Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. 2024/02/08 16:18:08 ignoring optional flag "sandboxArg"="0" 2024/02/08 16:18:08 parsed 1 programs 2024/02/08 16:18:11 executed programs: 0 [ 81.521929][ T3071] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.723888][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.083850][ T26] usb 1-1: config 1 has an invalid interface number: 203 but max is 3 [ 92.092976][ T26] usb 1-1: config 1 has an invalid interface number: 73 but max is 3 [ 92.101339][ T26] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 92.110676][ T26] usb 1-1: config 1 has an invalid interface number: 242 but max is 3 [ 92.119331][ T26] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 92.128529][ T26] usb 1-1: config 1 has an invalid interface number: 14 but max is 3 [ 92.136832][ T26] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 92.146396][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.157239][ T26] usb 1-1: config 1 has no interface number 0 [ 92.163464][ T26] usb 1-1: config 1 has no interface number 1 [ 92.170686][ T26] usb 1-1: config 1 has no interface number 2 [ 92.177410][ T26] usb 1-1: config 1 has no interface number 3 [ 92.183955][ T26] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x6 has an invalid bInterval 32, changing to 9 [ 92.195603][ T26] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 92.207141][ T26] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 92.218635][ T26] usb 1-1: config 1 interface 73 altsetting 129 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 92.229940][ T26] usb 1-1: config 1 interface 242 altsetting 112 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 92.241191][ T26] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x4, skipping [ 92.252723][ T26] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0xD, skipping [ 92.263684][ T26] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x9, skipping [ 92.274674][ T26] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0xB, skipping [ 92.286091][ T26] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x9, skipping [ 92.297915][ T26] usb 1-1: config 1 interface 242 altsetting 112 has an invalid endpoint with address 0x80, skipping [ 92.310446][ T26] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x4, skipping [ 92.322717][ T26] usb 1-1: config 1 interface 14 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 92.338035][ T26] usb 1-1: config 1 interface 203 has no altsetting 0 [ 92.345310][ T26] usb 1-1: config 1 interface 73 has no altsetting 0 [ 92.352076][ T26] usb 1-1: config 1 interface 242 has no altsetting 0 [ 92.359153][ T26] usb 1-1: config 1 interface 14 has no altsetting 0 [ 92.523901][ T26] usb 1-1: New USB device found, idVendor=0586, idProduct=3410, bcdDevice=44.1d [ 92.534455][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.542762][ T26] usb 1-1: Product: syz [ 92.547111][ T26] usb 1-1: Manufacturer: syz [ 92.552131][ T26] usb 1-1: SerialNumber: syz 2024/02/08 16:18:23 executed programs: 1 [ 93.863862][ T26] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 95.387538][ T26] zd1211rw 1-1:1.203: phy0 [ 95.606087][ T26] zd1211rw 1-1:1.203: error ioread32(CR_REG1): -11 [ 96.504207][ T26] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 98.028852][ T26] zd1211rw 1-1:1.73: phy1 [ 98.264715][ T26] zd1211rw 1-1:1.203: error ioread32(CR_REG1): -11 [ 98.271417][ T26] [ 98.273739][ T26] ============================================ [ 98.280599][ T26] WARNING: possible recursive locking detected [ 98.286736][ T26] 6.8.0-rc3-syzkaller-00049-g88bae831f381 #0 Not tainted [ 98.294185][ T26] -------------------------------------------- [ 98.300594][ T26] kworker/1:1/26 is trying to acquire lock: [ 98.308548][ T26] ffff88812d965c30 (&chip->mutex){+.+.}-{3:3}, at: zd_chip_disable_rxtx+0x1f/0x50 [ 98.317864][ T26] [ 98.317864][ T26] but task is already holding lock: [ 98.325297][ T26] ffff88811af9dc30 (&chip->mutex){+.+.}-{3:3}, at: pre_reset+0x209/0x270 [ 98.334263][ T26] [ 98.334263][ T26] other info that might help us debug this: [ 98.343443][ T26] Possible unsafe locking scenario: [ 98.343443][ T26] [ 98.351062][ T26] CPU0 [ 98.355283][ T26] ---- [ 98.358745][ T26] lock(&chip->mutex); [ 98.362885][ T26] lock(&chip->mutex); [ 98.367111][ T26] [ 98.367111][ T26] *** DEADLOCK *** [ 98.367111][ T26] [ 98.375414][ T26] May be due to missing lock nesting notation [ 98.375414][ T26] [ 98.383983][ T26] 6 locks held by kworker/1:1/26: [ 98.389079][ T26] #0: ffff888106699d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x789/0x15d0 [ 98.399955][ T26] #1: ffffc900001c7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15d0 [ 98.411624][ T26] #2: ffff88810abc7190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 [ 98.420497][ T26] #3: ffff8881082b8190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 98.430227][ T26] #4: ffff8881056d5160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 98.439792][ T26] #5: ffff88811af9dc30 (&chip->mutex){+.+.}-{3:3}, at: pre_reset+0x209/0x270 [ 98.448799][ T26] [ 98.448799][ T26] stack backtrace: [ 98.455044][ T26] CPU: 1 PID: 26 Comm: kworker/1:1 Not tainted 6.8.0-rc3-syzkaller-00049-g88bae831f381 #0 [ 98.464941][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 98.475076][ T26] Workqueue: usb_hub_wq hub_event [ 98.480096][ T26] Call Trace: [ 98.483612][ T26] [ 98.486546][ T26] dump_stack_lvl+0xd9/0x1b0 [ 98.491680][ T26] __lock_acquire+0x210a/0x3b30 [ 98.496635][ T26] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 98.502804][ T26] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 98.509227][ T26] lock_acquire+0x1ae/0x520 [ 98.513750][ T26] ? zd_chip_disable_rxtx+0x1f/0x50 [ 98.518996][ T26] ? lock_sync+0x190/0x190 [ 98.523519][ T26] ? preempt_count_sub+0x160/0x160 [ 98.528791][ T26] ? mutex_is_locked+0x40/0x40 [ 98.533585][ T26] __mutex_lock+0x175/0x9d0 [ 98.538483][ T26] ? zd_chip_disable_rxtx+0x1f/0x50 [ 98.543778][ T26] ? rcu_is_watching+0x12/0xb0 [ 98.548547][ T26] ? zd_chip_disable_rxtx+0x1f/0x50 [ 98.553741][ T26] ? __mutex_lock+0x1a6/0x9d0 [ 98.558419][ T26] ? mutex_trylock+0x130/0x130 [ 98.563259][ T26] ? pre_reset+0x209/0x270 [ 98.567762][ T26] ? reacquire_held_locks+0x4c0/0x4c0 [ 98.573230][ T26] ? zd_chip_disable_rxtx+0x1f/0x50 [ 98.578523][ T26] zd_chip_disable_rxtx+0x1f/0x50 [ 98.583668][ T26] zd_op_stop+0x64/0x1a0 [ 98.588005][ T26] pre_reset+0x18f/0x270 [ 98.592349][ T26] usb_reset_device+0x41a/0xad0 [ 98.597397][ T26] ? zd_usb_disable_tx+0x170/0x170 [ 98.602548][ T26] probe+0x114/0x970 [ 98.606455][ T26] usb_probe_interface+0x307/0x9c0 [ 98.611874][ T26] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 98.617300][ T26] really_probe+0x234/0xc90 [ 98.621991][ T26] __driver_probe_device+0x1de/0x4b0 [ 98.627318][ T26] driver_probe_device+0x4c/0x1a0 [ 98.632625][ T26] __device_attach_driver+0x1d4/0x300 [ 98.638059][ T26] ? driver_probe_device+0x1a0/0x1a0 [ 98.644223][ T26] bus_for_each_drv+0x157/0x1d0 [ 98.649103][ T26] ? bus_for_each_dev+0x1d0/0x1d0 [ 98.654128][ T26] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.659344][ T26] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 98.665164][ T26] __device_attach+0x1e8/0x4b0 [ 98.669931][ T26] ? device_driver_attach+0x200/0x200 [ 98.675381][ T26] ? do_raw_spin_unlock+0x173/0x230 [ 98.680568][ T26] bus_probe_device+0x17c/0x1c0 [ 98.685499][ T26] device_add+0x117e/0x1aa0 [ 98.690200][ T26] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 98.697051][ T26] ? kfree+0x105/0x340 [ 98.701208][ T26] ? create_intf_ep_devs.isra.0+0x4a/0x200 [ 98.707160][ T26] usb_set_configuration+0x10cb/0x1c40 [ 98.712802][ T26] ? usb_choose_configuration+0x9f0/0x9f0 [ 98.718517][ T26] usb_generic_driver_probe+0xad/0x110 [ 98.724243][ T26] usb_probe_device+0xec/0x3e0 [ 98.729092][ T26] ? usb_autopm_get_interface_no_resume+0xa0/0xa0 [ 98.735514][ T26] really_probe+0x234/0xc90 [ 98.740103][ T26] __driver_probe_device+0x1de/0x4b0 [ 98.745381][ T26] ? usb_driver_applicable+0x1c4/0x220 [ 98.750838][ T26] driver_probe_device+0x4c/0x1a0 [ 98.755962][ T26] __device_attach_driver+0x1d4/0x300 [ 98.761340][ T26] ? driver_probe_device+0x1a0/0x1a0 [ 98.766981][ T26] bus_for_each_drv+0x157/0x1d0 [ 98.771935][ T26] ? bus_for_each_dev+0x1d0/0x1d0 [ 98.776958][ T26] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.782160][ T26] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 98.787968][ T26] __device_attach+0x1e8/0x4b0 [ 98.792734][ T26] ? device_driver_attach+0x200/0x200 [ 98.798191][ T26] ? do_raw_spin_unlock+0x173/0x230 [ 98.803388][ T26] bus_probe_device+0x17c/0x1c0 [ 98.808230][ T26] device_add+0x117e/0x1aa0 [ 98.813265][ T26] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 98.820224][ T26] ? add_device_randomness+0xb8/0xe0 [ 98.826823][ T26] usb_new_device+0xd90/0x1a10 [ 98.831702][ T26] ? hub_disconnect+0x520/0x520 [ 98.837435][ T26] hub_event+0x2e62/0x4f40 [ 98.842113][ T26] ? hub_port_debounce+0x3d0/0x3d0 [ 98.847414][ T26] ? check_irq_usage+0xa01/0x1490 [ 98.852464][ T26] ? lock_sync+0x190/0x190 [ 98.857259][ T26] ? reacquire_held_locks+0x4c0/0x4c0 [ 98.862664][ T26] process_one_work+0x886/0x15d0 [ 98.867712][ T26] ? hcd_died_work+0x60/0x60 [ 98.872555][ T26] ? workqueue_congested+0x300/0x300 [ 98.877856][ T26] ? assign_work+0x1a0/0x250 [ 98.882437][ T26] worker_thread+0x8b9/0x1290 [ 98.887135][ T26] ? __kthread_parkme+0x14b/0x220 [ 98.892152][ T26] ? process_one_work+0x15d0/0x15d0 [ 98.897426][ T26] kthread+0x2c6/0x3a0 [ 98.901575][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.907202][ T26] ? kthread_complete_and_exit+0x40/0x40 [ 98.912823][ T26] ret_from_fork+0x45/0x80 [ 98.917231][ T26] ? kthread_complete_and_exit+0x40/0x40 [ 98.923065][ T26] ret_from_fork_asm+0x11/0x20 [ 98.927914][ T26] [ 98.931716][ T26] zd1211rw 1-1:1.73: error ioread32(CR_REG1): -11 2024/02/08 16:18:29 executed programs: 3 [ 99.603614][ T26] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 101.104320][ T26] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' [ 101.117650][ T26] zd1211rw 1-1:1.242: WBRF is not supported [ 101.131138][ T26] zd1211rw 1-1:1.242: phy2 [ 101.344317][ T26] zd1211rw 1-1:1.203: error ioread32(CR_REG1): -11 [ 101.350966][ T26] zd1211rw 1-1:1.73: error ioread32(CR_REG1): -11 [ 101.358043][ T26] zd1211rw 1-1:1.242: error ioread32(CR_REG1): -11 [ 102.253609][ T26] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 103.754470][ T26] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 103.767362][ T26] zd1211rw 1-1:1.14: WBRF is not supported [ 103.780704][ T26] zd1211rw 1-1:1.14: phy3 [ 103.956241][ T26] usb 1-1: USB disconnect, device number 2 2024/02/08 16:18:34 executed programs: 5 [ 104.753599][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.113725][ T26] usb 1-1: config 1 has an invalid interface number: 203 but max is 3 [ 105.122110][ T26] usb 1-1: config 1 has an invalid interface number: 73 but max is 3 [ 105.130787][ T26] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 105.140022][ T26] usb 1-1: config 1 has an invalid interface number: 242 but max is 3 [ 105.148923][ T26] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 105.157893][ T26] usb 1-1: config 1 has an invalid interface number: 14 but max is 3 [ 105.166615][ T26] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 105.176073][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.186532][ T26] usb 1-1: config 1 has no interface number 0 [ 105.193220][ T26] usb 1-1: config 1 has no interface number 1 [ 105.199449][ T26] usb 1-1: config 1 has no interface number 2 [ 105.205906][ T26] usb 1-1: config 1 has no interface number 3 [ 105.212255][ T26] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x6 has an invalid bInterval 32, changing to 9 [ 105.223592][ T26] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 105.235177][ T26] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 105.246341][ T26] usb 1-1: config 1 interface 73 altsetting 129 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 105.257613][ T26] usb 1-1: config 1 interface 242 altsetting 112 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 105.269170][ T26] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x4, skipping [ 105.280930][ T26] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0xD, skipping [ 105.292008][ T26] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x9, skipping [ 105.303937][ T26] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0xB, skipping [ 105.315728][ T26] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x9, skipping [ 105.327162][ T26] usb 1-1: config 1 interface 242 altsetting 112 has an invalid endpoint with address 0x80, skipping [ 105.338313][ T26] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x4, skipping [ 105.349806][ T26] usb 1-1: config 1 interface 14 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 105.363975][ T26] usb 1-1: config 1 interface 203 has no altsetting 0 [ 105.370925][ T26] usb 1-1: config 1 interface 73 has no altsetting 0 [ 105.377796][ T26] usb 1-1: config 1 interface 242 has no altsetting 0 [ 105.385158][ T26] usb 1-1: config 1 interface 14 has no altsetting 0 [ 105.543803][ T26] usb 1-1: New USB device found, idVendor=0586, idProduct=3410, bcdDevice=44.1d [ 105.553314][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.561515][ T26] usb 1-1: Product: syz [ 105.565792][ T26] usb 1-1: Manufacturer: syz [ 105.570371][ T26] usb 1-1: SerialNumber: syz [ 106.893584][ T26] usb 1-1: reset high-speed USB device number 3 using dummy_hcd