Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. 2024/03/04 04:16:26 ignoring optional flag "sandboxArg"="0" 2024/03/04 04:16:26 parsed 1 programs 2024/03/04 04:16:29 executed programs: 0 [ 81.386535][ T3070] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.578888][ T725] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.938911][ T725] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 91.947942][ T725] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 91.957474][ T725] usb 1-1: config 0 interface 0 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 91.968172][ T725] usb 1-1: config 0 interface 0 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 91.979248][ T725] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 91.990393][ T725] usb 1-1: config 0 interface 0 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 92.001572][ T725] usb 1-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 92.012559][ T725] usb 1-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 92.023250][ T725] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 92.034262][ T725] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 92.044155][ T725] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0xD has invalid wMaxPacketSize 0 [ 92.055064][ T725] usb 1-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 92.065733][ T725] usb 1-1: config 0 interface 0 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 92.076479][ T725] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 92.087386][ T725] usb 1-1: config 0 interface 0 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 92.098167][ T725] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.258984][ T725] usb 1-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=17.9b [ 92.268250][ T725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.276494][ T725] usb 1-1: Product: syz [ 92.280890][ T725] usb 1-1: Manufacturer: syz [ 92.285504][ T725] usb 1-1: SerialNumber: syz [ 92.293711][ T725] usb 1-1: config 0 descriptor?? [ 92.601562][ T725] usbtv 1-1:0.0: Fushicai USBTV007 Audio-Video Grabber [ 92.614272][ T725] usb 1-1: USB disconnect, device number 2 [ 92.659894][ T725] [ 92.662250][ T725] ============================================ [ 92.668645][ T725] WARNING: possible recursive locking detected [ 92.674779][ T725] 6.8.0-rc6-syzkaller-00139-g19e7b35d8a71 #0 Not tainted [ 92.682048][ T725] -------------------------------------------- [ 92.688194][ T725] kworker/0:2/725 is trying to acquire lock: [ 92.694184][ T725] ffff88811e446b70 (&usbtv->vb2q_lock){+.+.}-{3:3}, at: vb2_video_unregister_device+0x12b/0x2d0 [ 92.705119][ T725] [ 92.705119][ T725] but task is already holding lock: [ 92.712760][ T725] ffff88811e446b70 (&usbtv->vb2q_lock){+.+.}-{3:3}, at: usbtv_video_free+0x28/0x70 [ 92.722476][ T725] [ 92.722476][ T725] other info that might help us debug this: [ 92.730820][ T725] Possible unsafe locking scenario: [ 92.730820][ T725] [ 92.738464][ T725] CPU0 [ 92.741863][ T725] ---- [ 92.745255][ T725] lock(&usbtv->vb2q_lock); [ 92.749903][ T725] lock(&usbtv->vb2q_lock); [ 92.754487][ T725] [ 92.754487][ T725] *** DEADLOCK *** [ 92.754487][ T725] [ 92.762956][ T725] May be due to missing lock nesting notation [ 92.762956][ T725] [ 92.771288][ T725] 7 locks held by kworker/0:2/725: [ 92.776491][ T725] #0: ffff888106296938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x789/0x15d0 [ 92.787819][ T725] #1: ffffc90001cefd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15d0 [ 92.799440][ T725] #2: ffff88810b3c0190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 [ 92.808505][ T725] #3: ffff888105abb190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10a/0x910 [ 92.818556][ T725] #4: ffff888108281160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 92.829712][ T725] #5: ffff88811e446b70 (&usbtv->vb2q_lock){+.+.}-{3:3}, at: usbtv_video_free+0x28/0x70 [ 92.839630][ T725] #6: ffff88811e446ae0 (&usbtv->v4l2_lock){+.+.}-{3:3}, at: usbtv_video_free+0x32/0x70 [ 92.849732][ T725] [ 92.849732][ T725] stack backtrace: [ 92.855794][ T725] CPU: 0 PID: 725 Comm: kworker/0:2 Not tainted 6.8.0-rc6-syzkaller-00139-g19e7b35d8a71 #0 [ 92.865968][ T725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 92.876289][ T725] Workqueue: usb_hub_wq hub_event [ 92.881408][ T725] Call Trace: [ 92.884864][ T725] [ 92.887944][ T725] dump_stack_lvl+0xd9/0x1b0 [ 92.892827][ T725] __lock_acquire+0x210a/0x3b30 [ 92.897794][ T725] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 92.903785][ T725] ? reacquire_held_locks+0x4c0/0x4c0 [ 92.909169][ T725] lock_acquire+0x1ae/0x520 [ 92.913688][ T725] ? vb2_video_unregister_device+0x12b/0x2d0 [ 92.919680][ T725] ? lock_sync+0x190/0x190 [ 92.924101][ T725] ? preempt_count_sub+0x160/0x160 [ 92.929389][ T725] __mutex_lock+0x175/0x9d0 [ 92.934169][ T725] ? vb2_video_unregister_device+0x12b/0x2d0 [ 92.940680][ T725] ? kobject_put+0xbe/0x5b0 [ 92.945658][ T725] ? vb2_video_unregister_device+0x12b/0x2d0 [ 92.952447][ T725] ? device_del+0x713/0xa50 [ 92.957398][ T725] ? mutex_trylock+0x130/0x130 [ 92.962602][ T725] ? __device_link_del+0x380/0x380 [ 92.967981][ T725] ? kobject_put+0xbe/0x5b0 [ 92.972597][ T725] ? vb2_video_unregister_device+0x12b/0x2d0 [ 92.978753][ T725] vb2_video_unregister_device+0x12b/0x2d0 [ 92.984910][ T725] usbtv_video_free+0x4a/0x70 [ 92.989844][ T725] usbtv_disconnect+0x5c/0xd0 [ 92.994796][ T725] usb_unbind_interface+0x1e5/0x960 [ 93.000256][ T725] ? kernfs_find_ns+0x2eb/0x3f0 [ 93.005286][ T725] ? usb_autopm_get_interface+0xe0/0xe0 [ 93.010842][ T725] device_remove+0x11f/0x170 [ 93.015498][ T725] device_release_driver_internal+0x44a/0x610 [ 93.022016][ T725] bus_remove_device+0x22c/0x420 [ 93.027047][ T725] device_del+0x39a/0xa50 [ 93.031389][ T725] ? __device_link_del+0x380/0x380 [ 93.036784][ T725] ? kobject_put+0x220/0x5b0 [ 93.041573][ T725] usb_disable_device+0x36c/0x7f0 [ 93.046597][ T725] usb_disconnect+0x2e1/0x910 [ 93.051274][ T725] hub_event+0x1be0/0x4f40 [ 93.055799][ T725] ? hub_port_debounce+0x3d0/0x3d0 [ 93.061106][ T725] ? check_irq_usage+0x1f0/0x1490 [ 93.066217][ T725] ? lock_sync+0x190/0x190 [ 93.070640][ T725] ? reacquire_held_locks+0x4c0/0x4c0 [ 93.076009][ T725] process_one_work+0x886/0x15d0 [ 93.081037][ T725] ? hub_port_debounce+0x3d0/0x3d0 [ 93.086166][ T725] ? workqueue_congested+0x300/0x300 [ 93.091625][ T725] ? assign_work+0x1a0/0x250 [ 93.096309][ T725] worker_thread+0x8b9/0x1290 [ 93.101008][ T725] ? __kthread_parkme+0x14b/0x220 [ 93.106224][ T725] ? process_one_work+0x15d0/0x15d0 [ 93.111817][ T725] kthread+0x2c6/0x3a0 [ 93.115910][ T725] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.121457][ T725] ? kthread_complete_and_exit+0x40/0x40 [ 93.127085][ T725] ret_from_fork+0x45/0x80 [ 93.131585][ T725] ? kthread_complete_and_exit+0x40/0x40 [ 93.138114][ T725] ret_from_fork_asm+0x11/0x20 [ 93.142968][ T725] 2024/03/04 04:16:41 executed programs: 1 2024/03/04 04:16:47 executed programs: 3