syzbot

 sign-in | mailing list | source | docs
🐞 Open [988] ≡ Subsystems 🐞 Fixed [5236] 🐞 Invalid [12505] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: task hung in usb_kill_urb

Status: fixed on 2019/06/14 18:29
Subsystems: usb
[Documentation on labels]
Reported-by: syzbot+d919b0f29d7b5a4994b9@syzkaller.appspotmail.com
Fix commit: 50896c410354 USB: dummy-hcd: Fix failure to give back unlinked URBs USB: dummy-hcd: Fix failure to give back unlinked URBs
First crash: 1840d, last: 1834d
▶ ▼ Discussions (5)
Title Replies (including bot) Last reply
[PATCH 5.0 000/122] 5.0.14-stable review 134 (134) 2019/05/08 06:36
[PATCH 4.19 00/99] 4.19.41-stable review 111 (111) 2019/05/08 06:35
Re: INFO: task hung in usb_kill_urb 8 (12) 2019/04/23 12:44
USB: dummy-hcd: Fix failure to give back unlinked URBs 1 (1) 2019/04/18 17:12
INFO: task hung in usb_kill_urb 6 (7) 2019/04/15 19:35
▶ ▼ Last patch testing requests (4)
Created Duration User Patch Repo Result
2019/04/17 19:09 41m stern@rowland.harvard.edu patch https://github.com/google/kasan.git usb-fuzzer OK
2019/04/16 21:14 37m stern@rowland.harvard.edu patch https://github.com/google/kasan.git usb-fuzzer report log
2019/04/16 18:25 36m stern@rowland.harvard.edu patch https://github.com/google/kasan.git usb-fuzzer OK
2019/04/16 15:44 33m stern@rowland.harvard.edu patch https://github.com/google/kasan.git usb-fuzzer report log

Sample crash report:
usb-fuzzer-gadget dummy_udc.0: failed to start USB fuzzer: -22
usb-fuzzer-gadget dummy_udc.0: failed to start USB fuzzer: -22
usb-fuzzer-gadget dummy_udc.0: failed to start USB fuzzer: -22
usb-fuzzer-gadget dummy_udc.0: failed to start USB fuzzer: -22
usb-fuzzer-gadget dummy_udc.0: failed to start USB fuzzer: -22
INFO: task kworker/1:0:17 blocked for more than 143 seconds.
      Not tainted 5.1.0-rc4-319354-g9a33b36 #3
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/1:0     D26688    17      2 0x80000000
Workqueue: usb_hub_wq hub_event
Call Trace:
usb-fuzzer-gadget dummy_udc.0: failed to start USB fuzzer: -22
 schedule+0x8f/0x180 kernel/sched/core.c:3562
 usb_kill_urb drivers/usb/core/urb.c:695 [inline]
 usb_kill_urb+0x22a/0x2c0 drivers/usb/core/urb.c:687
 usb_start_wait_urb+0x257/0x4d0 drivers/usb/core/message.c:63
 usb_internal_control_msg drivers/usb/core/message.c:101 [inline]
 usb_control_msg+0x321/0x4a0 drivers/usb/core/message.c:152
 hub_port_init+0x81d/0x2d30 drivers/usb/core/hub.c:4655
 hub_port_connect drivers/usb/core/hub.c:5021 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5204 [inline]
 port_event drivers/usb/core/hub.c:5350 [inline]
 hub_event+0x11b8/0x3b00 drivers/usb/core/hub.c:5432
 process_one_work+0x90f/0x1580 kernel/workqueue.c:2269
 process_scheduled_works kernel/workqueue.c:2331 [inline]
 worker_thread+0x7b0/0xe20 kernel/workqueue.c:2417
 kthread+0x313/0x420 kernel/kthread.c:253
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352

Showing all locks held in the system:
5 locks held by kworker/1:0/17:
 #0: 00000000391847f9 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline]
 #0: 00000000391847f9 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: 00000000391847f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline]
 #0: 00000000391847f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline]
 #0: 00000000391847f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline]
 #0: 00000000391847f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline]
 #0: 00000000391847f9 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240
 #1: 00000000437504f5 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244
 #2: 000000004f4ad73b (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline]
 #2: 000000004f4ad73b (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378
 #3: 00000000173e8c08 (&port_dev->status_lock){+.+.}, at: usb_lock_port drivers/usb/core/hub.c:2994 [inline]
 #3: 00000000173e8c08 (&port_dev->status_lock){+.+.}, at: hub_port_connect drivers/usb/core/hub.c:5020 [inline]
 #3: 00000000173e8c08 (&port_dev->status_lock){+.+.}, at: hub_port_connect_change drivers/usb/core/hub.c:5204 [inline]
 #3: 00000000173e8c08 (&port_dev->status_lock){+.+.}, at: port_event drivers/usb/core/hub.c:5350 [inline]
 #3: 00000000173e8c08 (&port_dev->status_lock){+.+.}, at: hub_event+0x11a3/0x3b00 drivers/usb/core/hub.c:5432
 #4: 00000000a241d69c (hcd->address0_mutex){+.+.}, at: hub_port_init+0x1bb/0x2d30 drivers/usb/core/hub.c:4529
1 lock held by khungtaskd/23:
 #0: 0000000091914fc2 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:5059
1 lock held by rsyslogd/5186:
 #0: 000000007d3a912d (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe8/0x100 fs/file.c:801
2 locks held by getty/5277:
 #0: 00000000066cbfab (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272
 #1: 0000000028fdb0a4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156
2 locks held by getty/5278:
 #0: 0000000015356e86 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272
 #1: 00000000cb7af99b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156
2 locks held by getty/5279:
 #0: 000000006e42508c (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272
 #1: 00000000d8ab56fb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156
2 locks held by getty/5280:
 #0: 00000000c5d9cc0f (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272
 #1: 0000000097b9c59a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156
usb-fuzzer-gadget dummy_udc.0: failed to start USB fuzzer: -22
2 locks held by getty/5281:
 #0: 000000005e4a55ae (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272
 #1: 0000000010804919 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156
2 locks held by getty/5282:
 #0: 000000001240a27c (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272
 #1: 00000000533518d7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156
2 locks held by getty/5283:
 #0: 0000000083027d7f (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272
 #1: 000000006cf1f779 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 23 Comm: khungtaskd Not tainted 5.1.0-rc4-319354-g9a33b36 #3
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xe8/0x16e lib/dump_stack.c:113
 nmi_cpu_backtrace.cold+0x48/0x87 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1a6/0x1bd lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline]
 watchdog+0x98e/0xe20 kernel/hung_task.c:288
 kthread+0x313/0x420 kernel/kthread.c:253
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x2/0x10 arch/x86/include/asm/irqflags.h:57

Crashes (1515):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/04/14 17:42 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report syz C ci2-upstream-usb
2019/04/13 19:39 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb c402d8f1 .config console log report syz C ci2-upstream-usb
2019/04/13 07:59 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb c402d8f1 .config console log report syz C ci2-upstream-usb
2019/04/12 01:57 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 13030ef8 .config console log report syz C ci2-upstream-usb
2019/04/11 21:06 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 13030ef8 .config console log report syz C ci2-upstream-usb
2019/04/11 19:22 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 13030ef8 .config console log report syz C ci2-upstream-usb
2019/04/12 16:48 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 4f421599 .config console log report syz ci2-upstream-usb
2019/04/12 06:07 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 8916f5e1 .config console log report syz ci2-upstream-usb
2019/04/17 18:12 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 17:50 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 16:49 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 15:59 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 15:06 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 14:06 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 13:09 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 12:12 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 11:12 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 10:39 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 09:35 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 08:27 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 07:25 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 06:26 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 05:25 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 04:41 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 03:31 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 03:02 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 01:55 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb b0e8efcb .config console log report ci2-upstream-usb
2019/04/17 00:54 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/17 00:31 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 23:25 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 22:30 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 21:17 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 21:06 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 20:03 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 18:56 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 18:52 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 17:47 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 17:12 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 15:59 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 15:10 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 14:07 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 13:26 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 12:04 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 11:11 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 10:10 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 09:37 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 08:37 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 08:20 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/16 07:19 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 505ab413 .config console log report ci2-upstream-usb
2019/04/11 15:45 https://github.com/google/kasan.git usb-fuzzer 9a33b36996cb 13030ef8 .config console log report ci2-upstream-usb
* Struck through repros no longer work on HEAD.