syzbot


INFO: task hung in uevent_show

Status: upstream: reported C repro on 2024/07/26 06:22
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+dbbadbd69d16b5b8f605@syzkaller.appspotmail.com
First crash: 351d, last: 12d
Bug presence (2)
Date Name Commit Repro Result
2025/06/02 linux-6.1.y (ToT) da3c5173c55f C [report] INFO: task hung in synchronize_rcu
2025/06/02 upstream (ToT) cd2e103d57e5 C Didn't crash
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in uevent_show usb 1 C done 9704 334d 395d 28/29 fixed on 2024/10/22 11:56
android-6-12 INFO: task hung in uevent_show origin:upstream 1 syz 7 20d 23d 0/1 premoderation: reported syz repro on 2025/06/19 15:22
upstream INFO: task hung in uevent_show (2) kernel 1 C inconclusive 8325 7d00h 245d 23/29 upstream: reported C repro on 2024/11/09 14:37
linux-5.15 INFO: task hung in uevent_show 1 syz 32 5h25m 334d 0/3 upstream: reported syz repro on 2024/08/12 05:03

Sample crash report:
INFO: task udevd:4274 blocked for more than 143 seconds.
      Not tainted 6.1.140-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:26432 pid:4274  ppid:3623   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10e9/0x40d0 kernel/sched/core.c:6561
 schedule+0xb9/0x180 kernel/sched/core.c:6637
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6696
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x555/0xaf0 kernel/locking/mutex.c:747
 device_lock include/linux/device.h:837 [inline]
 uevent_show+0x16c/0x320 drivers/base/core.c:2669
 dev_attr_show+0x50/0xb0 drivers/base/core.c:2372
 sysfs_kf_seq_show+0x349/0x4b0 fs/sysfs/file.c:59
 seq_read_iter+0x49b/0xd50 fs/seq_file.c:230
 call_read_iter include/linux/fs.h:2259 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x434/0x920 fs/read_write.c:470
 ksys_read+0x143/0x240 fs/read_write.c:613
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f7edb4a7407
RSP: 002b:00007ffe073e7dc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007f7edbb8a880 RCX: 00007f7edb4a7407
RDX: 0000000000001000 RSI: 000055e31ea04540 RDI: 0000000000000008
RBP: 00007f7edb5efff0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
R13: 00007f7edb5efea0 R14: 0000000000000000 R15: 000055e31e9f3c40
 </TASK>
INFO: task udevd:4283 blocked for more than 144 seconds.
      Not tainted 6.1.140-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:27584 pid:4283  ppid:3623   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10e9/0x40d0 kernel/sched/core.c:6561
 schedule+0xb9/0x180 kernel/sched/core.c:6637
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6696
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x555/0xaf0 kernel/locking/mutex.c:747
 device_lock include/linux/device.h:837 [inline]
 uevent_show+0x16c/0x320 drivers/base/core.c:2669
 dev_attr_show+0x50/0xb0 drivers/base/core.c:2372
 sysfs_kf_seq_show+0x349/0x4b0 fs/sysfs/file.c:59
 seq_read_iter+0x49b/0xd50 fs/seq_file.c:230
 call_read_iter include/linux/fs.h:2259 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x434/0x920 fs/read_write.c:470
 ksys_read+0x143/0x240 fs/read_write.c:613
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f7edb4a7407
RSP: 002b:00007ffe073e7dc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007f7edbb8a880 RCX: 00007f7edb4a7407
RDX: 0000000000001000 RSI: 000055e31ea551e0 RDI: 0000000000000008
RBP: 00007f7edb5efff0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
R13: 00007f7edb5efea0 R14: 0000000000000000 R15: 000055e31e9f3c40
 </TASK>
INFO: task udevd:4286 blocked for more than 145 seconds.
      Not tainted 6.1.140-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:27584 pid:4286  ppid:3623   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10e9/0x40d0 kernel/sched/core.c:6561
 schedule+0xb9/0x180 kernel/sched/core.c:6637
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6696
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x555/0xaf0 kernel/locking/mutex.c:747
 device_lock include/linux/device.h:837 [inline]
 uevent_show+0x16c/0x320 drivers/base/core.c:2669
 dev_attr_show+0x50/0xb0 drivers/base/core.c:2372
 sysfs_kf_seq_show+0x349/0x4b0 fs/sysfs/file.c:59
 seq_read_iter+0x49b/0xd50 fs/seq_file.c:230
 call_read_iter include/linux/fs.h:2259 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x434/0x920 fs/read_write.c:470
 ksys_read+0x143/0x240 fs/read_write.c:613
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f7edb4a7407
RSP: 002b:00007ffe073e7dc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007f7edbb8a880 RCX: 00007f7edb4a7407
RDX: 0000000000001000 RSI: 000055e31ea04540 RDI: 0000000000000008
RBP: 00007f7edb5efff0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
R13: 00007f7edb5efea0 R14: 0000000000000000 R15: 000055e31e9f3c40
 </TASK>
INFO: task udevd:4292 blocked for more than 146 seconds.
      Not tainted 6.1.140-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:27584 pid:4292  ppid:3623   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10e9/0x40d0 kernel/sched/core.c:6561
 schedule+0xb9/0x180 kernel/sched/core.c:6637
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6696
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x555/0xaf0 kernel/locking/mutex.c:747
 device_lock include/linux/device.h:837 [inline]
 uevent_show+0x16c/0x320 drivers/base/core.c:2669
 dev_attr_show+0x50/0xb0 drivers/base/core.c:2372
 sysfs_kf_seq_show+0x349/0x4b0 fs/sysfs/file.c:59
 seq_read_iter+0x49b/0xd50 fs/seq_file.c:230
 call_read_iter include/linux/fs.h:2259 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x434/0x920 fs/read_write.c:470
 ksys_read+0x143/0x240 fs/read_write.c:613
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f7edb4a7407
RSP: 002b:00007ffe073e7dc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007f7edbb8a880 RCX: 00007f7edb4a7407
RDX: 0000000000001000 RSI: 000055e31ea04540 RDI: 0000000000000008
RBP: 00007f7edb5efff0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
R13: 00007f7edb5efea0 R14: 0000000000000000 R15: 000055e31e9f3c40
 </TASK>
INFO: task udevd:4293 blocked for more than 147 seconds.
      Not tainted 6.1.140-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:27584 pid:4293  ppid:3623   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10e9/0x40d0 kernel/sched/core.c:6561
 schedule+0xb9/0x180 kernel/sched/core.c:6637
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6696
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x555/0xaf0 kernel/locking/mutex.c:747
 device_lock include/linux/device.h:837 [inline]
 uevent_show+0x16c/0x320 drivers/base/core.c:2669
 dev_attr_show+0x50/0xb0 drivers/base/core.c:2372
 sysfs_kf_seq_show+0x349/0x4b0 fs/sysfs/file.c:59
 seq_read_iter+0x49b/0xd50 fs/seq_file.c:230
 call_read_iter include/linux/fs.h:2259 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x434/0x920 fs/read_write.c:470
 ksys_read+0x143/0x240 fs/read_write.c:613
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f7edb4a7407
RSP: 002b:00007ffe073e7dc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007f7edbb8a880 RCX: 00007f7edb4a7407
RDX: 0000000000001000 RSI: 000055e31ea04540 RDI: 0000000000000008
RBP: 00007f7edb5efff0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
R13: 00007f7edb5efea0 R14: 0000000000000000 R15: 000055e31e9f3c40
 </TASK>

Showing all locks held in the system:
5 locks held by kworker/0:0/7:
1 lock held by rcu_tasks_kthre/12:
 #0: ffffffff8c92b4b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 kernel/rcu/tasks.h:517
1 lock held by rcu_tasks_trace/13:
 #0: ffffffff8c92bcd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 kernel/rcu/tasks.h:517
5 locks held by kworker/0:1/14:
1 lock held by khungtaskd/28:
 #0: ffffffff8c92ab20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
 #0: ffffffff8c92ab20 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline]
 #0: ffffffff8c92ab20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 kernel/locking/lockdep.c:6513
5 locks held by kworker/0:2/126:
5 locks held by kworker/1:2/951:
5 locks held by kworker/0:3/3639:
2 locks held by getty/4013:
 #0: ffff88814d2a5098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244
 #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 drivers/tty/n_tty.c:2198
4 locks held by udevd/4274:
 #0: ffff88802523f8b8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 fs/seq_file.c:182
 #1: ffff88801cb26888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 fs/kernfs/file.c:154
 #2: ffff88814624fa00 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 fs/kernfs/file.c:155
 #3: ffff888141fc4190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline]
 #3: ffff888141fc4190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 drivers/base/core.c:2669
4 locks held by udevd/4283:
 #0: ffff88802f00fd58 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 fs/seq_file.c:182
 #1: ffff88807d517488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 fs/kernfs/file.c:154
 #2: ffff88801ee51008 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 fs/kernfs/file.c:155
 #3: ffff88814532b190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline]
 #3: ffff88814532b190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 drivers/base/core.c:2669
4 locks held by udevd/4286:
 #0: ffff88802f00fc30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 fs/seq_file.c:182
 #1: ffff888078365488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 fs/kernfs/file.c:154
 #2: ffff888145e79578 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 fs/kernfs/file.c:155
 #3: ffff888141fc1190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline]
 #3: ffff888141fc1190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 drivers/base/core.c:2669
4 locks held by udevd/4292:
 #0: ffff88802523f790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 fs/seq_file.c:182
 #1: ffff88801cb27088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 fs/kernfs/file.c:154
 #2: ffff888146e4fae8 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 fs/kernfs/file.c:155
 #3: ffff888141fc2190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline]
 #3: ffff888141fc2190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 drivers/base/core.c:2669
4 locks held by udevd/4293:
 #0: ffff888028f88790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 fs/seq_file.c:182
 #1: ffff8880278d9488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 fs/kernfs/file.c:154
 #2: ffff888148246a00 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 fs/kernfs/file.c:155
 #3: ffff888141fc0190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline]
 #3: ffff888141fc0190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 drivers/base/core.c:2669
2 locks held by dhcpcd/4334:
 #0: ffff88802ad02130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1756 [inline]
 #0: ffff88802ad02130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 net/packet/af_packet.c:3249
 #1: ffffffff8c9307f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline]
 #1: ffffffff8c9307f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 kernel/rcu/tree_exp.h:962
2 locks held by dhcpcd/4335:
 #0: ffff8880187e0130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1756 [inline]
 #0: ffff8880187e0130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 net/packet/af_packet.c:3249
 #1: ffffffff8c9307f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:323 [inline]
 #1: ffffffff8c9307f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830 kernel/rcu/tree_exp.h:962
1 lock held by dhcpcd/4339:
 #0: ffff888024394130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1756 [inline]
 #0: ffff888024394130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 net/packet/af_packet.c:3249
1 lock held by dhcpcd/4342:
 #0: ffff888025d74130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1756 [inline]
 #0: ffff888025d74130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 net/packet/af_packet.c:3249
1 lock held by dhcpcd/4343:
 #0: ffff888144798130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1756 [inline]
 #0: ffff888144798130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 net/packet/af_packet.c:3249
1 lock held by dhcpcd/4344:
 #0: ffff88814479a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1756 [inline]
 #0: ffff88814479a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 net/packet/af_packet.c:3249

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.140-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x168/0x22e lib/dump_stack.c:106
 nmi_cpu_backtrace+0x3f4/0x470 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x1d4/0x450 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
 watchdog+0xeee/0xf30 kernel/hung_task.c:377
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 6.1.140-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: usb_hub_wq hub_event
RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:50 [inline]
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:178 [inline]
RIP: 0010:unwind_next_frame+0x1328/0x20b0 arch/x86/kernel/unwind_orc.c:448
Code: 00 0f 85 9c 05 00 00 c6 05 90 bc b1 0c 01 48 c7 c7 80 72 69 8a 48 8b 74 24 68 e8 05 c2 cb 08 e9 7f 05 00 00 49 89 f7 49 89 f5 <4c> 89 e0 4c 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83
RSP: 0018:ffffc900001365f0 EFLAGS: 00000287
RAX: ffffffff8e4622ac RBX: ffffc900001366c8 RCX: ffffffff8e4622b4
RDX: ffffffff8ed1774c RSI: ffffffff8e46229c RDI: ffffffff8138551f
RBP: ffffffff86194d08 R08: 000000000000000b R09: 0000000000000014
R10: fffff52000026ce5 R11: 1ffff92000026ce3 R12: ffffffff8e4622ac
R13: ffffffff8e46229c R14: ffffffff8e4622b0 R15: ffffffff8e46229c
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd7a4288560 CR3: 000000000c68e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 arch_stack_walk+0x10c/0x140 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x98/0xe0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:45 [inline]
 kasan_set_track+0x4b/0x70 mm/kasan/common.c:52
 __kasan_slab_alloc+0x6b/0x80 mm/kasan/common.c:328
 kasan_slab_alloc include/linux/kasan.h:201 [inline]
 slab_post_alloc_hook+0x4b/0x480 mm/slab.h:737
 slab_alloc_node mm/slub.c:3398 [inline]
 kmem_cache_alloc_node+0x14d/0x320 mm/slub.c:3443
 __alloc_skb+0xfc/0x7e0 net/core/skbuff.c:505
 __netdev_alloc_skb+0x107/0x4d0 net/core/skbuff.c:579
 netdev_alloc_skb include/linux/skbuff.h:3206 [inline]
 dev_alloc_skb include/linux/skbuff.h:3219 [inline]
 ath6kl_usb_post_recv_transfers+0x207/0x6f0 drivers/net/wireless/ath/ath6kl/usb.c:428
 ath6kl_usb_start_recv_pipes drivers/net/wireless/ath/ath6kl/usb.c:498 [inline]
 hif_start drivers/net/wireless/ath/ath6kl/usb.c:703 [inline]
 ath6kl_usb_power_on+0x66/0x280 drivers/net/wireless/ath/ath6kl/usb.c:1062
 ath6kl_hif_power_on drivers/net/wireless/ath/ath6kl/hif-ops.h:136 [inline]
 ath6kl_core_init+0x1ce/0x10c0 drivers/net/wireless/ath/ath6kl/core.c:97
 ath6kl_usb_probe+0x144a/0x1540 drivers/net/wireless/ath/ath6kl/usb.c:1168
 usb_probe_interface+0x5a0/0xaf0 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x2aa/0xc70 drivers/base/dd.c:639
 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:785
 driver_probe_device+0x4f/0x420 drivers/base/dd.c:815
 __device_attach_driver+0x2c6/0x510 drivers/base/dd.c:943
 bus_for_each_drv+0x175/0x200 drivers/base/bus.c:429
 __device_attach+0x29b/0x460 drivers/base/dd.c:1015
 bus_probe_device+0xbc/0x1e0 drivers/base/bus.c:489
 device_add+0xa00/0xfb0 drivers/base/core.c:3697
 usb_set_configuration+0x1991/0x1fd0 drivers/usb/core/message.c:2165
 usb_generic_driver_probe+0x89/0x150 drivers/usb/core/generic.c:238
 usb_probe_device+0x139/0x270 drivers/usb/core/driver.c:293
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x2aa/0xc70 drivers/base/dd.c:639
 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:785
 driver_probe_device+0x4f/0x420 drivers/base/dd.c:815
 __device_attach_driver+0x2c6/0x510 drivers/base/dd.c:943
 bus_for_each_drv+0x175/0x200 drivers/base/bus.c:429
 __device_attach+0x29b/0x460 drivers/base/dd.c:1015
 bus_probe_device+0xbc/0x1e0 drivers/base/bus.c:489
 device_add+0xa00/0xfb0 drivers/base/core.c:3697
 usb_new_device+0xd4d/0x1620 drivers/usb/core/hub.c:2631
 hub_port_connect drivers/usb/core/hub.c:5489 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5629 [inline]
 port_event drivers/usb/core/hub.c:5785 [inline]
 hub_event+0x2b02/0x5210 drivers/usb/core/hub.c:5867
 process_one_work+0x898/0x1160 kernel/workqueue.c:2292
 worker_thread+0xaa2/0x1250 kernel/workqueue.c:2439
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.666 msecs

Crashes (23):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/02 03:48 linux-6.1.y da3c5173c55f 3d2f584d .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2025/06/02 02:35 linux-6.1.y da3c5173c55f 3d2f584d .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2025/06/02 01:16 linux-6.1.y da3c5173c55f 3d2f584d .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2024/11/27 03:26 linux-6.1.y e4d90d63d385 e9a9a9f2 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2024/11/27 02:32 linux-6.1.y e4d90d63d385 e9a9a9f2 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2024/11/28 11:25 linux-6.1.y e4d90d63d385 5df23865 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in uevent_show
2025/06/29 23:55 linux-6.1.y 7e69c33e4858 fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2025/06/17 00:53 linux-6.1.y 58485ff1a74f d1716036 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2025/04/26 22:43 linux-6.1.y 535ec20c5027 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2025/02/11 05:06 linux-6.1.y 0cbb5f65e52f 43f51a00 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2025/01/27 02:01 linux-6.1.y 75cefdf153f5 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2025/01/08 16:33 linux-6.1.y 7dc732d24ff7 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2024/11/29 20:23 linux-6.1.y e4d90d63d385 5df23865 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2024/08/13 18:04 linux-6.1.y 36790ef5e00b f21a18ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2024/07/27 23:56 linux-6.1.y c1cec4dad96b 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2024/07/26 06:21 linux-6.1.y c18e82d3ee44 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in uevent_show
2025/05/28 10:08 linux-6.1.y da3c5173c55f 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in uevent_show
2025/05/15 10:42 linux-6.1.y 02b72ccb5f9d d6b2ee52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in uevent_show
2025/05/08 17:43 linux-6.1.y ac7079a42ea5 dbf35fa1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in uevent_show
2025/03/15 10:29 linux-6.1.y 344a09659766 e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in uevent_show
2025/02/15 15:37 linux-6.1.y 0cbb5f65e52f 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in uevent_show
2025/01/17 02:05 linux-6.1.y c63962be84ef f9e07a6e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in uevent_show
2024/11/13 07:17 linux-6.1.y d7039b844a1c 62026c85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in uevent_show
* Struck through repros no longer work on HEAD.