syzbot


INFO: task hung in chaoskey_disconnect

Status: closed as invalid on 2020/06/18 12:13
Subsystems: usb crypto
[Documentation on labels]
Reported-by: syzbot+f41c4f7c6d8b0b778780@syzkaller.appspotmail.com
First crash: 1606d, last: 1464d
Duplicate bugs (1)
duplicates (1):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
INFO: task hung in hwrng_unregister crypto usb C 3 1650d 1710d 0/26 closed as dup on 2019/11/06 12:56
Discussions (2)
Title Replies (including bot) Last reply
INFO: task hung in chaoskey_disconnect 5 (8) 2020/06/18 12:13
Reminder: 45 active syzbot reports in usb subsystem 1 (1) 2019/11/19 04:27
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in chaoskey_disconnect (2) crypto 2 1366d 1367d 0/26 auto-closed as invalid on 2020/09/29 11:17
Last patch testing requests (1)
Created Duration User Patch Repo Result
2019/11/15 18:47 11m swboyd@chromium.org patch https://github.com/google/kasan.git b1aa9d83 report log

Sample crash report:
INFO: task kworker/1:2:1811 blocked for more than 143 seconds.
      Not tainted 5.6.0-rc3-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/1:2     D25960  1811      2 0x80004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 schedule+0xcd/0x2b0 kernel/sched/core.c:4154
 schedule_timeout+0x682/0xb20 kernel/time/timer.c:1871
 do_wait_for_common kernel/sched/completion.c:83 [inline]
 __wait_for_common kernel/sched/completion.c:104 [inline]
 wait_for_common kernel/sched/completion.c:115 [inline]
 wait_for_completion+0x26f/0x3c0 kernel/sched/completion.c:136
 kthread_stop+0x17a/0x780 kernel/kthread.c:559
 hwrng_unregister+0x24f/0x330 drivers/char/hw_random/core.c:556
 chaoskey_disconnect+0x216/0x290 drivers/usb/misc/chaoskey.c:232
 usb_unbind_interface+0x1bd/0x8a0 drivers/usb/core/driver.c:436
 __device_release_driver drivers/base/dd.c:1137 [inline]
 device_release_driver_internal+0x42f/0x500 drivers/base/dd.c:1168
 bus_remove_device+0x2eb/0x5a0 drivers/base/bus.c:533
 device_del+0x481/0xd30 drivers/base/core.c:2664
 usb_disable_device+0x23d/0x790 drivers/usb/core/message.c:1237
 usb_disconnect+0x293/0x900 drivers/usb/core/hub.c:2207
 hub_port_connect drivers/usb/core/hub.c:5042 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5331 [inline]
 port_event drivers/usb/core/hub.c:5477 [inline]
 hub_event+0x1a1d/0x4300 drivers/usb/core/hub.c:5559
 process_one_work+0x94b/0x1620 kernel/workqueue.c:2264
 process_scheduled_works kernel/workqueue.c:2326 [inline]
 worker_thread+0x7ab/0xe20 kernel/workqueue.c:2412
 kthread+0x318/0x420 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352

Showing all locks held in the system:
5 locks held by kworker/0:1/12:
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:226 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:615 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:642 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x82a/0x1620 kernel/workqueue.c:2235
 #1: ffff8881da227dd0 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x85e/0x1620 kernel/workqueue.c:2239
 #2: ffff8881d4cbe200 (&dev->mutex){....}, at: device_lock include/linux/device.h:771 [inline]
 #2: ffff8881d4cbe200 (&dev->mutex){....}, at: hub_event+0x1be/0x4300 drivers/usb/core/hub.c:5505
 #3: ffff8881cc3f3200 (&dev->mutex){....}, at: device_lock include/linux/device.h:771 [inline]
 #3: ffff8881cc3f3200 (&dev->mutex){....}, at: usb_disconnect+0x91/0x900 drivers/usb/core/hub.c:2198
 #4: ffff8881cc3f4190 (&dev->mutex){....}, at: device_release_driver_internal+0x23/0x500 drivers/base/dd.c:1165
1 lock held by khungtaskd/22:
 #0: ffffffff87109020 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x264 kernel/locking/lockdep.c:5331
5 locks held by kworker/1:1/81:
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:226 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:615 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:642 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x82a/0x1620 kernel/workqueue.c:2235
 #1: ffff8881d8a0fdd0 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x85e/0x1620 kernel/workqueue.c:2239
 #2: ffff8881d4c77200 (&dev->mutex){....}, at: device_lock include/linux/device.h:771 [inline]
 #2: ffff8881d4c77200 (&dev->mutex){....}, at: hub_event+0x1be/0x4300 drivers/usb/core/hub.c:5505
 #3: ffff8881ca720200 (&dev->mutex){....}, at: device_lock include/linux/device.h:771 [inline]
 #3: ffff8881ca720200 (&dev->mutex){....}, at: usb_disconnect+0x91/0x900 drivers/usb/core/hub.c:2198
 #4: ffff8881c988f190 (&dev->mutex){....}, at: device_release_driver_internal+0x23/0x500 drivers/base/dd.c:1165
1 lock held by rsyslogd/1673:
 #0: ffff8881d0ca74e0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 fs/file.c:821
2 locks held by getty/1764:
 #0: ffff8881cec2d090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:267
 #1: ffffc9000043d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 drivers/tty/n_tty.c:2156
2 locks held by getty/1765:
 #0: ffff8881cf378090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:267
 #1: ffffc900004312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 drivers/tty/n_tty.c:2156
2 locks held by getty/1766:
 #0: ffff8881cec3e090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:267
 #1: ffffc900004512e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 drivers/tty/n_tty.c:2156
2 locks held by getty/1767:
 #0: ffff8881ced4b090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:267
 #1: ffffc900004492e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 drivers/tty/n_tty.c:2156
2 locks held by getty/1768:
 #0: ffff8881cec3f090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:267
 #1: ffffc900004552e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 drivers/tty/n_tty.c:2156
2 locks held by getty/1769:
 #0: ffff8881cf37e090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:267
 #1: ffffc900004412e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 drivers/tty/n_tty.c:2156
2 locks held by getty/1770:
 #0: ffff8881cf166090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:267
 #1: ffffc900004252e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 drivers/tty/n_tty.c:2156
4 locks held by udevd/1771:
 #0: ffff8881da3e2400 (&p->lock){+.+.}, at: seq_read+0x6b/0x1160 fs/seq_file.c:161
 #1: ffff8881d9ab0080 (&of->mutex){+.+.}, at: kernfs_seq_start+0x49/0x180 fs/kernfs/file.c:111
 #2: ffff8881c826a628 (kn->count#75){++++}, at: kernfs_seq_start+0x73/0x180 fs/kernfs/file.c:112
 #3: ffff8881ca720200 (&dev->mutex){....}, at: device_lock_interruptible include/linux/device.h:776 [inline]
 #3: ffff8881ca720200 (&dev->mutex){....}, at: product_show+0x22/0xa0 drivers/usb/core/sysfs.c:140
4 locks held by udevd/1772:
 #0: ffff8881cc838880 (&p->lock){+.+.}, at: seq_read+0x6b/0x1160 fs/seq_file.c:161
 #1: ffff8881cc8e9880 (&of->mutex){+.+.}, at: kernfs_seq_start+0x49/0x180 fs/kernfs/file.c:111
 #2: ffff8881d9ba60e8 (kn->count#75){++++}, at: kernfs_seq_start+0x73/0x180 fs/kernfs/file.c:112
 #3: ffff8881cd57c200 (&dev->mutex){....}, at: device_lock_interruptible include/linux/device.h:776 [inline]
 #3: ffff8881cd57c200 (&dev->mutex){....}, at: product_show+0x22/0xa0 drivers/usb/core/sysfs.c:140
5 locks held by kworker/0:0/1806:
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:226 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:615 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:642 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x82a/0x1620 kernel/workqueue.c:2235
 #1: ffff8881ce3a7dd0 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x85e/0x1620 kernel/workqueue.c:2239
 #2: ffff8881d4d7b200 (&dev->mutex){....}, at: device_lock include/linux/device.h:771 [inline]
 #2: ffff8881d4d7b200 (&dev->mutex){....}, at: hub_event+0x1be/0x4300 drivers/usb/core/hub.c:5505
 #3: ffff8881cbc08200 (&dev->mutex){....}, at: device_lock include/linux/device.h:771 [inline]
 #3: ffff8881cbc08200 (&dev->mutex){....}, at: usb_disconnect+0x91/0x900 drivers/usb/core/hub.c:2198
 #4: ffff8881cbc0a190 (&dev->mutex){....}, at: device_release_driver_internal+0x23/0x500 drivers/base/dd.c:1165
5 locks held by kworker/1:2/1811:
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:226 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:615 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:642 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x82a/0x1620 kernel/workqueue.c:2235
 #1: ffff8881ce1a7dd0 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x85e/0x1620 kernel/workqueue.c:2239
 #2: ffff8881d4d14200 (&dev->mutex){....}, at: device_lock include/linux/device.h:771 [inline]
 #2: ffff8881d4d14200 (&dev->mutex){....}, at: hub_event+0x1be/0x4300 drivers/usb/core/hub.c:5505
 #3: ffff8881cd57c200 (&dev->mutex){....}, at: device_lock include/linux/device.h:771 [inline]
 #3: ffff8881cd57c200 (&dev->mutex){....}, at: usb_disconnect+0x91/0x900 drivers/usb/core/hub.c:2198
 #4: ffff8881cd57f190 (&dev->mutex){....}, at: device_release_driver_internal+0x23/0x500 drivers/base/dd.c:1165
4 locks held by udevd/1814:
 #0: ffff8881cc839760 (&p->lock){+.+.}, at: seq_read+0x6b/0x1160 fs/seq_file.c:161
 #1: ffff8881d176b880 (&of->mutex){+.+.}, at: kernfs_seq_start+0x49/0x180 fs/kernfs/file.c:111
 #2: ffff8881d9742388 (kn->count#75){++++}, at: kernfs_seq_start+0x73/0x180 fs/kernfs/file.c:112
 #3: ffff8881ccedb200 (&dev->mutex){....}, at: device_lock_interruptible include/linux/device.h:776 [inline]
 #3: ffff8881ccedb200 (&dev->mutex){....}, at: product_show+0x22/0xa0 drivers/usb/core/sysfs.c:140
4 locks held by udevd/1815:
 #0: ffff8881cc4c62e0 (&p->lock){+.+.}, at: seq_read+0x6b/0x1160 fs/seq_file.c:161
 #1: ffff8881cc636880 (&of->mutex){+.+.}, at: kernfs_seq_start+0x49/0x180 fs/kernfs/file.c:111
 #2: ffff8881d90cd628 (kn->count#75){++++}, at: kernfs_seq_start+0x73/0x180 fs/kernfs/file.c:112
 #3: ffff8881cbc08200 (&dev->mutex){....}, at: device_lock_interruptible include/linux/device.h:776 [inline]
 #3: ffff8881cbc08200 (&dev->mutex){....}, at: product_show+0x22/0xa0 drivers/usb/core/sysfs.c:140
4 locks held by udevd/1816:
 #0: ffff8881cc4da9a0 (&p->lock){+.+.}, at: seq_read+0x6b/0x1160 fs/seq_file.c:161
 #1: ffff8881cd2dfc80 (&of->mutex){+.+.}, at: kernfs_seq_start+0x49/0x180 fs/kernfs/file.c:111
 #2: ffff8881cc92e9a8 (kn->count#75){++++}, at: kernfs_seq_start+0x73/0x180 fs/kernfs/file.c:112
 #3: ffff8881cc10f200 (&dev->mutex){....}, at: device_lock_interruptible include/linux/device.h:776 [inline]
 #3: ffff8881cc10f200 (&dev->mutex){....}, at: product_show+0x22/0xa0 drivers/usb/core/sysfs.c:140
4 locks held by udevd/1817:
 #0: ffff8881cc4e00a0 (&p->lock){+.+.}, at: seq_read+0x6b/0x1160 fs/seq_file.c:161
 #1: ffff8881d0ed1480 (&of->mutex){+.+.}, at: kernfs_seq_start+0x49/0x180 fs/kernfs/file.c:111
 #2: ffff8881ce895388 (kn->count#75){++++}, at: kernfs_seq_start+0x73/0x180 fs/kernfs/file.c:112
 #3: ffff8881cc3f3200 (&dev->mutex){....}, at: device_lock_interruptible include/linux/device.h:776 [inline]
 #3: ffff8881cc3f3200 (&dev->mutex){....}, at: product_show+0x22/0xa0 drivers/usb/core/sysfs.c:140
5 locks held by kworker/1:4/1828:
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:226 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:615 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:642 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x82a/0x1620 kernel/workqueue.c:2235
 #1: ffff8881c6fc7dd0 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x85e/0x1620 kernel/workqueue.c:2239
 #2: ffff8881d4da2200 (&dev->mutex){....}, at: device_lock include/linux/device.h:771 [inline]
 #2: ffff8881d4da2200 (&dev->mutex){....}, at: hub_event+0x1be/0x4300 drivers/usb/core/hub.c:5505
 #3: ffff8881ccedb200 (&dev->mutex){....}, at: device_lock include/linux/device.h:771 [inline]
 #3: ffff8881ccedb200 (&dev->mutex){....}, at: usb_disconnect+0x91/0x900 drivers/usb/core/hub.c:2198
 #4: ffff8881ccede190 (&dev->mutex){....}, at: device_release_driver_internal+0x23/0x500 drivers/base/dd.c:1165
5 locks held by kworker/1:5/1832:
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:226 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:615 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:642 [inline]
 #0: ffff8881d8839d28 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x82a/0x1620 kernel/workqueue.c:2235
 #1: ffff8881cd2a7dd0 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x85e/0x1620 kernel/workqueue.c:2239
 #2: ffff8881d4cf5200 (&dev->mutex){....}, at: device_lock include/linux/device.h:771 [inline]
 #2: ffff8881d4cf5200 (&dev->mutex){....}, at: hub_event+0x1be/0x4300 drivers/usb/core/hub.c:5505
 #3: ffff8881cc10f200 (&dev->mutex){....}, at: device_lock include/linux/device.h:771 [inline]
 #3: ffff8881cc10f200 (&dev->mutex){....}, at: usb_disconnect+0x91/0x900 drivers/usb/core/hub.c:2198
 #4: ffff8881cc249190 (&dev->mutex){....}, at: device_release_driver_internal+0x23/0x500 drivers/base/dd.c:1165

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 22 Comm: khungtaskd Not tainted 5.6.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xef/0x16e lib/dump_stack.c:118
 nmi_cpu_backtrace.cold+0x70/0xb1 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1db/0x207 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:205 [inline]
 watchdog+0xa99/0xfd0 kernel/hung_task.c:289
 kthread+0x318/0x420 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 1796 Comm: syz-executor244 Not tainted 5.6.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:do_wait+0x337/0x9c0 kernel/exit.c:1471
Code: bb d0 06 00 00 48 8b 74 24 28 48 83 c7 20 e8 70 c7 0e 00 48 8b 4c 24 30 48 b8 00 00 00 00 00 fc ff df 48 c7 04 01 00 00 00 00 <48> 83 c4 78 4c 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 22 60 2a
RSP: 0018:ffff8881cdbf7c28 EFLAGS: 00000286
RAX: dffffc0000000000 RBX: ffff8881cef9b100 RCX: 1ffff11039b7ef8c
RDX: 0000000000000000 RSI: 0000000000000006 RDI: ffff8881cef9b94c
RBP: dffffc0000000000 R08: ffff8881cef9b100 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881cef9b5d8
FS:  00000000011b6880(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0c102f9000 CR3: 00000001cdf4d000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 kernel_wait4+0x14c/0x260 kernel/exit.c:1617
 __do_sys_wait4+0x147/0x160 kernel/exit.c:1629
 do_syscall_64+0xb6/0x5a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x40180a
Code: c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 8b 05 6e 7c 2d 00 85 c0 75 36 45 31 d2 48 63 d2 48 63 ff b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 d0 ff ff ff f7
RSP: 002b:00007ffe55dc7a38 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
RAX: ffffffffffffffda RBX: 0000000000000811 RCX: 000000000040180a
RDX: 0000000040000001 RSI: 00007ffe55dc7a44 RDI: ffffffffffffffff
RBP: 00000000000e6882 R08: 0000000000000704 R09: 00000000011b6880
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004027c0
R13: 0000000000402850 R14: 0000000000000000 R15: 0000000000000000

Crashes (1222):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/03/17 03:55 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 749688d2 .config console log report syz C ci2-upstream-usb
2020/02/28 22:50 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c c88c7b75 .config console log report syz C ci2-upstream-usb
2020/02/27 01:49 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 251aabb7 .config console log report syz C ci2-upstream-usb
2020/02/25 12:19 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 59b57593 .config console log report syz C ci2-upstream-usb
2020/02/07 23:14 https://github.com/google/kasan.git usb-fuzzer e5cd56e94edd 06150bf1 .config console log report syz C ci2-upstream-usb
2020/02/04 07:45 https://github.com/google/kasan.git usb-fuzzer cd234325a5f1 93e5e335 .config console log report syz C ci2-upstream-usb
2019/12/12 20:36 https://github.com/google/kasan.git usb-fuzzer 4cc037ecf2cb 08003f64 .config console log report syz C ci2-upstream-usb
2019/12/08 17:30 https://github.com/google/kasan.git usb-fuzzer 1f22d15c209f 1508f453 .config console log report syz C ci2-upstream-usb
2019/11/22 07:38 https://github.com/google/kasan.git usb-fuzzer da06441bb485 8098ea0f .config console log report syz C ci2-upstream-usb
2019/11/16 01:26 https://github.com/google/kasan.git usb-fuzzer 3183c03757f8 79248ee8 .config console log report syz C ci2-upstream-usb
2019/11/07 10:20 https://github.com/google/kasan.git usb-fuzzer d60bbfea36c1 d797d201 .config console log report syz C ci2-upstream-usb
2019/11/07 08:02 https://github.com/google/kasan.git usb-fuzzer d60bbfea36c1 d797d201 .config console log report syz C ci2-upstream-usb
2019/11/06 06:30 https://github.com/google/kasan.git usb-fuzzer b1aa9d834830 bc2c6e45 .config console log report syz C ci2-upstream-usb
2019/11/06 05:46 https://github.com/google/kasan.git usb-fuzzer b1aa9d834830 bc2c6e45 .config console log report syz C ci2-upstream-usb
2020/03/25 09:31 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 41f049cc .config console log report ci2-upstream-usb
2020/03/25 04:42 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 41f049cc .config console log report ci2-upstream-usb
2020/03/25 01:24 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 68660b21 .config console log report ci2-upstream-usb
2020/03/24 23:39 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 68660b21 .config console log report ci2-upstream-usb
2020/03/24 22:34 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 68660b21 .config console log report ci2-upstream-usb
2020/03/24 18:07 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 68660b21 .config console log report ci2-upstream-usb
2020/03/24 15:33 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 33e14df3 .config console log report ci2-upstream-usb
2020/03/24 04:08 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 33e14df3 .config console log report ci2-upstream-usb
2020/03/23 23:54 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 84f999d6 .config console log report ci2-upstream-usb
2020/03/23 20:16 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 84f999d6 .config console log report ci2-upstream-usb
2020/03/23 17:16 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 84f999d6 .config console log report ci2-upstream-usb
2020/03/23 15:48 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 84f999d6 .config console log report ci2-upstream-usb
2020/03/23 13:28 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 78267cec .config console log report ci2-upstream-usb
2020/03/23 11:55 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 78267cec .config console log report ci2-upstream-usb
2020/03/23 10:05 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 78267cec .config console log report ci2-upstream-usb
2020/03/23 07:56 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 78267cec .config console log report ci2-upstream-usb
2020/03/22 18:11 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 78267cec .config console log report ci2-upstream-usb
2020/03/22 16:13 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 78267cec .config console log report ci2-upstream-usb
2020/03/22 15:28 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 78267cec .config console log report ci2-upstream-usb
2020/03/22 11:51 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 78267cec .config console log report ci2-upstream-usb
2020/03/22 03:06 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 78267cec .config console log report ci2-upstream-usb
2020/03/21 18:23 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 78267cec .config console log report ci2-upstream-usb
2020/03/21 12:37 https://github.com/google/kasan.git usb-fuzzer e17994d1e7b1 aa6c6a55 .config console log report ci2-upstream-usb
2020/03/13 18:55 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c fd69032d .config console log report ci2-upstream-usb
2020/03/13 17:30 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c fd69032d .config console log report ci2-upstream-usb
2020/03/13 13:21 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c fd69032d .config console log report ci2-upstream-usb
2020/03/13 07:12 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c fd69032d .config console log report ci2-upstream-usb
2020/03/13 05:59 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/13 03:15 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/12 23:55 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/12 23:34 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/12 21:18 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/12 19:39 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/12 17:50 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/12 16:31 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/12 13:12 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/12 10:57 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/12 09:14 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/12 07:16 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/12 04:01 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/12 02:02 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2020/03/12 00:58 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c d850e9d0 .config console log report ci2-upstream-usb
2019/11/04 13:25 https://github.com/google/kasan.git usb-fuzzer ff6409a6ec35 18e12644 .config console log report ci2-upstream-usb
* Struck through repros no longer work on HEAD.