+.}, at: usb_lock_port syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:2977 [inline] #3: 00000000b1fdebc2 (&port_dev->status_lock){+.+.}, at: hub_port_connect syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5019 [inline] #3: 00000000b1fdebc2 (&port_dev->status_lock){+.+.}, at: hub_port_connect_change syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5203 [inline] #3: 00000000b1fdebc2 (&port_dev->status_lock){+.+.}, at: port_event syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5311 [inline] #3: 00000000b1fdebc2 (&port_dev->status_lock){+.+.}, at: hub_event+0x1cbf/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5391 vhci_hcd: release socket #4: 000000003d7f5496 (hcd->address0_mutex){+.+.}, at: hub_port_init+0x1b9/0x2fa0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:4528 vhci_hcd: disconnect device 1 lock held by khungtaskd/1559: #0: 00000000bdaa108b (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 syzkaller/managers/linux-4-19/kernel/kernel/locking/lockdep.c:4440 5 locks held by kworker/1:2/3589: #0: 000000006500c533 ((wq_completion)"usb_hub_wq"){+.+.}, at: process_one_work+0x767/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2126 #1: 00000000c52f833d ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x79c/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2130 #2: 0000000041982958 (&dev->mutex){....}, at: device_lock syzkaller/managers/linux-4-19/kernel/./include/linux/device.h:1173 [inline] #2: 0000000041982958 (&dev->mutex){....}, at: hub_event+0x11e/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5337 #3: 00000000b6016229 (&port_dev->status_lock){+.+.}, at: usb_lock_port syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:2977 [inline] #3: 00000000b6016229 (&port_dev->status_lock){+.+.}, at: hub_port_connect syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5019 [inline] #3: 00000000b6016229 (&port_dev->status_lock){+.+.}, at: hub_port_connect_change syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5203 [inline] #3: 00000000b6016229 (&port_dev->status_lock){+.+.}, at: port_event syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5311 [inline] #3: 00000000b6016229 (&port_dev->status_lock){+.+.}, at: hub_event+0x1cbf/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5391 #4: 0000000028ac9661 (hcd->address0_mutex){+.+.}, at: hub_port_init+0x1b9/0x2fa0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:4528 5 locks held by kworker/0:2/4381: #0: 000000006500c533 ((wq_completion)"usb_hub_wq"){+.+.}, at: process_one_work+0x767/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2126 vhci_hcd vhci_hcd.0: port 1 already used vhci_hcd vhci_hcd.0: port 1 already used vhci_hcd vhci_hcd.0: port 1 already used #1: 000000002324d32a ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x79c/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2130 vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) #2: 00000000d878d702 (&dev->mutex){....}, at: device_lock syzkaller/managers/linux-4-19/kernel/./include/linux/device.h:1173 [inline] #2: 00000000d878d702 (&dev->mutex){....}, at: hub_event+0x11e/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5337 vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd: connection closed vhci_hcd: connection closed vhci_hcd: stop threads #3: 0000000040612e05 (&port_dev->status_lock){+.+.}, at: usb_lock_port syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:2977 [inline] #3: 0000000040612e05 (&port_dev->status_lock){+.+.}, at: hub_port_connect syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5019 [inline] #3: 0000000040612e05 (&port_dev->status_lock){+.+.}, at: hub_port_connect_change syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5203 [inline] #3: 0000000040612e05 (&port_dev->status_lock){+.+.}, at: port_event syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5311 [inline] #3: 0000000040612e05 (&port_dev->status_lock){+.+.}, at: hub_event+0x1cbf/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5391 vhci_hcd: release socket #4: 0000000000c883a0 (hcd->address0_mutex){+.+.}, at: hub_port_init+0x1b9/0x2fa0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:4528 vhci_hcd: disconnect device vhci_hcd: connection closed 1 lock held by in:imklog/7824: #0: 00000000f0ee25b7 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 syzkaller/managers/linux-4-19/kernel/fs/file.c:767 vhci_hcd: stop threads 5 locks held by kworker/0:3/9381: vhci_hcd: release socket #0: 000000006500c533 ((wq_completion)"usb_hub_wq"){+.+.}, at: process_one_work+0x767/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2126 vhci_hcd: disconnect device #1: 00000000a6ff8a2b ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x79c/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2130 vhci_hcd: stop threads #2: 000000002362e3e9 (&dev->mutex){....}, at: device_lock syzkaller/managers/linux-4-19/kernel/./include/linux/device.h:1173 [inline] #2: 000000002362e3e9 (&dev->mutex){....}, at: hub_event+0x11e/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5337 vhci_hcd: release socket #3: 00000000a3496203 (&port_dev->status_lock){+.+.}, at: usb_lock_port syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:2977 [inline] #3: 00000000a3496203 (&port_dev->status_lock){+.+.}, at: hub_port_connect syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5019 [inline] #3: 00000000a3496203 (&port_dev->status_lock){+.+.}, at: hub_port_connect_change syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5203 [inline] #3: 00000000a3496203 (&port_dev->status_lock){+.+.}, at: port_event syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5311 [inline] #3: 00000000a3496203 (&port_dev->status_lock){+.+.}, at: hub_event+0x1cbf/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5391 vhci_hcd: disconnect device #4: 000000003df51ce3 (hcd->address0_mutex){+.+.}, at: hub_port_init+0x1b9/0x2fa0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:4528 5 locks held by kworker/1:4/9382: vhci_hcd vhci_hcd.0: port 1 already used #0: 000000006500c533 ((wq_completion)"usb_hub_wq"){+.+.}, at: process_one_work+0x767/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2126 vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) #1: 000000009e36e1d7 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x79c/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2130 vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd: connection closed vhci_hcd: stop threads #2: 0000000034abe3ad (&dev->mutex){....}, at: device_lock syzkaller/managers/linux-4-19/kernel/./include/linux/device.h:1173 [inline] #2: 0000000034abe3ad (&dev->mutex){....}, at: hub_event+0x11e/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5337 vhci_hcd: release socket #3: 00000000286cad01 (&port_dev->status_lock){+.+.}, at: usb_lock_port syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:2977 [inline] #3: 00000000286cad01 (&port_dev->status_lock){+.+.}, at: hub_port_connect syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5019 [inline] #3: 00000000286cad01 (&port_dev->status_lock){+.+.}, at: hub_port_connect_change syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5203 [inline] #3: 00000000286cad01 (&port_dev->status_lock){+.+.}, at: port_event syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5311 [inline] #3: 00000000286cad01 (&port_dev->status_lock){+.+.}, at: hub_event+0x1cbf/0x43e0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:5391 vhci_hcd: disconnect device #4: 00000000ceb5dad8 (hcd->address0_mutex){+.+.}, at: hub_port_init+0x1b9/0x2fa0 syzkaller/managers/linux-4-19/kernel/drivers/usb/core/hub.c:4528 vhci_hcd vhci_hcd.0: port 1 already used 7 locks held by syz-executor.4/18371: #0: 00000000d5a37109 (&rq->lock){-.-.}, at: idle_balance syzkaller/managers/linux-4-19/kernel/kernel/sched/fair.c:9701 [inline] #0: 00000000d5a37109 (&rq->lock){-.-.}, at: pick_next_task_fair+0x556/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/sched/fair.c:6840 vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) #1: 00000000d5a37109 (&rq->lock){-.-.}, at: rq_lock syzkaller/managers/linux-4-19/kernel/kernel/sched/sched.h:1824 [inline] #1: 00000000d5a37109 (&rq->lock){-.-.}, at: attach_tasks syzkaller/managers/linux-4-19/kernel/kernel/sched/fair.c:7431 [inline] #1: 00000000d5a37109 (&rq->lock){-.-.}, at: load_balance+0xa88/0x2080 syzkaller/managers/linux-4-19/kernel/kernel/sched/fair.c:8748 vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd: connection closed vhci_hcd: stop threads #2: 00000000bdaa108b (rcu_read_lock){....}, at: trace_sched_stat_runtime syzkaller/managers/linux-4-19/kernel/./include/trace/events/sched.h:428 [inline] #2: 00000000bdaa108b (rcu_read_lock){....}, at: update_curr+0x2c3/0x870 syzkaller/managers/linux-4-19/kernel/kernel/sched/fair.c:857 vhci_hcd: release socket #3: 00000000dcf64b93 (&(&sig->stats_lock)->seqcount){....}, at: exit_notify syzkaller/managers/linux-4-19/kernel/kernel/exit.c:745 [inline] #3: 00000000dcf64b93 (&(&sig->stats_lock)->seqcount){....}, at: do_exit+0x15be/0x2be0 syzkaller/managers/linux-4-19/kernel/kernel/exit.c:890 vhci_hcd: disconnect device #4: 000000007dfaf086 (&obj_hash[i].lock){-.-.}, at: debug_object_active_state syzkaller/managers/linux-4-19/kernel/lib/debugobjects.c:725 [inline] #4: 000000007dfaf086 (&obj_hash[i].lock){-.-.}, at: debug_object_active_state+0x104/0x330 syzkaller/managers/linux-4-19/kernel/lib/debugobjects.c:713 vhci_hcd vhci_hcd.0: port 1 already used #5: 0000000006e16e4a (pool_lock){-.-.}, at: alloc_object syzkaller/managers/linux-4-19/kernel/lib/debugobjects.c:174 [inline] #5: 0000000006e16e4a (pool_lock){-.-.}, at: __debug_object_init+0x145/0x9b0 syzkaller/managers/linux-4-19/kernel/lib/debugobjects.c:387 #6: 00000000fffc26dd (console_owner_lock){....}, at: console_lock_spinning_disable_and_check syzkaller/managers/linux-4-19/kernel/kernel/printk/printk.c:1649 [inline] #6: 00000000fffc26dd (console_owner_lock){....}, at: console_unlock+0x9bd/0x1110 syzkaller/managers/linux-4-19/kernel/kernel/printk/printk.c:2463 vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) 9 locks held by syz-executor.3/18405: vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) ============================================= vhci_hcd: connection closed vhci_hcd: stop threads NMI backtrace for cpu 1 vhci_hcd: release socket CPU: 1 PID: 1559 Comm: khungtaskd Not tainted 4.19.172-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 vhci_hcd: disconnect device Call Trace: __dump_stack syzkaller/managers/linux-4-19/kernel/lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef syzkaller/managers/linux-4-19/kernel/lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x63/0xa2 syzkaller/managers/linux-4-19/kernel/lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 syzkaller/managers/linux-4-19/kernel/lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace syzkaller/managers/linux-4-19/kernel/./include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks syzkaller/managers/linux-4-19/kernel/kernel/hung_task.c:203 [inline] watchdog+0x991/0xe60 syzkaller/managers/linux-4-19/kernel/kernel/hung_task.c:287 kthread+0x33f/0x460 syzkaller/managers/linux-4-19/kernel/kernel/kthread.c:259 ret_from_fork+0x24/0x30 syzkaller/managers/linux-4-19/kernel/arch/x86/entry/entry_64.S:415 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.172-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy13 ieee80211_iface_work RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 syzkaller/managers/linux-4-19/kernel/kernel/kcov.c:97 Code: ff 48 89 df e8 a1 b7 35 00 e9 ab fe ff ff 4c 89 ef e8 94 b7 35 00 e9 23 fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 34 24 65 48 8b 04 25 80 df 01 00 65 8b 15 3c 85 9f 7e 81 e2 RSP: 0018:ffff8880b5a57960 EFLAGS: 00000046 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff83758bc3 RDX: 0000000000000000 RSI: ffff8880b5a481c0 RDI: 0000000000000005 RBP: ffffffff88b3bdc0 R08: 0000000000400000 R09: 0000000000000000 R10: 0000000000000005 R11: 0000000097fce1db R12: 0000000000000000 R13: ffffffff88b3bd80 R14: 0000000000000000 R15: ffff8880ade39b30 FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd24c615010 CR3: 00000000a9802000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: arch_local_save_flags syzkaller/managers/linux-4-19/kernel/./arch/x86/include/asm/paravirt.h:784 [inline] check_preemption_disabled+0x54/0x280 syzkaller/managers/linux-4-19/kernel/lib/smp_processor_id.c:18 quarantine_put+0x4a/0x1f0 syzkaller/managers/linux-4-19/kernel/mm/kasan/quarantine.c:188 __kasan_slab_free+0x186/0x1f0 syzkaller/managers/linux-4-19/kernel/mm/kasan/kasan.c:522 __cache_free syzkaller/managers/linux-4-19/kernel/mm/slab.c:3503 [inline] kfree+0xcc/0x210 syzkaller/managers/linux-4-19/kernel/mm/slab.c:3822 skb_free_head syzkaller/managers/linux-4-19/kernel/net/core/skbuff.c:563 [inline] skb_release_data+0x6de/0x920 syzkaller/managers/linux-4-19/kernel/net/core/skbuff.c:583 skb_release_all syzkaller/managers/linux-4-19/kernel/net/core/skbuff.c:640 [inline] __kfree_skb syzkaller/managers/linux-4-19/kernel/net/core/skbuff.c:654 [inline] kfree_skb+0x11a/0x3d0 syzkaller/managers/linux-4-19/kernel/net/core/skbuff.c:672 ieee80211_iface_work+0x289/0x8a0 syzkaller/managers/linux-4-19/kernel/net/mac80211/iface.c:1357 process_one_work+0x864/0x1570 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2155 worker_thread+0x64c/0x1130 syzkaller/managers/linux-4-19/kernel/kernel/workqueue.c:2298 kthread+0x33f/0x460 syzkaller/managers/linux-4-19/kernel/kernel/kthread.c:259 ret_from_fork+0x24/0x30 syzkaller/managers/linux-4-19/kernel/arch/x86/entry/entry_64.S:415