DUID 00:04:1b:4d:40:85:b1:6b:61:74:2c:72:11:ce:21:17:3d:97 forked to background, child pid 3176 [ 23.450827][ T3177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.462128][ T3177] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 76.282310][ T1066] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. executing program [ 276.120515][ T3526] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 276.127107][ T3526] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 276.136893][ T3526] vhci_hcd vhci_hcd.0: Device attached [ 276.490972][ T1291] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 429.561080][ T27] INFO: task kworker/0:3:1291 blocked for more than 143 seconds. [ 429.568914][ T27] Not tainted 5.15.156-syzkaller #0 [ 429.574701][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.583433][ T27] task:kworker/0:3 state:D stack:24184 pid: 1291 ppid: 2 flags:0x00004000 [ 429.592690][ T27] Workqueue: usb_hub_wq hub_event [ 429.597802][ T27] Call Trace: [ 429.601121][ T27] [ 429.604063][ T27] __schedule+0x12c4/0x45b0 [ 429.608643][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 429.613762][ T27] ? mark_lock+0x98/0x340 [ 429.618096][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 429.624125][ T27] ? release_firmware_map_entry+0x190/0x190 [ 429.630022][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 429.635265][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 429.640521][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 429.645924][ T27] schedule+0x11b/0x1f0 [ 429.650110][ T27] usb_kill_urb+0x1c9/0x300 [ 429.654786][ T27] ? usb_unlink_urb+0xa0/0xa0 [ 429.659474][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 429.664704][ T27] ? init_wait_entry+0xd0/0xd0 [ 429.669589][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 429.674851][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 429.680063][ T27] usb_start_wait_urb+0x1ac/0x510 [ 429.685152][ T27] ? usb_api_blocking_completion+0xa0/0xa0 [ 429.691055][ T27] usb_control_msg+0x2ad/0x4c0 [ 429.695809][ T27] ? usb_anchor_empty+0x40/0x40 [ 429.700639][ T27] ? kmem_cache_alloc_trace+0x143/0x290 [ 429.706294][ T27] ? hub_port_init+0x16d/0x27a0 [ 429.711975][ T27] hub_port_init+0xba4/0x27a0 [ 429.716654][ T27] ? _raw_spin_unlock+0x40/0x40 [ 429.721536][ T27] hub_event+0x28ed/0x54c0 [ 429.725974][ T27] ? led_work+0x700/0x700 [ 429.730286][ T27] ? read_lock_is_recursive+0x10/0x10 [ 429.735707][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 429.741719][ T27] ? down_read_killable_nested+0x1a0/0x350 [ 429.747517][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 429.753472][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 429.758673][ T27] process_one_work+0x8a1/0x10c0 [ 429.763703][ T27] ? worker_detach_from_pool+0x260/0x260 [ 429.769336][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 429.774960][ T27] ? kthread_data+0x4e/0xc0 [ 429.779534][ T27] ? wq_worker_running+0x97/0x170 [ 429.784598][ T27] worker_thread+0xaca/0x1280 [ 429.789284][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 429.795249][ T27] kthread+0x3f6/0x4f0 [ 429.799322][ T27] ? rcu_lock_release+0x20/0x20 [ 429.804220][ T27] ? kthread_blkcg+0xd0/0xd0 [ 429.808846][ T27] ret_from_fork+0x1f/0x30 [ 429.813339][ T27] [ 429.816425][ T27] INFO: task syz-executor158:3526 blocked for more than 143 seconds. [ 429.824551][ T27] Not tainted 5.15.156-syzkaller #0 [ 429.830265][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.838980][ T27] task:syz-executor158 state:D stack:25088 pid: 3526 ppid: 3525 flags:0x00004006 [ 429.848221][ T27] Call Trace: [ 429.851534][ T27] [ 429.854467][ T27] __schedule+0x12c4/0x45b0 [ 429.858972][ T27] ? release_firmware_map_entry+0x190/0x190 [ 429.865007][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 429.870477][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 429.875765][ T27] schedule+0x11b/0x1f0 [ 429.879923][ T27] schedule_preempt_disabled+0xf/0x20 [ 429.885326][ T27] __mutex_lock_common+0xe34/0x25a0 [ 429.890538][ T27] ? usbdev_release+0x76/0x7c0 [ 429.895537][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 429.900753][ T27] ? memset+0x1f/0x40 [ 429.904778][ T27] ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0 [ 429.911647][ T27] mutex_lock_nested+0x17/0x20 [ 429.916399][ T27] usbdev_release+0x76/0x7c0 [ 429.921131][ T27] ? ima_file_free+0xeb/0x3c0 [ 429.925908][ T27] ? usbdev_open+0x7a0/0x7a0 [ 429.930484][ T27] __fput+0x3bf/0x890 [ 429.934570][ T27] task_work_run+0x129/0x1a0 [ 429.939163][ T27] exit_to_user_mode_loop+0x106/0x130 [ 429.944616][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 429.950162][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 429.955806][ T27] do_syscall_64+0x47/0xb0 [ 429.960222][ T27] ? clear_bhb_loop+0x15/0x70 [ 429.964930][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 429.970830][ T27] RIP: 0033:0x7f40c85ba0e0 [ 429.975290][ T27] RSP: 002b:00007ffeeaaddd48 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 429.983747][ T27] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f40c85ba0e0 [ 429.991757][ T27] RDX: 0000000000000007 RSI: 00007ffeeaadd880 RDI: 0000000000000003 [ 429.999729][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 430.007737][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000f4240 [ 430.015747][ T27] R13: 00007ffeeaaddfe8 R14: 0000000000000001 R15: 00007ffeeaaddd80 [ 430.023758][ T27] [ 430.026785][ T27] [ 430.026785][ T27] Showing all locks held in the system: [ 430.034541][ T27] 1 lock held by khungtaskd/27: [ 430.039382][ T27] #0: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 430.048748][ T27] 5 locks held by kworker/0:3/1291: [ 430.053974][ T27] #0: ffff88801717c138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 430.064701][ T27] #1: ffffc90005a77d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 430.076039][ T27] #2: ffff88801fad9220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0 [ 430.084940][ T27] #3: ffff88801fadd5c0 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2238/0x54c0 [ 430.094907][ T27] #4: ffff88801fa5e468 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2260/0x54c0 [ 430.104622][ T27] 2 locks held by getty/3264: [ 430.109293][ T27] #0: ffff88814ab28098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 430.119296][ T27] #1: ffffc900024b32e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 430.129441][ T27] 1 lock held by syz-executor158/3526: [ 430.134932][ T27] #0: ffff88801fad9220 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x76/0x7c0 [ 430.144110][ T27] [ 430.146419][ T27] ============================================= [ 430.146419][ T27] [ 430.154857][ T27] NMI backtrace for cpu 1 [ 430.159175][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.156-syzkaller #0 [ 430.167134][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 430.177173][ T27] Call Trace: [ 430.180434][ T27] [ 430.183346][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 430.188004][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 430.193618][ T27] ? panic+0x860/0x860 [ 430.197723][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 430.202843][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 430.207758][ T27] ? __wake_up_klogd+0xd5/0x100 [ 430.212603][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 430.218741][ T27] ? _printk+0xd1/0x120 [ 430.222876][ T27] ? panic+0x860/0x860 [ 430.226924][ T27] ? __wake_up_klogd+0xcc/0x100 [ 430.231753][ T27] ? panic+0x860/0x860 [ 430.235799][ T27] ? __rcu_read_unlock+0x92/0x100 [ 430.240845][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 430.246926][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 430.252886][ T27] watchdog+0xe72/0xeb0 [ 430.257059][ T27] kthread+0x3f6/0x4f0 [ 430.261106][ T27] ? hungtask_pm_notify+0x50/0x50 [ 430.266111][ T27] ? kthread_blkcg+0xd0/0xd0 [ 430.270678][ T27] ret_from_fork+0x1f/0x30 [ 430.275081][ T27] [ 430.278172][ T27] Sending NMI from CPU 1 to CPUs 0: [ 430.283458][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340 [ 430.291281][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 430.300068][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.156-syzkaller #0 [ 430.308045][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 430.318171][ T27] Call Trace: [ 430.321435][ T27] [ 430.324354][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 430.329019][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 430.334633][ T27] ? panic+0x860/0x860 [ 430.338706][ T27] panic+0x318/0x860 [ 430.342601][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 430.348214][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 430.354347][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 430.359535][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 430.365586][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 430.371722][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 430.377868][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 430.384024][ T27] watchdog+0xeb0/0xeb0 [ 430.388185][ T27] kthread+0x3f6/0x4f0 [ 430.392235][ T27] ? hungtask_pm_notify+0x50/0x50 [ 430.397264][ T27] ? kthread_blkcg+0xd0/0xd0 [ 430.401851][ T27] ret_from_fork+0x1f/0x30 [ 430.406282][ T27] [ 430.409585][ T27] Kernel Offset: disabled [ 430.413908][ T27] Rebooting in 86400 seconds..