Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. executing program [ 424.954577][ T5058] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 424.961278][ T5058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.971651][ T5058] vhci_hcd vhci_hcd.0: Device attached [ 425.328703][ T26] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 573.258589][ T28] INFO: task syz-executor223:5058 blocked for more than 143 seconds. [ 573.266864][ T28] Not tainted 6.5.0-rc4-syzkaller-00227-g024ff300db33 #0 [ 573.274587][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.283386][ T28] task:syz-executor223 state:D stack:26464 pid:5058 ppid:5055 flags:0x00000006 [ 573.292689][ T28] Call Trace: [ 573.295997][ T28] [ 573.299020][ T28] __schedule+0xee1/0x59f0 [ 573.303586][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 573.309726][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 573.315773][ T28] ? print_usage_bug.part.0+0x670/0x670 [ 573.321429][ T28] ? io_schedule_timeout+0x150/0x150 [ 573.326769][ T28] ? __mutex_lock+0x962/0x1340 [ 573.331676][ T28] schedule+0xe7/0x1b0 [ 573.335791][ T28] schedule_preempt_disabled+0x13/0x20 [ 573.341343][ T28] __mutex_lock+0x967/0x1340 [ 573.345984][ T28] ? usbdev_release+0x87/0x4b0 [ 573.350903][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 573.356495][ T28] ? __fsnotify_parent+0x4fc/0xa10 [ 573.361737][ T28] ? locks_remove_file+0x399/0x5a0 [ 573.367004][ T28] ? free_async+0x520/0x520 [ 573.371685][ T28] ? usbdev_release+0x87/0x4b0 [ 573.376600][ T28] usbdev_release+0x87/0x4b0 [ 573.381322][ T28] ? free_async+0x520/0x520 [ 573.385888][ T28] __fput+0x3fd/0xac0 [ 573.389984][ T28] task_work_run+0x14d/0x240 [ 573.394671][ T28] ? task_work_cancel+0x30/0x30 [ 573.399658][ T28] exit_to_user_mode_prepare+0x210/0x240 [ 573.405401][ T28] syscall_exit_to_user_mode+0x1d/0x50 [ 573.411010][ T28] do_syscall_64+0x44/0xb0 [ 573.415476][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 573.421539][ T28] RIP: 0033:0x7f3b1b87e0e0 [ 573.425990][ T28] RSP: 002b:00007fffd979ace8 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 573.434474][ T28] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f3b1b87e0e0 [ 573.442550][ T28] RDX: 0000000000000007 RSI: 00007fffd979a820 RDI: 0000000000000003 [ 573.450591][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.458691][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000f4240 [ 573.466688][ T28] R13: 00007fffd979af98 R14: 0000000000000001 R15: 00007fffd979ad30 [ 573.474745][ T28] [ 573.477807][ T28] [ 573.477807][ T28] Showing all locks held in the system: [ 573.485646][ T28] 1 lock held by rcu_tasks_kthre/13: [ 573.491035][ T28] #0: ffffffff8c9a5970 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 [ 573.501636][ T28] 1 lock held by rcu_tasks_trace/14: [ 573.506947][ T28] #0: ffffffff8c9a5670 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 [ 573.518021][ T28] 5 locks held by kworker/1:1/26: [ 573.523150][ T28] #0: ffff888146644538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x96a/0x16f0 [ 573.534084][ T28] #1: ffffc90000a1fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x99e/0x16f0 [ 573.545480][ T28] #2: ffff888022b9c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c8/0x5230 [ 573.554513][ T28] #3: ffff888022bb0508 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2a54/0x5230 [ 573.564615][ T28] #4: ffff888022b5c168 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2a7d/0x5230 [ 573.574420][ T28] 1 lock held by khungtaskd/28: [ 573.579362][ T28] #0: ffffffff8c9a6580 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 573.589382][ T28] 1 lock held by klogd/4471: [ 573.594018][ T28] #0: ffff8880b993c3d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 573.604125][ T28] 2 locks held by getty/4782: [ 573.608888][ T28] #0: ffff88802cc8a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 573.618845][ T28] #1: ffffc900015902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfcb/0x1480 [ 573.629087][ T28] 1 lock held by syz-executor223/5058: [ 573.634557][ T28] #0: ffff888022b9c190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x87/0x4b0 [ 573.643839][ T28] [ 573.646309][ T28] ============================================= [ 573.646309][ T28] [ 573.654869][ T28] NMI backtrace for cpu 0 [ 573.659245][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc4-syzkaller-00227-g024ff300db33 #0 [ 573.669076][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 573.679152][ T28] Call Trace: [ 573.682536][ T28] [ 573.685488][ T28] dump_stack_lvl+0xd9/0x1b0 [ 573.690226][ T28] nmi_cpu_backtrace+0x277/0x380 [ 573.695223][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 573.700511][ T28] nmi_trigger_cpumask_backtrace+0x2ac/0x310 [ 573.706540][ T28] watchdog+0xf29/0x11b0 [ 573.710847][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 573.716877][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 573.723074][ T28] kthread+0x33a/0x430 [ 573.727172][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 573.732835][ T28] ret_from_fork+0x2c/0x70 [ 573.737297][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 573.742976][ T28] ret_from_fork_asm+0x11/0x20 [ 573.747807][ T28] [ 573.750999][ T28] Sending NMI from CPU 0 to CPUs 1: [ 573.756274][ C1] NMI backtrace for cpu 1 [ 573.756285][ C1] CPU: 1 PID: 76 Comm: kworker/u4:4 Not tainted 6.5.0-rc4-syzkaller-00227-g024ff300db33 #0 [ 573.756312][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 573.756327][ C1] Workqueue: events_unbound toggle_allocation_gate [ 573.756372][ C1] RIP: 0010:lock_is_held_type+0x55/0x140 [ 573.756407][ C1] Code: d0 75 85 c0 0f 85 cb 00 00 00 65 4c 8b 24 25 80 b9 03 00 41 8b 94 24 c4 0a 00 00 85 d2 0f 85 b2 00 00 00 48 89 fd 41 89 f6 9c <8f> 04 24 fa 48 c7 c7 40 77 6c 8a 45 31 ff e8 18 10 00 00 41 8b 84 [ 573.756430][ C1] RSP: 0018:ffffc900015d7920 EFLAGS: 00000246 [ 573.756447][ C1] RAX: 0000000000000000 RBX: 1ffff920002baf2f RCX: 0000000000000001 [ 573.756463][ C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8c9a64c0 [ 573.756478][ C1] RBP: ffffffff8c9a64c0 R08: ffffffff812ea95b R09: 0000000000000000 [ 573.756599][ C1] R10: ffffc900015d7b58 R11: 0000000000000000 R12: ffff888013758000 [ 573.756615][ C1] R13: 00000000ffffffff R14: 00000000ffffffff R15: ffffffff8c4149d0 [ 573.756630][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 573.756654][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.756670][ C1] CR2: 000055cc53cf2680 CR3: 000000000c776000 CR4: 00000000003506e0 [ 573.756686][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 573.756700][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 573.756714][ C1] Call Trace: [ 573.756720][ C1] [ 573.756728][ C1] ? nmi_cpu_backtrace+0x1d4/0x380 [ 573.756768][ C1] ? lock_is_held_type+0x55/0x140 [ 573.756800][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 573.756841][ C1] ? nmi_handle+0x145/0x400 [ 573.756872][ C1] ? irqentry_nmi_enter+0x7f/0x90 [ 573.756902][ C1] ? lock_is_held_type+0x55/0x140 [ 573.756933][ C1] ? default_do_nmi+0x69/0x160 [ 573.756960][ C1] ? exc_nmi+0x171/0x1e0 [ 573.756985][ C1] ? end_repeat_nmi+0x16/0x31 [ 573.757015][ C1] ? arch_jump_label_transform_queue+0x5b/0x100 [ 573.757054][ C1] ? lock_is_held_type+0x55/0x140 [ 573.757085][ C1] ? lock_is_held_type+0x55/0x140 [ 573.757117][ C1] ? lock_is_held_type+0x55/0x140 [ 573.757148][ C1] [ 573.757154][ C1] [ 573.757163][ C1] __might_resched+0x4cf/0x5e0 [ 573.757202][ C1] ? preempt_count_sub+0x150/0x150 [ 573.757244][ C1] ? arch_jump_label_transform_queue+0xa3/0x100 [ 573.757281][ C1] ? reacquire_held_locks+0x4b0/0x4b0 [ 573.757317][ C1] __mutex_lock+0xee/0x1340 [ 573.757348][ C1] ? arch_jump_label_transform_queue+0x5b/0x100 [ 573.757388][ C1] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 573.757421][ C1] ? bit_wait_timeout+0x160/0x160 [ 573.757455][ C1] ? kmem_cache_alloc+0xc5/0x3b0 [ 573.757487][ C1] ? arch_jump_label_transform_queue+0x5b/0x100 [ 573.757523][ C1] arch_jump_label_transform_queue+0x5b/0x100 [ 573.757562][ C1] __jump_label_update+0x125/0x420 [ 573.757602][ C1] jump_label_update+0x32e/0x410 [ 573.757635][ C1] static_key_disable_cpuslocked+0x154/0x1b0 [ 573.757668][ C1] static_key_disable+0x1a/0x20 [ 573.757698][ C1] toggle_allocation_gate+0x13f/0x250 [ 573.757722][ C1] ? wake_up_kfence_timer+0x30/0x30 [ 573.757746][ C1] ? spin_bug+0x1d0/0x1d0 [ 573.757784][ C1] process_one_work+0xaa2/0x16f0 [ 573.757824][ C1] ? lock_sync+0x190/0x190 [ 573.757854][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 573.757887][ C1] ? spin_bug+0x1d0/0x1d0 [ 573.757924][ C1] worker_thread+0x687/0x1110 [ 573.757959][ C1] ? __kthread_parkme+0x152/0x220 [ 573.757983][ C1] ? process_one_work+0x16f0/0x16f0 [ 573.758012][ C1] kthread+0x33a/0x430 [ 573.758035][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 573.758063][ C1] ret_from_fork+0x2c/0x70 [ 573.758090][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 573.758117][ C1] ret_from_fork_asm+0x11/0x20 [ 573.758178][ C1] [ 573.758185][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.912 msecs [ 573.758354][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 573.758367][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc4-syzkaller-00227-g024ff300db33 #0 [ 573.758402][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 573.758420][ T28] Call Trace: [ 573.758428][ T28] [ 573.758439][ T28] dump_stack_lvl+0xd9/0x1b0 [ 573.758476][ T28] panic+0x6a4/0x750 [ 573.758515][ T28] ? panic_smp_self_stop+0xa0/0xa0 [ 573.758559][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 573.758604][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 573.758659][ T28] ? watchdog+0xce1/0x11b0 [ 573.758714][ T28] watchdog+0xcf2/0x11b0 [ 573.758770][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 573.758831][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 573.758884][ T28] kthread+0x33a/0x430 [ 573.758915][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 573.758954][ T28] ret_from_fork+0x2c/0x70 [ 573.758991][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 573.759027][ T28] ret_from_fork_asm+0x11/0x20 [ 573.759090][ T28] [ 573.762982][ T28] Kernel Offset: disabled [ 574.258904][ T28] Rebooting in 86400 seconds..