Warning: Permanently added '10.128.0.198' (ECDSA) to the list of known hosts.
executing program
[ 488.645858][ T1122] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 488.885828][ T1122] usb 1-1: Using ep0 maxpacket: 8
[ 489.006186][ T1122] usb 1-1: config 3 has an invalid interface number: 239 but max is 1
[ 489.014698][ T1122] usb 1-1: config 3 has no interface number 1
[ 489.020923][ T1122] usb 1-1: config 3 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 489.030737][ T1122] usb 1-1: config 3 interface 239 altsetting 9 has an invalid endpoint with address 0x0, skipping
[ 489.041533][ T1122] usb 1-1: config 3 interface 239 has no altsetting 0
[ 489.205954][ T1122] usb 1-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=eb.31
[ 489.215213][ T1122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 489.223321][ T1122] usb 1-1: Product: syz
[ 489.227541][ T1122] usb 1-1: Manufacturer: syz
[ 489.232159][ T1122] usb 1-1: SerialNumber: syz
[ 494.449636][ T1122] usb 1-1: USB2VGA dongle found at address 2
[ 494.461043][ T1122] usb 1-1: Allocated 8 output buffers
[ 551.535654][ T4444] udevd[4444]: worker [5108] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time
[ 590.205828][ T1122] usb 1-1: Failed to early initialize device
[ 590.327659][ T1122] usb 1-1: USB2VGA dongle found at address 2
[ 590.335111][ T1122] usb 1-1: Allocated 8 output buffers
[ 671.441664][ T4444] udevd[4444]: worker [5108] /devices/platform/dummy_hcd.0/usb1/1-1 timeout; kill it
[ 671.456207][ T4444] udevd[4444]: seq 7512 '/devices/platform/dummy_hcd.0/usb1/1-1' killed
[ 671.465382][ T4444] udevd[4444]: worker [5108] terminated by signal 9 (Killed)
[ 671.472892][ T4444] udevd[4444]: worker [5108] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1'
executing program
[ 686.125804][ T1122] usb 1-1: Failed to early initialize device
[ 686.143349][ T1122] usb 1-1: USB disconnect, device number 2
executing program
executing program
[ 696.555732][ T1122] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 696.795724][ T1122] usb 1-1: Using ep0 maxpacket: 8
[ 696.916032][ T1122] usb 1-1: config 3 has an invalid interface number: 239 but max is 1
[ 696.924649][ T1122] usb 1-1: config 3 has no interface number 1
[ 696.930917][ T1122] usb 1-1: config 3 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 696.940702][ T1122] usb 1-1: config 3 interface 239 altsetting 9 has an invalid endpoint with address 0x0, skipping
[ 696.951461][ T1122] usb 1-1: config 3 interface 239 has no altsetting 0
[ 697.115921][ T1122] usb 1-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=eb.31
[ 697.125008][ T1122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 697.133085][ T1122] usb 1-1: Product: syz
[ 697.137358][ T1122] usb 1-1: Manufacturer: syz
[ 697.141958][ T1122] usb 1-1: SerialNumber: syz
[ 702.287543][ T1122] usb 1-1: USB2VGA dongle found at address 3
[ 702.295890][ T1122] usb 1-1: Allocated 8 output buffers
[ 759.371838][ T4444] udevd[4444]: worker [5123] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time
[ 798.045829][ T1122] usb 1-1: Failed to early initialize device
[ 798.167449][ T1122] usb 1-1: USB2VGA dongle found at address 3
[ 798.174737][ T1122] usb 1-1: Allocated 8 output buffers
[ 859.645852][ T28] INFO: task syz-executor103:5127 blocked for more than 143 seconds.
[ 859.654072][ T28] Not tainted 6.3.0-rc4-syzkaller-00199-g7b50567bdcad #0
[ 859.661713][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 859.670481][ T28] task:syz-executor103 state:D stack:28248 pid:5127 ppid:5105 flags:0x00000004
[ 859.679800][ T28] Call Trace:
[ 859.683123][ T28]
[ 859.686146][ T28] __schedule+0xc91/0x5770
[ 859.690702][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 859.696806][ T28] ? io_schedule_timeout+0x150/0x150
[ 859.702137][ T28] ? __mutex_lock+0xa36/0x1350
[ 859.707043][ T28] schedule+0xde/0x1a0
[ 859.711166][ T28] schedule_preempt_disabled+0x13/0x20
[ 859.716699][ T28] __mutex_lock+0xa3b/0x1350
[ 859.721336][ T28] ? do_raw_spin_unlock+0x175/0x230
[ 859.726629][ T28] ? usbdev_open+0x1a1/0x990
[ 859.731349][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0
[ 859.736995][ T28] ? device_match_of_node+0x50/0x50
[ 859.742323][ T28] ? bus_find_device+0x174/0x1d0
[ 859.747365][ T28] ? usbdev_open+0x97/0x990
[ 859.751957][ T28] usbdev_open+0x1a1/0x990
[ 859.756458][ T28] ? kobject_get_unless_zero+0x15e/0x1e0
[ 859.762221][ T28] ? reap_as+0x3e0/0x3e0
[ 859.766574][ T28] ? spin_bug+0x1c0/0x1c0
[ 859.770980][ T28] ? reap_as+0x3e0/0x3e0
[ 859.775254][ T28] chrdev_open+0x26a/0x770
[ 859.779816][ T28] ? __unregister_chrdev+0x110/0x110
[ 859.785159][ T28] ? fsnotify_perm.part.0+0x221/0x610
[ 859.790708][ T28] do_dentry_open+0x6cc/0x13f0
[ 859.795620][ T28] ? __unregister_chrdev+0x110/0x110
[ 859.800990][ T28] ? may_open+0x1f6/0x420
[ 859.805425][ T28] path_openat+0x1baa/0x2750
[ 859.810128][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 859.816182][ T28] ? path_lookupat+0x840/0x840
[ 859.820976][ T28] do_filp_open+0x1ba/0x410
[ 859.825500][ T28] ? may_open_dev+0xf0/0xf0
[ 859.830097][ T28] ? find_held_lock+0x2d/0x110
[ 859.834959][ T28] ? do_raw_spin_lock+0x124/0x2b0
[ 859.840081][ T28] ? spin_bug+0x1c0/0x1c0
[ 859.844494][ T28] ? _raw_spin_unlock+0x28/0x40
[ 859.849464][ T28] ? alloc_fd+0x2e4/0x750
[ 859.853923][ T28] do_sys_openat2+0x16d/0x4c0
[ 859.858694][ T28] ? hrtimer_init_sleeper_on_stack+0x90/0x90
[ 859.864900][ T28] ? build_open_flags+0x6f0/0x6f0
[ 859.870034][ T28] ? put_timespec64+0x120/0x120
[ 859.874937][ T28] __x64_sys_openat+0x143/0x1f0
[ 859.879869][ T28] ? __ia32_sys_open+0x1c0/0x1c0
[ 859.884869][ T28] ? syscall_enter_from_user_mode+0x26/0x80
[ 859.890965][ T28] do_syscall_64+0x39/0xb0
[ 859.895425][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 859.901453][ T28] RIP: 0033:0x7fb492d72f47
[ 859.905968][ T28] RSP: 002b:00007ffcd22a6be0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 859.914398][ T28] RAX: ffffffffffffffda RBX: 0000000000000286 RCX: 00007fb492d72f47
[ 859.922468][ T28] RDX: 0000000000000000 RSI: 00007ffcd22a6c60 RDI: 00000000ffffff9c
[ 859.930541][ T28] RBP: 00007ffcd22a6c60 R08: 000000000000fff3 R09: 0000000000000000
[ 859.938601][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 859.946650][ T28] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 859.954650][ T28]
[ 859.957888][ T28]
[ 859.957888][ T28] Showing all locks held in the system:
[ 859.965708][ T28] 1 lock held by rcu_tasks_kthre/12:
[ 859.971086][ T28] #0: ffffffff8c794a70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80
[ 859.981684][ T28] 1 lock held by rcu_tasks_trace/13:
[ 859.987032][ T28] #0: ffffffff8c794770 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80
[ 859.998088][ T28] 1 lock held by khungtaskd/28:
[ 860.002965][ T28] #0: ffffffff8c7955c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340
[ 860.012935][ T28] 5 locks held by kworker/0:2/1122:
[ 860.018247][ T28] #0: ffff888017c43938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0
[ 860.029123][ T28] #1: ffffc9000583fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0
[ 860.040478][ T28] #2: ffff888021783190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4e40
[ 860.049499][ T28] #3: ffff888017cee190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x76/0x4b0
[ 860.059062][ T28] #4: ffff888023a23118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x76/0x4b0
[ 860.068440][ T28] 2 locks held by getty/4761:
[ 860.073152][ T28] #0: ffff88802bbec098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80
[ 860.083101][ T28] #1: ffffc900015a02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0
[ 860.093341][ T28] 4 locks held by udevd/5123:
[ 860.098080][ T28] #0: ffff88801d6921c8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xe3/0x12d0
[ 860.107109][ T28] #1: ffff88801d75e888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x4b/0x450
[ 860.116505][ T28] #2: ffff888146ac8cb8 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0x75/0x450
[ 860.126145][ T28] #3: ffff888017cee190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0
[ 860.135512][ T28] 1 lock held by syz-executor103/5127:
[ 860.141028][ T28] #0: ffff888021783190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x1a1/0x990
[ 860.150180][ T28]
[ 860.152526][ T28] =============================================
[ 860.152526][ T28]
[ 860.161020][ T28] NMI backtrace for cpu 0
[ 860.165377][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.3.0-rc4-syzkaller-00199-g7b50567bdcad #0
[ 860.175206][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 860.185272][ T28] Call Trace:
[ 860.188557][ T28]
[ 860.191495][ T28] dump_stack_lvl+0xd9/0x150
[ 860.196121][ T28] nmi_cpu_backtrace+0x29c/0x350
[ 860.201077][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0
[ 860.206290][ T28] nmi_trigger_cpumask_backtrace+0x2a4/0x300
[ 860.212322][ T28] watchdog+0xe16/0x1090
[ 860.216641][ T28] ? __kthread_parkme+0x163/0x220
[ 860.221806][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80
[ 860.227828][ T28] kthread+0x2e8/0x3a0
[ 860.231942][ T28] ? kthread_complete_and_exit+0x40/0x40
[ 860.237619][ T28] ret_from_fork+0x1f/0x30
[ 860.242093][ T28]
[ 860.245245][ T28] Sending NMI from CPU 0 to CPUs 1:
[ 860.250549][ C1] NMI backtrace for cpu 1
[ 860.250561][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 6.3.0-rc4-syzkaller-00199-g7b50567bdcad #0
[ 860.250588][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 860.250603][ C1] Workqueue: events_unbound toggle_allocation_gate
[ 860.250710][ C1] RIP: 0010:match_held_lock+0x77/0xc0
[ 860.250746][ C1] Code: 53 20 81 e2 ff 1f 00 00 48 39 d0 0f 94 c0 48 83 c4 08 0f b6 c0 5b c3 31 f6 e8 65 fe ff ff 48 85 c0 75 b2 31 c0 48 83 c4 08 5b 48 83 c4 08 b8 01 00 00 00 5b c3 e8 28 9b 0a fa 85 c0 74 e4 8b
[ 860.250769][ C1] RSP: 0018:ffffc90000107a70 EFLAGS: 00000082
[ 860.250787][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001
[ 860.250802][ C1] RDX: 0000000000000000 RSI: ffffffff8c65b9c8 RDI: ffff88801678c4b8
[ 860.250818][ C1] RBP: ffffffff8c65b9c8 R08: ffffffff81d37d71 R09: ffff888012466063
[ 860.250843][ C1] R10: ffffed100248cc0c R11: 0000000000000000 R12: ffff88801678ba80
[ 860.250859][ C1] R13: ffff88801678c4b8 R14: 00000000ffffffff R15: ffff88801678c4b8
[ 860.250876][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 860.250900][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 860.250916][ C1] CR2: 00005630562659b0 CR3: 000000000c571000 CR4: 00000000003506e0
[ 860.250932][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 860.250946][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 860.250961][ C1] Call Trace:
[ 860.250967][ C1]
[ 860.250974][ C1] lock_is_held_type+0xab/0x140
[ 860.251009][ C1] text_poke_bp_batch+0x550/0x770
[ 860.251047][ C1] ? kmem_cache_alloc+0xd1/0x3b0
[ 860.251103][ C1] ? do_sync_core+0x30/0x30
[ 860.251136][ C1] ? arch_jump_label_transform_queue+0xa4/0x100
[ 860.251164][ C1] ? __jump_label_update+0x296/0x410
[ 860.251219][ C1] text_poke_finish+0x1a/0x30
[ 860.251250][ C1] arch_jump_label_transform_apply+0x17/0x30
[ 860.251277][ C1] jump_label_update+0x32f/0x410
[ 860.251307][ C1] static_key_disable_cpuslocked+0x156/0x1b0
[ 860.251338][ C1] static_key_disable+0x1a/0x20
[ 860.251366][ C1] toggle_allocation_gate+0x143/0x230
[ 860.251397][ C1] ? wake_up_kfence_timer+0x30/0x30
[ 860.251427][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 860.251457][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 860.251510][ C1] process_one_work+0x991/0x15c0
[ 860.251544][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 860.251576][ C1] ? spin_bug+0x1c0/0x1c0
[ 860.251601][ C1] ? _raw_spin_lock_irq+0x45/0x50
[ 860.251640][ C1] worker_thread+0x669/0x1090
[ 860.251675][ C1] ? process_one_work+0x15c0/0x15c0
[ 860.251711][ C1] kthread+0x2e8/0x3a0
[ 860.251734][ C1] ? kthread_complete_and_exit+0x40/0x40
[ 860.251761][ C1] ret_from_fork+0x1f/0x30
[ 860.251802][ C1]
[ 860.251809][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.261 msecs
[ 860.252546][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 860.542153][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.3.0-rc4-syzkaller-00199-g7b50567bdcad #0
[ 860.551981][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 860.562065][ T28] Call Trace:
[ 860.565454][ T28]
[ 860.568406][ T28] dump_stack_lvl+0xd9/0x150
[ 860.573034][ T28] panic+0x688/0x730
[ 860.576958][ T28] ? panic_smp_self_stop+0x90/0x90
[ 860.582103][ T28] ? irq_work_claim+0x76/0x90
[ 860.586896][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0
[ 860.592118][ T28] ? irq_work_queue+0x2d/0x80
[ 860.596826][ T28] ? watchdog+0xbe8/0x1090
[ 860.601279][ T28] watchdog+0xbf9/0x1090
[ 860.605555][ T28] ? __kthread_parkme+0x163/0x220
[ 860.610615][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80
[ 860.616626][ T28] kthread+0x2e8/0x3a0
[ 860.620731][ T28] ? kthread_complete_and_exit+0x40/0x40
[ 860.626394][ T28] ret_from_fork+0x1f/0x30
[ 860.630870][ T28]
[ 860.634183][ T28] Kernel Offset: disabled
[ 860.638522][ T28] Rebooting in 86400 seconds..