Warning: Permanently added '10.128.0.229' (ECDSA) to the list of known hosts. executing program [ 318.712296][ T2903] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 318.952259][ T2903] usb 1-1: Using ep0 maxpacket: 8 [ 319.072788][ T2903] usb 1-1: config 3 has an invalid interface number: 239 but max is 1 [ 319.081247][ T2903] usb 1-1: config 3 has no interface number 1 [ 319.087568][ T2903] usb 1-1: config 3 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 319.097499][ T2903] usb 1-1: config 3 interface 239 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 319.108277][ T2903] usb 1-1: config 3 interface 239 has no altsetting 0 [ 319.272376][ T2903] usb 1-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=eb.31 [ 319.281448][ T2903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.289655][ T2903] usb 1-1: Product: syz [ 319.293993][ T2903] usb 1-1: Manufacturer: syz [ 319.298600][ T2903] usb 1-1: SerialNumber: syz [ 324.524027][ T2903] usb 1-1: USB2VGA dongle found at address 2 [ 324.535500][ T2903] usb 1-1: Allocated 8 output buffers [ 381.604094][ T3000] udevd[3000]: worker [3570] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 420.282264][ T2903] usb 1-1: Failed to early initialize device [ 420.403655][ T2903] usb 1-1: USB2VGA dongle found at address 2 [ 420.411195][ T2903] usb 1-1: Allocated 8 output buffers [ 501.515197][ T3000] udevd[3000]: worker [3570] /devices/platform/dummy_hcd.0/usb1/1-1 timeout; kill it [ 501.524965][ T3000] udevd[3000]: seq 7530 '/devices/platform/dummy_hcd.0/usb1/1-1' killed [ 501.534265][ T3000] udevd[3000]: worker [3570] terminated by signal 9 (Killed) [ 501.541663][ T3000] udevd[3000]: worker [3570] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' executing program [ 516.202261][ T2903] usb 1-1: Failed to early initialize device [ 516.233018][ T2903] usb 1-1: USB disconnect, device number 2 executing program executing program [ 526.732167][ T2903] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 526.972154][ T2903] usb 1-1: Using ep0 maxpacket: 8 [ 527.092239][ T2903] usb 1-1: config 3 has an invalid interface number: 239 but max is 1 [ 527.100515][ T2903] usb 1-1: config 3 has no interface number 1 [ 527.106720][ T2903] usb 1-1: config 3 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 527.116460][ T2903] usb 1-1: config 3 interface 239 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 527.127239][ T2903] usb 1-1: config 3 interface 239 has no altsetting 0 [ 527.292295][ T2903] usb 1-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=eb.31 [ 527.301374][ T2903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.309695][ T2903] usb 1-1: Product: syz [ 527.313899][ T2903] usb 1-1: Manufacturer: syz [ 527.318506][ T2903] usb 1-1: SerialNumber: syz [ 532.523867][ T2903] usb 1-1: USB2VGA dongle found at address 3 [ 532.533764][ T2903] usb 1-1: Allocated 8 output buffers [ 589.608580][ T3000] udevd[3000]: worker [3586] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 628.282322][ T2903] usb 1-1: Failed to early initialize device [ 628.403620][ T2903] usb 1-1: USB2VGA dongle found at address 3 [ 628.410816][ T2903] usb 1-1: Allocated 8 output buffers [ 709.511335][ T3000] udevd[3000]: worker [3586] /devices/platform/dummy_hcd.0/usb1/1-1 timeout; kill it [ 709.521084][ T3000] udevd[3000]: seq 7567 '/devices/platform/dummy_hcd.0/usb1/1-1' killed [ 709.531155][ T3000] udevd[3000]: worker [3586] terminated by signal 9 (Killed) [ 709.538750][ T3000] udevd[3000]: worker [3586] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 716.122170][ T28] INFO: task syz-executor190:3589 blocked for more than 143 seconds. [ 716.130386][ T28] Not tainted 6.1.30-syzkaller #0 [ 716.136423][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.145207][ T28] task:syz-executor190 state:D stack:26848 pid:3589 ppid:3567 flags:0x00004004 [ 716.154490][ T28] Call Trace: [ 716.157770][ T28] [ 716.160704][ T28] __schedule+0x132c/0x4330 [ 716.166140][ T28] ? release_firmware_map_entry+0x185/0x185 [ 716.172092][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 716.177618][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 716.182862][ T28] schedule+0xbf/0x180 [ 716.186961][ T28] schedule_preempt_disabled+0xf/0x20 [ 716.194473][ T28] __mutex_lock_common+0xe2b/0x2520 [ 716.199758][ T28] ? usbdev_open+0x152/0x7a0 [ 716.204443][ T28] ? mutex_lock_io_nested+0x60/0x60 [ 716.209687][ T28] ? bus_for_each_dev+0x1f0/0x1f0 [ 716.214870][ T28] mutex_lock_nested+0x17/0x20 [ 716.219681][ T28] usbdev_open+0x152/0x7a0 [ 716.224262][ T28] ? asm_sysvec_call_function_single+0x16/0x20 [ 716.230470][ T28] ? usbdev_mmap+0x770/0x770 [ 716.235146][ T28] ? preempt_count_sub+0x2/0x160 [ 716.240184][ T28] ? module_put+0x15a/0x350 [ 716.245032][ T28] chrdev_open+0x54a/0x630 [ 716.249517][ T28] ? cd_forget+0x160/0x160 [ 716.254091][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 716.259315][ T28] ? fsnotify_perm+0x471/0x590 [ 716.264201][ T28] ? cd_forget+0x160/0x160 [ 716.268639][ T28] do_dentry_open+0x7f9/0x10f0 [ 716.273528][ T28] path_openat+0x2644/0x2e60 [ 716.278207][ T28] ? __kfence_alloc+0x340/0x370 [ 716.283248][ T28] ? __kfence_alloc+0x261/0x370 [ 716.288143][ T28] ? do_filp_open+0x480/0x480 [ 716.292905][ T28] do_filp_open+0x230/0x480 [ 716.297436][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 716.302094][ T28] ? _raw_spin_unlock+0x24/0x40 [ 716.307051][ T28] ? alloc_fd+0x59c/0x640 [ 716.311401][ T28] do_sys_openat2+0x13b/0x500 [ 716.316150][ T28] ? do_sys_open+0x220/0x220 [ 716.320771][ T28] ? xfd_validate_state+0x6a/0x140 [ 716.325947][ T28] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 716.331926][ T28] __x64_sys_openat+0x243/0x290 [ 716.336859][ T28] ? __ia32_sys_open+0x270/0x270 [ 716.341827][ T28] ? syscall_enter_from_user_mode+0x2e/0x220 [ 716.347932][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 716.353358][ T28] ? syscall_enter_from_user_mode+0x2e/0x220 [ 716.359351][ T28] do_syscall_64+0x3d/0xb0 [ 716.363818][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 716.369743][ T28] RIP: 0033:0x7f46552cbf47 [ 716.374220][ T28] RSP: 002b:00007ffc245df770 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 716.382768][ T28] RAX: ffffffffffffffda RBX: 0000000000000286 RCX: 00007f46552cbf47 [ 716.390738][ T28] RDX: 0000000000000000 RSI: 00007ffc245df7f0 RDI: 00000000ffffff9c [ 716.398822][ T28] RBP: 00007ffc245df7f0 R08: 000000000000fff3 R09: 0000000000000000 [ 716.406837][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.414879][ T28] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 716.422897][ T28] [ 716.425933][ T28] [ 716.425933][ T28] Showing all locks held in the system: [ 716.433708][ T28] 1 lock held by rcu_tasks_kthre/12: [ 716.439006][ T28] #0: ffffffff8cf273f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xd20 [ 716.449792][ T28] 1 lock held by rcu_tasks_trace/13: [ 716.455130][ T28] #0: ffffffff8cf27bf0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xd20 [ 716.466152][ T28] 1 lock held by khungtaskd/28: [ 716.471008][ T28] #0: ffffffff8cf27220 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 716.480423][ T28] 5 locks held by kworker/1:2/2903: [ 716.485679][ T28] #0: ffff888018ecb538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x77a/0x11f0 [ 716.496537][ T28] #1: ffffc9000c0e7d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7bd/0x11f0 [ 716.507929][ T28] #2: ffff888144753190 (&dev->mutex){....}-{3:3}, at: hub_event+0x20e/0x57b0 [ 716.516964][ T28] #3: ffff88807f073190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 716.526379][ T28] #4: ffff88807d980118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 716.535708][ T28] 2 locks held by getty/3313: [ 716.540397][ T28] #0: ffff888028a5c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 716.550248][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 716.560494][ T28] 4 locks held by udevd/3584: [ 716.565205][ T28] #0: ffff8880197ea0a0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10 [ 716.574075][ T28] #1: ffff888077acc888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x4f/0x3a0 [ 716.583407][ T28] #2: ffff888014ecf490 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0x6e/0x3a0 [ 716.592964][ T28] #3: ffff88807f073190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x22/0x90 [ 716.602345][ T28] 1 lock held by syz-executor190/3589: [ 716.607809][ T28] #0: ffff888144753190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x152/0x7a0 [ 716.616865][ T28] [ 716.619224][ T28] ============================================= [ 716.619224][ T28] [ 716.627705][ T28] NMI backtrace for cpu 0 [ 716.632066][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.30-syzkaller #0 [ 716.639869][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 716.650272][ T28] Call Trace: [ 716.653554][ T28] [ 716.656491][ T28] dump_stack_lvl+0x1e3/0x2cb [ 716.661183][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 716.666649][ T28] ? panic+0x75d/0x75d [ 716.670732][ T28] ? console_trylock_spinning+0x450/0x450 [ 716.676542][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 716.681717][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 716.686689][ T28] ? vprintk_emit+0x109/0x1f0 [ 716.691396][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 716.697599][ T28] ? _printk+0xd1/0x111 [ 716.701830][ T28] ? panic+0x75d/0x75d [ 716.705923][ T28] ? __wake_up_klogd+0xcc/0x100 [ 716.710799][ T28] ? panic+0x75d/0x75d [ 716.714898][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 716.721030][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 716.727266][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 716.733276][ T28] watchdog+0xf18/0xf60 [ 716.737513][ T28] kthread+0x26e/0x300 [ 716.741631][ T28] ? hungtask_pm_notify+0x50/0x50 [ 716.746682][ T28] ? kthread_blkcg+0xd0/0xd0 [ 716.751290][ T28] ret_from_fork+0x1f/0x30 [ 716.755794][ T28] [ 716.758946][ T28] Sending NMI from CPU 0 to CPUs 1: [ 716.764234][ C1] NMI backtrace for cpu 1 [ 716.764246][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.30-syzkaller #0 [ 716.764269][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 716.764278][ C1] RIP: 0010:pvclock_clocksource_read+0x9a/0x710 [ 716.764352][ C1] Code: 48 89 54 24 40 48 89 4c 24 28 42 0f b6 04 3a 84 c0 0f 85 47 01 00 00 42 0f b6 04 39 84 c0 0f 85 8d 01 00 00 45 8b 28 0f 01 f9 <66> 90 48 89 c5 49 89 d6 49 c1 e6 20 48 8b 44 24 60 42 0f b6 04 38 [ 716.764365][ C1] RSP: 0018:ffffc900001e0b50 EFLAGS: 00000046 [ 716.764380][ C1] RAX: 0000000025f8abba RBX: 1ffffffff1f91609 RCX: 0000000000000001 [ 716.764392][ C1] RDX: 0000000000000171 RSI: ffffffff8fc8b05c RDI: ffffffff8fc8b05d [ 716.764403][ C1] RBP: ffffc900001e0cd0 R08: ffffffff8fc8b040 R09: ffffffff8fc8b048 [ 716.764416][ C1] R10: ffffffff8fc8b058 R11: ffffffff8fc8b050 R12: ffff88813fed28c4 [ 716.764429][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: dffffc0000000000 [ 716.764439][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 716.764453][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.764465][ C1] CR2: 00007ff4e41ac580 CR3: 000000007e997000 CR4: 00000000003506e0 [ 716.764479][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 716.764488][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 716.764498][ C1] Call Trace: [ 716.764503][ C1] [ 716.764510][ C1] ? read_lock_is_recursive+0x10/0x10 [ 716.764529][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 716.764550][ C1] kvm_sched_clock_read+0x14/0x40 [ 716.764565][ C1] lock_pin_lock+0x246/0x420 [ 716.764582][ C1] ? lock_release+0xa20/0xa20 [ 716.764601][ C1] ? raw_spin_rq_lock_nested+0x26/0x140 [ 716.764625][ C1] _nohz_idle_balance+0x4ab/0x8d0 [ 716.764672][ C1] ? nohz_run_idle_balance+0x150/0x150 [ 716.764696][ C1] ? print_irqtrace_events+0x210/0x210 [ 716.764714][ C1] ? run_rebalance_domains+0xf/0x1b0 [ 716.764740][ C1] __do_softirq+0x2e9/0xa4c [ 716.764762][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 716.764780][ C1] ? __irq_exit_rcu+0x155/0x240 [ 716.764815][ C1] ? __entry_text_end+0x1feacb/0x1feacb [ 716.764837][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 716.764858][ C1] __irq_exit_rcu+0x155/0x240 [ 716.764874][ C1] ? irq_exit_rcu+0x20/0x20 [ 716.764889][ C1] ? __flush_smp_call_function_queue+0x78c/0xd00 [ 716.764947][ C1] irq_exit_rcu+0x5/0x20 [ 716.764961][ C1] sysvec_call_function_single+0x8e/0xb0 [ 716.764985][ C1] [ 716.764990][ C1] [ 716.764995][ C1] asm_sysvec_call_function_single+0x16/0x20 [ 716.765014][ C1] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 716.765041][ C1] Code: 40 fd f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 44 ee 03 f7 0f 1f 44 00 00 e8 3a 3c fd f6 0f 00 2d 03 3a ba 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 db 83 53 f7 [ 716.765053][ C1] RSP: 0018:ffffc90000177ba0 EFLAGS: 000002d3 [ 716.765067][ C1] RAX: ffffffff8a8c8936 RBX: 0000000000000000 RCX: ffff88813fed1dc0 [ 716.765078][ C1] RDX: 0000000000000000 RSI: ffffffff8aebd0a0 RDI: ffffffff8b3cc8a0 [ 716.765089][ C1] RBP: ffffc90000177c30 R08: ffffffff8a8c8918 R09: ffffed1027fda3b9 [ 716.765101][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200002ef74 [ 716.765112][ C1] R13: ffff888017f03004 R14: ffffc90000177bc0 R15: dffffc0000000000 [ 716.765128][ C1] ? acpi_idle_do_entry+0xe8/0x340 [ 716.765152][ C1] ? acpi_idle_do_entry+0x106/0x340 [ 716.765180][ C1] ? acpi_idle_enter_bm+0x5e0/0x5e0 [ 716.765207][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 716.765234][ C1] acpi_idle_enter+0x352/0x4f0 [ 716.765267][ C1] cpuidle_enter_state+0x516/0xf80 [ 716.765311][ C1] ? rcu_lock_acquire+0x30/0x30 [ 716.765336][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 716.765352][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 716.765368][ C1] ? rcu_read_lock_sched_held+0x89/0x130 [ 716.765458][ C1] cpuidle_enter+0x59/0x90 [ 716.765476][ C1] do_idle+0x3ce/0x680 [ 716.765496][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 716.765520][ C1] cpu_startup_entry+0x14/0x20 [ 716.765536][ C1] start_secondary+0xe4/0xf0 [ 716.765562][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 716.765591][ C1] [ 716.765597][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.363 msecs [ 716.766233][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 716.766246][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.30-syzkaller #0 [ 716.766308][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 716.766321][ T28] Call Trace: [ 716.766328][ T28] [ 716.766339][ T28] dump_stack_lvl+0x1e3/0x2cb [ 716.766376][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 716.766405][ T28] ? panic+0x75d/0x75d [ 716.766442][ T28] ? vscnprintf+0x59/0x80 [ 716.766478][ T28] panic+0x318/0x75d [ 716.766511][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 716.766540][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 716.766583][ T28] ? nmi_trigger_cpumask_backtrace+0x2ca/0x3f0 [ 716.766615][ T28] watchdog+0xf56/0xf60 [ 716.766651][ T28] kthread+0x26e/0x300 [ 716.766674][ T28] ? hungtask_pm_notify+0x50/0x50 [ 716.766693][ T28] ? kthread_blkcg+0xd0/0xd0 [ 716.766718][ T28] ret_from_fork+0x1f/0x30 [ 716.766781][ T28] [ 716.770353][ T28] Kernel Offset: disabled [ 717.283187][ T28] Rebooting in 86400 seconds..