Warning: Permanently added '10.128.0.209' (ECDSA) to the list of known hosts. executing program [ 477.880480][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 478.120489][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 478.240647][ T7] usb 1-1: config 3 has an invalid interface number: 239 but max is 1 [ 478.242813][ T7] usb 1-1: config 3 has no interface number 1 [ 478.244275][ T7] usb 1-1: config 3 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 478.246620][ T7] usb 1-1: config 3 interface 239 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 478.249211][ T7] usb 1-1: config 3 interface 239 has no altsetting 0 [ 478.410641][ T7] usb 1-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=eb.31 [ 478.412873][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.414768][ T7] usb 1-1: Product: syz [ 478.415776][ T7] usb 1-1: Manufacturer: syz [ 478.416893][ T7] usb 1-1: SerialNumber: syz [ 483.612369][ T7] usb 1-1: USB2VGA dongle found at address 2 [ 483.615962][ T7] usb 1-1: Allocated 8 output buffers [ 540.695911][ T3585] udevd[3585]: worker [4088] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 579.380509][ T7] usb 1-1: Failed to early initialize device [ 579.501881][ T7] usb 1-1: USB2VGA dongle found at address 2 [ 579.504163][ T7] usb 1-1: Allocated 8 output buffers [ 660.606963][ T3585] udevd[3585]: worker [4088] /devices/platform/dummy_hcd.0/usb1/1-1 timeout; kill it [ 660.609764][ T3585] udevd[3585]: seq 9311 '/devices/platform/dummy_hcd.0/usb1/1-1' killed [ 660.614436][ T3585] udevd[3585]: worker [4088] terminated by signal 9 (Killed) [ 660.616351][ T3585] udevd[3585]: worker [4088] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 675.300515][ T7] usb 1-1: Failed to early initialize device executing program [ 675.308509][ T7] usb 1-1: USB disconnect, device number 2 executing program executing program [ 685.740468][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 685.980454][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 686.100596][ T7] usb 1-1: config 3 has an invalid interface number: 239 but max is 1 [ 686.102725][ T7] usb 1-1: config 3 has no interface number 1 [ 686.104129][ T7] usb 1-1: config 3 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 686.106524][ T7] usb 1-1: config 3 interface 239 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 686.109080][ T7] usb 1-1: config 3 interface 239 has no altsetting 0 [ 686.270667][ T7] usb 1-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=eb.31 [ 686.272872][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.274845][ T7] usb 1-1: Product: syz [ 686.275868][ T7] usb 1-1: Manufacturer: syz [ 686.277042][ T7] usb 1-1: SerialNumber: syz [ 691.462167][ T7] usb 1-1: USB2VGA dongle found at address 3 [ 691.464708][ T7] usb 1-1: Allocated 8 output buffers [ 748.534502][ T3585] udevd[3585]: worker [4090] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 787.220507][ T7] usb 1-1: Failed to early initialize device [ 787.341783][ T7] usb 1-1: USB2VGA dongle found at address 3 [ 787.344113][ T7] usb 1-1: Allocated 8 output buffers [ 858.100618][ T27] INFO: task syz-executor100:4100 blocked for more than 143 seconds. [ 858.102670][ T27] Not tainted 5.15.105-syzkaller #0 [ 858.104104][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 858.106228][ T27] task:syz-executor100 state:D stack: 0 pid: 4100 ppid: 4086 flags:0x00000001 [ 858.108468][ T27] Call trace: [ 858.109291][ T27] __switch_to+0x308/0x5e8 [ 858.110558][ T27] __schedule+0xf10/0x1e38 [ 858.111627][ T27] schedule+0x11c/0x1c8 [ 858.112692][ T27] schedule_preempt_disabled+0x18/0x2c [ 858.114072][ T27] __mutex_lock_common+0xba0/0x2154 [ 858.115415][ T27] mutex_lock_nested+0xa4/0xf8 [ 858.116606][ T27] usbdev_open+0x13c/0x6ec [ 858.117728][ T27] chrdev_open+0x3e8/0x4fc [ 858.118867][ T27] do_dentry_open+0x780/0xed8 [ 858.120059][ T27] vfs_open+0x7c/0x90 [ 858.121168][ T27] path_openat+0x1f28/0x26f0 [ 858.122273][ T27] do_filp_open+0x1a8/0x3b4 [ 858.123477][ T27] do_sys_openat2+0x128/0x3d8 [ 858.124690][ T27] __arm64_sys_openat+0x1f0/0x240 [ 858.125940][ T27] invoke_syscall+0x98/0x2b8 [ 858.127172][ T27] el0_svc_common+0x138/0x258 [ 858.128295][ T27] do_el0_svc+0x58/0x14c [ 858.129419][ T27] el0_svc+0x7c/0x1f0 [ 858.130455][ T27] el0t_64_sync_handler+0x84/0xe4 [ 858.131678][ T27] el0t_64_sync+0x1a0/0x1a4 [ 858.132826][ T27] [ 858.132826][ T27] Showing all locks held in the system: [ 858.134714][ T27] 5 locks held by kworker/0:0/7: [ 858.135934][ T27] #0: ffff0000c27af538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 858.138633][ T27] #1: ffff8000188a7c00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 858.141624][ T27] #2: ffff0000ccaee220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c8/0x48c4 [ 858.143979][ T27] #3: ffff0000cfa6c220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x90/0x480 [ 858.146399][ T27] #4: ffff0000cfa6e1a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x90/0x480 [ 858.148763][ T27] 1 lock held by khungtaskd/27: [ 858.150003][ T27] #0: ffff800014a91660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 858.152509][ T27] 2 locks held by getty/3733: [ 858.153676][ T27] #0: ffff0000d3ab0098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 858.156168][ T27] #1: ffff80001a2ce2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1200 [ 858.158790][ T27] 4 locks held by udevd/4090: [ 858.159997][ T27] #0: ffff0000c8314418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xac/0xc44 [ 858.162350][ T27] #1: ffff0000d56e7c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x3a0 [ 858.164698][ T27] #2: ffff0000c170ebd0 (kn->active#65){++++}-{0:0}, at: kernfs_seq_start+0x74/0x3a0 [ 858.167126][ T27] #3: ffff0000cfa6c220 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x30/0xac [ 858.169520][ T27] 1 lock held by syz-executor100/4100: [ 858.170928][ T27] #0: ffff0000ccaee220 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x13c/0x6ec [ 858.173256][ T27] [ 858.173808][ T27] ============================================= [ 858.173808][ T27] [ 858.175897][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 858.177393][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.105-syzkaller #0 [ 858.179353][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 858.181933][ T27] Call trace: [ 858.182744][ T27] dump_backtrace+0x0/0x530 [ 858.183880][ T27] show_stack+0x2c/0x3c [ 858.184921][ T27] dump_stack_lvl+0x108/0x170 [ 858.186110][ T27] dump_stack+0x1c/0x58 [ 858.187156][ T27] panic+0x304/0x8b4 [ 858.188132][ T27] hung_task_panic+0x0/0x2c [ 858.189283][ T27] kthread+0x37c/0x45c [ 858.190332][ T27] ret_from_fork+0x10/0x20 [ 858.191532][ T27] SMP: stopping secondary CPUs [ 858.192799][ T27] Kernel Offset: disabled [ 858.193872][ T27] CPU features: 0x000081c1,21302e40 [ 858.195233][ T27] Memory Limit: none [ 858.527154][ T27] Rebooting in 86400 seconds..