syzbot


INFO: task hung in usb_audio_disconnect (2)

Status: auto-obsoleted due to no activity on 2026/06/13 15:32
Subsystems: sound
Labels: prio:high
[Documentation on labels]
First crash: 84d, last: 53d
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
db19c2a8-4a92-4d28-9549-f6c0663e40ee assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ INFO: task hung in usb_audio_disconnect (2) 2026/05/12 09:13 2026/05/12 09:13 2026/05/12 10:03 d5b1a17d9298180a22d250cd80056009a13f65e5

			
		
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in usb_audio_disconnect sound 1 2 579d 596d 0/29 auto-obsoleted due to no activity on 2025/02/12 05:05
android-6-12 INFO: task hung in usb_audio_disconnect origin:upstream 1 syz 2 38d 59d 0/1 premoderation: reported syz repro on 2026/04/17 22:11

Sample crash report:
INFO: task kworker/0:0:21379 blocked for more than 143 seconds.
      Tainted: G             L      syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:0     state:D stack:22280 pid:21379 tgid:21379 ppid:2      task_flags:0x4288060 flags:0x00080000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5387 [inline]
 __schedule+0x17b4/0x5680 kernel/sched/core.c:7188
 __schedule_loop kernel/sched/core.c:7267 [inline]
 schedule+0x164/0x360 kernel/sched/core.c:7282
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7339
 __mutex_lock_common kernel/locking/mutex.c:712 [inline]
 __mutex_lock+0x7f5/0x1550 kernel/locking/mutex.c:806
 class_mutex_constructor include/linux/mutex.h:253 [inline]
 __usb_audio_disconnect sound/usb/card.c:1097 [inline]
 usb_audio_disconnect+0xd5/0x730 sound/usb/card.c:1160
 usb_unbind_interface+0x26e/0x910 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:621 [inline]
 __device_release_driver drivers/base/dd.c:1332 [inline]
 device_release_driver_internal+0x4d9/0x870 drivers/base/dd.c:1355
 bus_remove_device+0x455/0x570 drivers/base/bus.c:657
 device_del+0x527/0x8f0 drivers/base/core.c:3880
 usb_disable_device+0x3d4/0x8d0 drivers/usb/core/message.c:1476
 usb_disconnect+0x32f/0x990 drivers/usb/core/hub.c:2345
 hub_port_connect drivers/usb/core/hub.c:5407 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 port_event drivers/usb/core/hub.c:5871 [inline]
 hub_event+0x1cc9/0x4f30 drivers/usb/core/hub.c:5953
 process_one_work kernel/workqueue.c:3302 [inline]
 process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3385
 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3466
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/30:
 #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
 #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
2 locks held by getty/5588:
 #0: ffff8880371590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 drivers/tty/n_tty.c:2211
4 locks held by udevd/5830:
 #0: ffff88802b3ad098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 fs/seq_file.c:183
 #1: ffff8880571c2880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 fs/kernfs/file.c:172
 #2: ffff8880355974b8 (kn->active#31){++++}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8880355974b8 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 fs/kernfs/file.c:173
 #3: ffff888053f051d8 (&dev->mutex){....}-{4:4}, at: device_lock_interruptible include/linux/device.h:1000 [inline]
 #3: ffff888053f051d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
4 locks held by udevd/5831:
 #0: ffff8880859e7518 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 fs/seq_file.c:183
 #1: ffff888027790480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 fs/kernfs/file.c:172
 #2: ffff8880497fcf08 (kn->active#31){++++}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8880497fcf08 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 fs/kernfs/file.c:173
 #3: ffff88805602b1d8 (&dev->mutex){....}-{4:4}, at: device_lock_interruptible include/linux/device.h:1000 [inline]
 #3: ffff88805602b1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
6 locks held by kworker/1:8/5923:
 #0: ffff88802269a940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline]
 #0: ffff88802269a940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385
 #1: ffffc90004307c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline]
 #1: ffffc90004307c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385
 #2: ffff88802b2a51d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:995 [inline]
 #2: ffff88802b2a51d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 drivers/usb/core/hub.c:5899
 #3: ffff8880663a01d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:995 [inline]
 #3: ffff8880663a01d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1056
 #4: ffff8880468661a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:995 [inline]
 #4: ffff8880468661a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1056
 #5: ffffffff8fd462c0 (register_mutex#6){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline]
 #5: ffffffff8fd462c0 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x63a/0x2380 sound/usb/card.c:952
4 locks held by udevd/6958:
 #0: ffff888031a8d098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 fs/seq_file.c:183
 #1: ffff888057a7d880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 fs/kernfs/file.c:172
 #2: ffff88804cc94a58 (kn->active#31){++++}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88804cc94a58 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 fs/kernfs/file.c:173
 #3: ffff88807b89b1d8 (&dev->mutex){....}-{4:4}, at: device_lock_interruptible include/linux/device.h:1000 [inline]
 #3: ffff88807b89b1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
6 locks held by kworker/0:7/14959:
4 locks held by udevd/21342:
 #0: ffff88803d8aabd8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 fs/seq_file.c:183
 #1: ffff888034877080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 fs/kernfs/file.c:172
 #2: ffff888076076788 (kn->active#31){++++}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888076076788 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 fs/kernfs/file.c:173
 #3: ffff8880663a01d8 (&dev->mutex){....}-{4:4}, at: device_lock_interruptible include/linux/device.h:1000 [inline]
 #3: ffff8880663a01d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
6 locks held by kworker/0:0/21379:
 #0: ffff88802269a940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline]
 #0: ffff88802269a940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385
 #1: ffffc90003e27c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline]
 #1: ffffc90003e27c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385
 #2: ffff88802b3f31d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:995 [inline]
 #2: ffff88802b3f31d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 drivers/usb/core/hub.c:5899
 #3: ffff88807b89b1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:995 [inline]
 #3: ffff88807b89b1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 drivers/usb/core/hub.c:2336
 #4: ffff888046aad1a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:995 [inline]
 #4: ffff888046aad1a0 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1154 [inline]
 #4: ffff888046aad1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 drivers/base/dd.c:1352
 #5: ffffffff8fd462c0 (register_mutex#6){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline]
 #5: ffffffff8fd462c0 (register_mutex#6){+.+.}-{4:4}, at: __usb_audio_disconnect sound/usb/card.c:1097 [inline]
 #5: ffffffff8fd462c0 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_disconnect+0xd5/0x730 sound/usb/card.c:1160
5 locks held by kworker/u8:28/21667:
 #0: ffff88801be9e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline]
 #0: ffff88801be9e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385
 #1: ffffc90005c57c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline]
 #1: ffffc90005c57c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385
 #2: ffffffff8fdd0d28 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 net/core/net_namespace.c:673
 #3: ffffffff8fddf640 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline]
 #3: ffffffff8fddf640 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 net/core/net_namespace.c:248
 #4: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline]
 #4: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 kernel/rcu/tree_exp.h:961
5 locks held by kworker/0:15/25761:
 #0: ffff88802269a940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline]
 #0: ffff88802269a940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385
 #1: ffffc9000598fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline]
 #1: ffffc9000598fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385
 #2: ffff88802b1451d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:995 [inline]
 #2: ffff88802b1451d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 drivers/usb/core/hub.c:5899
 #3: ffff888032c18560 (&port_dev->status_lock){+.+.}-{4:4}, at: usb_lock_port drivers/usb/core/hub.c:3252 [inline]
 #3: ffff888032c18560 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_port_connect drivers/usb/core/hub.c:5464 [inline]
 #3: ffff888032c18560 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 #3: ffff888032c18560 (&port_dev->status_lock){+.+.}-{4:4}, at: port_event drivers/usb/core/hub.c:5871 [inline]
 #3: ffff888032c18560 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 drivers/usb/core/hub.c:5953
 #4: ffff88802b11f860 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_port_connect drivers/usb/core/hub.c:5465 [inline]
 #4: ffff88802b11f860 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 #4: ffff88802b11f860 (hcd->address0_mutex){+.+.}-{4:4}, at: port_event drivers/usb/core/hub.c:5871 [inline]
 #4: ffff88802b11f860 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 drivers/usb/core/hub.c:5953
6 locks held by kworker/1:13/30763:
 #0: ffff88802269a940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline]
 #0: ffff88802269a940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385
 #1: ffffc9000d60fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline]
 #1: ffffc9000d60fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385
 #2: ffff88802b5f91d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:995 [inline]
 #2: ffff88802b5f91d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 drivers/usb/core/hub.c:5899
 #3: ffff888053f051d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:995 [inline]
 #3: ffff888053f051d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1056
 #4: ffff88804e1791a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:995 [inline]
 #4: ffff88804e1791a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1056
 #5: ffffffff8fd462c0 (register_mutex#6){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline]
 #5: ffffffff8fd462c0 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x63a/0x2380 sound/usb/card.c:952

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x135/0x170 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
 watchdog+0xfd3/0x1030 kernel/hung_task.c:561
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 14959 Comm: kworker/0:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:memset_orig+0x60/0xb0 arch/x86/lib/memset_64.S:84
Code: 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 <89> d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 48
RSP: 0018:ffffc90000007890 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffffc900000079b8 RCX: 0000000000000000
RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900000079b8
RBP: dffffc0000000000 R08: ffffc900000079c7 R09: 0000000000000000
R10: ffffc900000079b8 R11: fffff52000000f39 R12: ffffc9000c44e420
R13: 1ffff92000000f2f R14: ffffc90000007968 R15: ffffc900000079b0
FS:  0000000000000000(0000) GS:ffff888125225000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055558e8f7a28 CR3: 0000000074948000 CR4: 00000000003526f0
DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 unwind_next_frame+0xf33/0x2550 arch/x86/kernel/unwind_orc.c:621
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2689 [inline]
 slab_free mm/slub.c:6246 [inline]
 kfree+0x1c5/0x640 mm/slub.c:6561
 slab_free_after_rcu_debug+0x62/0x220 mm/slub.c:6295
 rcu_do_batch kernel/rcu/tree.c:2617 [inline]
 rcu_core+0x7cd/0x1070 kernel/rcu/tree.c:2869
 handle_softirqs+0x22a/0x840 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1061
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:console_flush_one_record arch/x86/include/asm/irqflags.h:-1 [inline]
RIP: 0010:console_flush_all+0x801/0xb20 kernel/printk/printk.c:3343
Code: ff ff e8 02 df 20 00 90 0f 0b 90 e9 85 fc ff ff e8 f4 de 20 00 e8 5f 35 11 0a 48 85 db 74 c0 e8 e5 de 20 00 fb 48 8b 5c 24 08 <48> 8b 44 24 20 42 80 3c 20 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 56
RSP: 0018:ffffc9000c44e180 EFLAGS: 00000246
RAX: ffffffff81a4dfcb RBX: ffffc9000c44e2e0 RCX: 0000000000100000
RDX: ffffc90012b27000 RSI: 00000000000fffff RDI: 0000000000100000
RBP: ffffc9000c44e290 R08: ffffffff903335f7 R09: 1ffffffff20666be
R10: dffffc0000000000 R11: fffffbfff20666bf R12: dffffc0000000000
R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f2174a0
 __console_flush_and_unlock kernel/printk/printk.c:3373 [inline]
 console_unlock+0xd1/0x1c0 kernel/printk/printk.c:3413
 vprintk_emit+0x485/0x560 kernel/printk/printk.c:2479
 dev_vprintk_emit+0x355/0x420 drivers/base/core.c:4915
 dev_printk_emit+0xee/0x140 drivers/base/core.c:4926
 _dev_err+0x11e/0x180 drivers/base/core.c:4981
 parse_uac2_sample_rate_range+0x11b8/0x14a0 sound/usb/format.c:472
 parse_audio_format_rates_v2v3+0x300/0x1720 sound/usb/format.c:693
 parse_audio_format_ii sound/usb/format.c:851 [inline]
 snd_usb_parse_audio_format+0x4b7/0x740 sound/usb/format.c:872
 snd_usb_get_audioformat_uac12 sound/usb/stream.c:864 [inline]
 __snd_usb_parse_audio_interface+0x18df/0x4cc0 sound/usb/stream.c:1209
 snd_usb_parse_audio_interface+0x39/0xc0 sound/usb/stream.c:1290
 create_standard_audio_quirk+0x5d/0x130 sound/usb/quirks.c:104
 snd_usb_create_quirk sound/usb/quirks.c:544 [inline]
 create_composite_quirk+0x1f6/0x4f0 sound/usb/quirks.c:52
 usb_audio_probe+0xfe7/0x2380 sound/usb/card.c:1025
 usb_probe_interface+0x659/0xc70 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x267/0xaf0 drivers/base/dd.c:709
 __driver_probe_device+0x18c/0x320 drivers/base/dd.c:851
 driver_probe_device+0x4f/0x240 drivers/base/dd.c:881
 __device_attach_driver+0x279/0x430 drivers/base/dd.c:1009
 bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500
 __device_attach+0x2c5/0x450 drivers/base/dd.c:1081
 device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1136
 bus_probe_device+0x12a/0x220 drivers/base/bus.c:613
 device_add+0x7b6/0xb70 drivers/base/core.c:3691
 usb_set_configuration+0x1a87/0x2110 drivers/usb/core/message.c:2266
 usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:250
 usb_probe_device+0x1c4/0x3b0 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x267/0xaf0 drivers/base/dd.c:709
 __driver_probe_device+0x18c/0x320 drivers/base/dd.c:851
 driver_probe_device+0x4f/0x240 drivers/base/dd.c:881
 __device_attach_driver+0x279/0x430 drivers/base/dd.c:1009
 bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500
 __device_attach+0x2c5/0x450 drivers/base/dd.c:1081
 device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1136
 bus_probe_device+0x12a/0x220 drivers/base/bus.c:613
 device_add+0x7b6/0xb70 drivers/base/core.c:3691
 usb_new_device+0xa08/0x16f0 drivers/usb/core/hub.c:2695
 hub_port_connect drivers/usb/core/hub.c:5567 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 port_event drivers/usb/core/hub.c:5871 [inline]
 hub_event+0x2a1c/0x4f30 drivers/usb/core/hub.c:5953
 process_one_work kernel/workqueue.c:3302 [inline]
 process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3385
 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3466
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/18 19:39 upstream 8541d8f725c6 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in usb_audio_disconnect
2026/04/24 15:22 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 2e6803928193 1c2b9291 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in usb_audio_disconnect
2026/04/24 07:54 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 2e6803928193 9cfb3ca7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in usb_audio_disconnect
2026/04/22 12:42 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 6596a02b2078 4595e353 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in usb_audio_disconnect
2026/04/21 19:27 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing c1f49dea2b8f 0b6ab7ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in usb_audio_disconnect
2026/04/20 11:20 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing c1f49dea2b8f 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in usb_audio_disconnect
2026/04/18 23:43 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 87117347a0e7 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in usb_audio_disconnect
2026/04/18 08:23 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 87117347a0e7 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in usb_audio_disconnect
2026/04/18 05:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 87117347a0e7 5be7a9de .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in usb_audio_disconnect
2026/03/24 13:40 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 84db3719d273 74e70d19 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in usb_audio_disconnect
* Struck through repros no longer work on HEAD.