[info] Using makefile-style concurrent boot in runlevel 2. [ 15.061038][ C1] random: crng init done [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 422.161684][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 422.401513][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 422.521655][ T12] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 422.529883][ T12] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.540039][ T12] usb 1-1: config 0 has no interface number 0 [ 422.546207][ T12] usb 1-1: too many endpoints for config 0 interface 98 altsetting 1: 128, using maximum allowed: 30 [ 422.557191][ T12] usb 1-1: config 0 interface 98 altsetting 1 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 422.568414][ T12] usb 1-1: config 0 interface 98 altsetting 1 endpoint 0x85 has invalid maxpacket 1792, setting to 1024 [ 422.579552][ T12] usb 1-1: config 0 interface 98 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 422.596600][ T12] usb 1-1: config 0 interface 98 has no altsetting 0 [ 422.603319][ T12] usb 1-1: New USB device found, idVendor=0f11, idProduct=1010, bcdDevice=3f.73 [ 422.612387][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.622384][ T12] usb 1-1: config 0 descriptor?? [ 422.666146][ T12] ldusb 1-1:0.98: Interrupt out endpoint not found (using control endpoint instead) [ 422.678357][ T12] ldusb 1-1:0.98: LD USB Device #0 now attached to major 180 minor 0 [ 422.862168][ T1721] ldusb 1-1:0.98: Write buffer overflow, 66 bytes dropped [ 576.391522][ T23] INFO: task syz-executor952:1721 blocked for more than 143 seconds. [ 576.399762][ T23] Not tainted 5.3.0-rc7+ #0 [ 576.404821][ T23] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.413510][ T23] syz-executor952 D28344 1721 1719 0x00000000 [ 576.419869][ T23] Call Trace: [ 576.423305][ T23] ? __schedule+0x703/0x1440 [ 576.427891][ T23] ? __sched_text_start+0x8/0x8 [ 576.432832][ T23] ? mark_held_locks+0x9f/0xe0 [ 576.437591][ T23] schedule+0xca/0x250 [ 576.441684][ T23] schedule_timeout+0x440/0xb20 [ 576.446524][ T23] ? find_held_lock+0x2d/0x110 [ 576.451264][ T23] ? usleep_range+0x160/0x160 [ 576.456013][ T23] ? __next_timer_interrupt+0x190/0x190 [ 576.461577][ T23] ? mark_held_locks+0x9f/0xe0 [ 576.466318][ T23] ? _raw_spin_unlock_irq+0x24/0x30 [ 576.471540][ T23] wait_for_completion_timeout+0x282/0x3e0 [ 576.477335][ T23] ? wait_for_completion_io+0x3c0/0x3c0 [ 576.482949][ T23] ? wake_up_q+0xf0/0xf0 [ 576.487247][ T23] ? usb_submit_urb+0x6ed/0x13b0 [ 576.492203][ T23] usb_start_wait_urb+0x14b/0x2b0 [ 576.497216][ T23] ? sg_clean+0x230/0x230 [ 576.501622][ T23] ? kasan_unpoison_shadow+0x30/0x40 [ 576.506895][ T23] ? memset+0x20/0x40 [ 576.510866][ T23] usb_control_msg+0x31c/0x4a0 [ 576.515665][ T23] ? usb_start_wait_urb+0x2b0/0x2b0 [ 576.521016][ T23] ? __might_fault+0x192/0x1d0 [ 576.525911][ T23] ld_usb_write+0x856/0xa10 [ 576.530415][ T23] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 576.536244][ T23] ? copy_overflow+0x30/0x30 [ 576.540862][ T23] ? quarantine_put+0xb2/0x150 [ 576.545724][ T23] ? lockdep_hardirqs_on+0x379/0x580 [ 576.551088][ T23] ? security_file_permission+0x8a/0x370 [ 576.556786][ T23] ? copy_overflow+0x30/0x30 [ 576.561466][ T23] __vfs_write+0x76/0x100 [ 576.565783][ T23] vfs_write+0x262/0x5c0 [ 576.570000][ T23] ksys_write+0x1e8/0x250 [ 576.574346][ T23] ? __ia32_sys_read+0xb0/0xb0 [ 576.579140][ T23] ? hrtimer_nanosleep+0x510/0x510 [ 576.584295][ T23] ? trace_hardirqs_off_caller+0x55/0x1e0 [ 576.590065][ T23] do_syscall_64+0xb7/0x580 [ 576.594591][ T23] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 576.600473][ T23] RIP: 0033:0x440779 [ 576.604393][ T23] Code: Bad RIP value. [ 576.608446][ T23] RSP: 002b:00007ffd90a29748 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 576.616874][ T23] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440779 [ 576.624879][ T23] RDX: 0000000000000092 RSI: 0000000020000140 RDI: 0000000000000004 [ 576.632866][ T23] RBP: 00000000006cb018 R08: 000000000000000f R09: 00000000004002c8 [ 576.640826][ T23] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402000 [ 576.648818][ T23] R13: 0000000000402090 R14: 0000000000000000 R15: 0000000000000000 [ 576.656812][ T23] [ 576.656812][ T23] Showing all locks held in the system: [ 576.664549][ T23] 1 lock held by khungtaskd/23: [ 576.669403][ T23] #0: 000000002f4ecff1 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x269 [ 576.678788][ T23] 1 lock held by rsyslogd/1601: [ 576.683659][ T23] #0: 0000000072e2a5e4 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 [ 576.692357][ T23] 2 locks held by getty/1691: [ 576.697020][ T23] #0: 00000000f9586bc9 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 576.706305][ T23] #1: 000000005e9760e3 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 [ 576.715880][ T23] 2 locks held by getty/1692: [ 576.720529][ T23] #0: 00000000a3c38810 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 576.729769][ T23] #1: 0000000069017299 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 [ 576.739350][ T23] 2 locks held by getty/1693: [ 576.744066][ T23] #0: 000000002afc8512 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 576.753295][ T23] #1: 00000000ea2b3359 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 [ 576.762863][ T23] 2 locks held by getty/1694: [ 576.767521][ T23] #0: 00000000b24afe2a (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 576.776759][ T23] #1: 00000000ae0d5444 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 [ 576.786345][ T23] 2 locks held by getty/1695: [ 576.791008][ T23] #0: 000000005e2d099e (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 576.800223][ T23] #1: 0000000029e8b2e6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 [ 576.809787][ T23] 2 locks held by getty/1696: [ 576.814469][ T23] #0: 0000000015792bef (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 576.823751][ T23] #1: 00000000d9742d8e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 [ 576.833378][ T23] 2 locks held by getty/1697: [ 576.838042][ T23] #0: 00000000cbd4d76e (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 576.847264][ T23] #1: 0000000017b60d7a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0 [ 576.856845][ T23] 1 lock held by syz-executor952/1721: [ 576.862312][ T23] #0: 000000009a204c0d (&dev->mutex#3){+.+.}, at: ld_usb_write+0x111/0xa10 [ 576.870995][ T23] [ 576.873341][ T23] ============================================= [ 576.873341][ T23] [ 576.881773][ T23] NMI backtrace for cpu 1 [ 576.886083][ T23] CPU: 1 PID: 23 Comm: khungtaskd Not tainted 5.3.0-rc7+ #0 [ 576.893345][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.903433][ T23] Call Trace: [ 576.906762][ T23] dump_stack+0xca/0x13e [ 576.911017][ T23] ? x86_vector_activate.cold+0x6c/0x92 [ 576.916559][ T23] nmi_cpu_backtrace.cold+0x55/0x96 [ 576.921746][ T23] ? lapic_can_unplug_cpu.cold+0x3f/0x3f [ 576.927356][ T23] nmi_trigger_cpumask_backtrace+0x1b0/0x1c7 [ 576.933322][ T23] watchdog+0x9a4/0xe50 [ 576.937484][ T23] ? reset_hung_task_detector+0x30/0x30 [ 576.943036][ T23] kthread+0x318/0x420 [ 576.947082][ T23] ? kthread_create_on_node+0xf0/0xf0 [ 576.952430][ T23] ret_from_fork+0x24/0x30 [ 576.956889][ T23] Sending NMI from CPU 1 to CPUs 0: [ 576.962172][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0x28/0x2e0 [ 576.963118][ T23] Kernel panic - not syncing: hung_task: blocked tasks [ 576.977072][ T23] CPU: 1 PID: 23 Comm: khungtaskd Not tainted 5.3.0-rc7+ #0 [ 576.984330][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.994358][ T23] Call Trace: [ 576.997623][ T23] dump_stack+0xca/0x13e [ 577.001888][ T23] panic+0x2a3/0x6da [ 577.005758][ T23] ? add_taint.cold+0x16/0x16 [ 577.010406][ T23] ? cpumask_next+0x1f/0x30 [ 577.014923][ T23] ? printk_safe_flush+0xd9/0x120 [ 577.019939][ T23] ? watchdog+0x9a4/0xe50 [ 577.024259][ T23] ? nmi_trigger_cpumask_backtrace+0x168/0x1c7 [ 577.030385][ T23] watchdog+0x9b5/0xe50 [ 577.034516][ T23] ? reset_hung_task_detector+0x30/0x30 [ 577.040033][ T23] kthread+0x318/0x420 [ 577.044077][ T23] ? kthread_create_on_node+0xf0/0xf0 [ 577.049423][ T23] ret_from_fork+0x24/0x30 [ 577.054579][ T23] Kernel Offset: disabled [ 577.058900][ T23] Rebooting in 86400 seconds..