Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. executing program [ 145.716034][ T29] audit: type=1400 audit(1723097891.042:80): avc: denied { execmem } for pid=2646 comm="syz-executor390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 145.744251][ T29] audit: type=1400 audit(1723097891.042:81): avc: denied { read write } for pid=2647 comm="syz-executor390" name="raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.768096][ T29] audit: type=1400 audit(1723097891.042:82): avc: denied { open } for pid=2647 comm="syz-executor390" path="/dev/raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.791816][ T29] audit: type=1400 audit(1723097891.042:83): avc: denied { ioctl } for pid=2647 comm="syz-executor390" path="/dev/raw-gadget" dev="devtmpfs" ino=140 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.982357][ T41] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 146.164447][ T41] usb 1-1: New USB device found, idVendor=0bda, idProduct=818a, bcdDevice=e2.d8 [ 146.173687][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.185011][ T41] usb 1-1: config 0 descriptor?? [ 146.392116][ T41] rtl8192cu: Chip version 0x10 executing program [ 146.798743][ T41] usb 1-1: reg 0x0, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x69 reqtype=0x40 [ 146.822124][ T41] usb 1-1: reg 0x2, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 reqtype=0xc0 [ 146.834672][ T41] usb 1-1: reg 0x2, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x1000 reqtype=0x40 [ 146.847615][ T41] usb 1-1: reg 0x8, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 reqtype=0xc0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 209.944559][ T2545] udevd[2545]: worker [2648] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 330.302142][ T2545] udevd[2545]: worker [2648] /devices/platform/dummy_hcd.0/usb1/1-1 timeout; kill it [ 330.311884][ T2545] udevd[2545]: seq 4424 '/devices/platform/dummy_hcd.0/usb1/1-1' killed executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 430.161999][ T30] INFO: task udevd:2648 blocked for more than 143 seconds. [ 430.169398][ T30] Not tainted 6.11.0-rc1-syzkaller-00033-g25f51b76f90f #0 [ 430.177121][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.185844][ T30] task:udevd state:D stack:28128 pid:2648 tgid:2648 ppid:2545 flags:0x00000006 [ 430.196096][ T30] Call Trace: [ 430.199401][ T30] [ 430.202410][ T30] __schedule+0xcda/0x2f80 [ 430.206893][ T30] ? __pfx___schedule+0x10/0x10 [ 430.211774][ T30] ? schedule+0x298/0x350 [ 430.216155][ T30] ? __pfx_lock_release+0x10/0x10 [ 430.221210][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 430.225984][ T30] ? __mutex_trylock_common+0x78/0x250 [ 430.231479][ T30] schedule+0xe7/0x350 [ 430.235639][ T30] schedule_preempt_disabled+0x13/0x30 [ 430.241128][ T30] __mutex_lock+0x5b8/0x9c0 [ 430.245702][ T30] ? uevent_show+0x188/0x3b0 [ 430.250336][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 430.255450][ T30] ? uevent_show+0x188/0x3b0 [ 430.260072][ T30] uevent_show+0x188/0x3b0 [ 430.264562][ T30] ? __pfx_uevent_show+0x10/0x10 [ 430.269532][ T30] dev_attr_show+0x53/0xe0 [ 430.274026][ T30] ? __pfx_dev_attr_show+0x10/0x10 [ 430.279169][ T30] sysfs_kf_seq_show+0x23e/0x410 [ 430.284168][ T30] seq_read_iter+0x4fa/0x12c0 [ 430.288889][ T30] kernfs_fop_read_iter+0x41a/0x590 [ 430.294184][ T30] vfs_read+0x869/0xbd0 [ 430.298374][ T30] ? __pfx_vfs_read+0x10/0x10 [ 430.303131][ T30] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 430.308792][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.314067][ T30] ? __fget_light+0x173/0x210 [ 430.318776][ T30] ksys_read+0x12f/0x260 [ 430.323109][ T30] ? __pfx_ksys_read+0x10/0x10 [ 430.327908][ T30] do_syscall_64+0xcd/0x250 [ 430.332513][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.338447][ T30] RIP: 0033:0x7f9e6cf37b6a [ 430.342939][ T30] RSP: 002b:00007ffeb20b7ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.351470][ T30] RAX: ffffffffffffffda RBX: 000055cc28f0a300 RCX: 00007f9e6cf37b6a [ 430.359524][ T30] RDX: 0000000000001000 RSI: 000055cc28f7d910 RDI: 0000000000000008 [ 430.367553][ T30] RBP: 000055cc28f0a300 R08: 0000000000000008 R09: 0000000000000000 [ 430.375609][ T30] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 430.383630][ T30] R13: 0000000000003fff R14: 00007ffeb20b7fb8 R15: 000000000000000a [ 430.391723][ T30] [ 430.394793][ T30] [ 430.394793][ T30] Showing all locks held in the system: [ 430.402646][ T30] 1 lock held by khungtaskd/30: [ 430.407516][ T30] #0: ffffffff88cb68a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 430.417443][ T30] 5 locks held by kworker/1:1/41: [ 430.422515][ T30] #0: ffff888104ac2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 430.433394][ T30] #1: ffffc900002b7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 430.444706][ T30] #2: ffff888108b8f190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f50 [ 430.453694][ T30] #3: ffff88810fadc190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 430.463014][ T30] #4: ffff88810fada160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 430.472441][ T30] 2 locks held by getty/2605: [ 430.477149][ T30] #0: ffff88810ebb50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 430.486994][ T30] #1: ffffc900000432f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 430.497184][ T30] 4 locks held by udevd/2648: [ 430.501925][ T30] #0: ffff8881136e7418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xde/0x12c0 [ 430.510859][ T30] #1: ffff888122464088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 [ 430.520396][ T30] #2: ffff88811421b878 (kn->active#3){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 430.530347][ T30] #3: ffff88810fadc190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x188/0x3b0 [ 430.539486][ T30] [ 430.541839][ T30] ============================================= [ 430.541839][ T30] [ 430.550323][ T30] NMI backtrace for cpu 0 [ 430.554670][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00033-g25f51b76f90f #0 [ 430.565196][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 430.575270][ T30] Call Trace: [ 430.578562][ T30] [ 430.581505][ T30] dump_stack_lvl+0x116/0x1f0 [ 430.586213][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 430.591179][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.597193][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 430.603211][ T30] watchdog+0xf4e/0x1280 [ 430.607486][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.612187][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.617423][ T30] ? __kthread_parkme+0x148/0x220 [ 430.622480][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.627164][ T30] kthread+0x2c1/0x3a0 [ 430.631263][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.636470][ T30] ? __pfx_kthread+0x10/0x10 [ 430.641092][ T30] ret_from_fork+0x45/0x80 [ 430.645530][ T30] ? __pfx_kthread+0x10/0x10 [ 430.650133][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.655097][ T30] [ 430.658215][ T30] Sending NMI from CPU 0 to CPUs 1: [ 430.663494][ C1] NMI backtrace for cpu 1 [ 430.663506][ C1] CPU: 1 UID: 0 PID: 41 Comm: kworker/1:1 Not tainted 6.11.0-rc1-syzkaller-00033-g25f51b76f90f #0 [ 430.663530][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 430.663542][ C1] Workqueue: usb_hub_wq hub_event [ 430.663573][ C1] RIP: 0010:unwind_next_frame+0xd82/0x23a0 [ 430.663596][ C1] Code: 89 ff e8 01 ea 92 00 e9 16 f4 ff ff e8 27 ea 92 00 e9 bb f3 ff ff e8 fd f8 3d 00 0f 1f 44 00 00 e9 cd f6 ff ff e8 ee f8 3d 00 <49> 8d 45 f8 ba 08 00 00 00 48 89 df 48 89 c6 48 89 44 24 28 e8 e5 [ 430.663615][ C1] RSP: 0018:ffffc900002b66f8 EFLAGS: 00000293 [ 430.663635][ C1] RAX: 0000000000000000 RBX: ffffc900002b67d0 RCX: ffffffff811565a9 [ 430.663649][ C1] RDX: ffff8881026b5700 RSI: ffffffff81156ba2 RDI: 0000000000000001 [ 430.663662][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000004 [ 430.663674][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff8a88a4ba [ 430.663687][ C1] R13: ffffc900002b6870 R14: ffffffff8a88a4be R15: 0000000000000002 [ 430.663701][ C1] FS: 0000000000000000(0000) GS:ffff8881f6300000(0000) knlGS:0000000000000000 [ 430.663721][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.663735][ C1] CR2: 00007f2582383780 CR3: 0000000115898000 CR4: 00000000003506f0 [ 430.663748][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.663761][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.663773][ C1] Call Trace: [ 430.663780][ C1] [ 430.663787][ C1] ? show_regs+0x8c/0xa0 [ 430.663813][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 430.663835][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 430.663863][ C1] ? nmi_handle+0x1a9/0x5c0 [ 430.663881][ C1] ? unwind_next_frame+0xd82/0x23a0 [ 430.663900][ C1] ? default_do_nmi+0x6a/0x160 [ 430.663922][ C1] ? exc_nmi+0x170/0x1e0 [ 430.663941][ C1] ? end_repeat_nmi+0xf/0x53 [ 430.663961][ C1] ? unwind_next_frame+0x789/0x23a0 [ 430.663980][ C1] ? unwind_next_frame+0xd82/0x23a0 [ 430.663998][ C1] ? unwind_next_frame+0xd82/0x23a0 [ 430.664017][ C1] ? unwind_next_frame+0xd82/0x23a0 [ 430.664036][ C1] ? unwind_next_frame+0xd82/0x23a0 [ 430.664055][ C1] [ 430.664061][ C1] [ 430.664068][ C1] ? arch_stack_walk+0xb2/0x170 [ 430.664088][ C1] __unwind_start+0x5aa/0x880 [ 430.664107][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 430.664134][ C1] arch_stack_walk+0xb2/0x170 [ 430.664154][ C1] ? arch_stack_walk+0xb2/0x170 [ 430.664173][ C1] ? usb_control_msg+0x39e/0x4b0 [ 430.664198][ C1] stack_trace_save+0x95/0xd0 [ 430.664223][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 430.664247][ C1] ? bus_for_each_drv+0x157/0x1e0 [ 430.664270][ C1] ? __pfx_mark_lock+0x10/0x10 [ 430.664290][ C1] kasan_save_stack+0x33/0x60 [ 430.664320][ C1] kasan_save_track+0x14/0x30 [ 430.664339][ C1] kasan_save_free_info+0x3b/0x60 [ 430.664364][ C1] poison_slab_object+0xf7/0x160 [ 430.664383][ C1] __kasan_slab_free+0x14/0x30 [ 430.664403][ C1] kfree+0x10b/0x380 [ 430.664425][ C1] ? __asan_memset+0x23/0x50 [ 430.664449][ C1] ? usb_control_msg+0x39e/0x4b0 [ 430.664474][ C1] usb_control_msg+0x39e/0x4b0 [ 430.664499][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 430.664524][ C1] ? __pfx_lock_release+0x10/0x10 [ 430.664544][ C1] _usbctrl_vendorreq_sync+0xc6/0x1f0 [ 430.664568][ C1] _usb_read_sync+0x11d/0x190 [ 430.664590][ C1] read_efuse_byte+0x612/0x910 [ 430.664614][ C1] ? kasan_save_track+0x14/0x30 [ 430.664638][ C1] read_efuse+0x9a7/0xd60 [ 430.664664][ C1] ? __pfx_read_efuse+0x10/0x10 [ 430.664687][ C1] ? _usbctrl_vendorreq_sync+0x13e/0x1f0 [ 430.664709][ C1] ? efuse_power_switch+0x925/0x15d0 [ 430.664734][ C1] rtl_efuse_shadow_map_update+0x1f8/0x2c0 [ 430.664761][ C1] rtl_get_hwinfo+0xdb/0x880 [ 430.664785][ C1] ? kasan_save_track+0x14/0x30 [ 430.664804][ C1] rtl92cu_read_eeprom_info+0x2bc/0x2730 [ 430.664828][ C1] ? vprintk_emit+0x1ca/0x5a0 [ 430.664852][ C1] ? vprintk+0x86/0xa0 [ 430.664876][ C1] ? __pfx_rtl92cu_read_eeprom_info+0x10/0x10 [ 430.664901][ C1] ? _usb_read_sync+0x11d/0x190 [ 430.664927][ C1] ? rtl92c_read_chip_version+0x250/0x320 [ 430.664953][ C1] rtl_usb_probe+0x915/0x24d0 [ 430.664975][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 430.665001][ C1] usb_probe_interface+0x309/0x9d0 [ 430.665024][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 430.665045][ C1] really_probe+0x23e/0xa90 [ 430.665068][ C1] __driver_probe_device+0x1de/0x440 [ 430.665092][ C1] driver_probe_device+0x4c/0x1b0 [ 430.665116][ C1] __device_attach_driver+0x1df/0x310 [ 430.665140][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 430.665163][ C1] bus_for_each_drv+0x157/0x1e0 [ 430.665183][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 430.665202][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.665227][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 430.665250][ C1] __device_attach+0x1e8/0x4b0 [ 430.665273][ C1] ? __pfx___device_attach+0x10/0x10 [ 430.665297][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 430.665321][ C1] bus_probe_device+0x17f/0x1c0 [ 430.665342][ C1] device_add+0x114b/0x1a70 [ 430.665369][ C1] ? __pfx_device_add+0x10/0x10 [ 430.665394][ C1] ? mark_held_locks+0x9f/0xe0 [ 430.665415][ C1] usb_set_configuration+0x10cb/0x1c50 [ 430.665447][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 430.665472][ C1] usb_generic_driver_probe+0xb1/0x110 [ 430.665498][ C1] usb_probe_device+0xec/0x3e0 [ 430.665517][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 430.665536][ C1] really_probe+0x23e/0xa90 [ 430.665559][ C1] __driver_probe_device+0x1de/0x440 [ 430.665582][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 430.665603][ C1] driver_probe_device+0x4c/0x1b0 [ 430.665631][ C1] __device_attach_driver+0x1df/0x310 [ 430.665655][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 430.665679][ C1] bus_for_each_drv+0x157/0x1e0 [ 430.665698][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 430.665717][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.665742][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 430.665765][ C1] __device_attach+0x1e8/0x4b0 [ 430.665789][ C1] ? __pfx___device_attach+0x10/0x10 [ 430.665812][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 430.665836][ C1] bus_probe_device+0x17f/0x1c0 [ 430.665857][ C1] device_add+0x114b/0x1a70 [ 430.665883][ C1] ? __pfx_device_add+0x10/0x10 [ 430.665908][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 430.665936][ C1] usb_new_device+0xd90/0x1a10 [ 430.665965][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 430.665993][ C1] hub_event+0x2e66/0x4f50 [ 430.666026][ C1] ? __pfx_hub_event+0x10/0x10 [ 430.666053][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 430.666073][ C1] ? __pfx_lock_release+0x10/0x10 [ 430.666095][ C1] process_one_work+0x9c5/0x1b40 [ 430.666119][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 430.666138][ C1] ? __pfx_process_one_work+0x10/0x10 [ 430.666162][ C1] ? assign_work+0x1a0/0x250 [ 430.666182][ C1] worker_thread+0x6c8/0xf20 [ 430.666205][ C1] ? __kthread_parkme+0x148/0x220 [ 430.666230][ C1] ? __pfx_worker_thread+0x10/0x10 [ 430.666252][ C1] kthread+0x2c1/0x3a0 [ 430.666275][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.666297][ C1] ? __pfx_kthread+0x10/0x10 [ 430.666322][ C1] ret_from_fork+0x45/0x80 [ 430.666348][ C1] ? __pfx_kthread+0x10/0x10 [ 430.666372][ C1] ret_from_fork_asm+0x1a/0x30 [ 430.666399][ C1] [ 430.666406][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.913 msecs [ 430.666491][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 431.399720][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00033-g25f51b76f90f #0 [ 431.410241][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 431.420321][ T30] Call Trace: [ 431.423624][ T30] [ 431.426561][ T30] dump_stack_lvl+0x3d/0x1f0 [ 431.431178][ T30] panic+0x6f5/0x7a0 [ 431.435101][ T30] ? __pfx_panic+0x10/0x10 [ 431.439541][ T30] ? __pfx__printk+0x10/0x10 [ 431.444160][ T30] ? irq_work_claim+0x76/0xa0 [ 431.448866][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.454880][ T30] ? irq_work_queue+0x2a/0x80 [ 431.459586][ T30] ? watchdog+0xd8a/0x1280 [ 431.464019][ T30] ? watchdog+0xd7d/0x1280 [ 431.468456][ T30] watchdog+0xd9b/0x1280 [ 431.472719][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.477413][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 431.482639][ T30] ? __kthread_parkme+0x148/0x220 [ 431.487681][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.492368][ T30] kthread+0x2c1/0x3a0 [ 431.496459][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.501680][ T30] ? __pfx_kthread+0x10/0x10 [ 431.506301][ T30] ret_from_fork+0x45/0x80 [ 431.510745][ T30] ? __pfx_kthread+0x10/0x10 [ 431.515354][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.520139][ T30] [ 431.523411][ T30] Kernel Offset: disabled [ 431.527739][ T30] Rebooting in 86400 seconds..