Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. executing program [ 38.297696][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.657753][ T25] usb 1-1: config 1 has an invalid interface number: 203 but max is 3 [ 38.666135][ T25] usb 1-1: config 1 has an invalid interface number: 73 but max is 3 [ 38.674350][ T25] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 38.683187][ T25] usb 1-1: config 1 has an invalid interface number: 242 but max is 3 [ 38.691423][ T25] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 38.700174][ T25] usb 1-1: config 1 has an invalid interface number: 14 but max is 3 [ 38.708345][ T25] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 38.717154][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.727321][ T25] usb 1-1: config 1 has no interface number 0 [ 38.733478][ T25] usb 1-1: config 1 has no interface number 1 [ 38.739614][ T25] usb 1-1: config 1 has no interface number 2 [ 38.745740][ T25] usb 1-1: config 1 has no interface number 3 [ 38.752570][ T25] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x6 has an invalid bInterval 32, changing to 9 [ 38.763975][ T25] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 38.775182][ T25] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 38.786348][ T25] usb 1-1: config 1 interface 73 altsetting 129 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 38.797468][ T25] usb 1-1: config 1 interface 242 altsetting 112 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 38.808708][ T25] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x4, skipping [ 38.819731][ T25] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0xD, skipping [ 38.830765][ T25] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x9, skipping [ 38.841708][ T25] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0xB, skipping [ 38.852625][ T25] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x9, skipping [ 38.863640][ T25] usb 1-1: config 1 interface 242 altsetting 112 has an invalid endpoint with address 0x80, skipping [ 38.874572][ T25] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x4, skipping [ 38.885523][ T25] usb 1-1: config 1 interface 14 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 38.898538][ T25] usb 1-1: config 1 interface 203 has no altsetting 0 [ 38.905320][ T25] usb 1-1: config 1 interface 73 has no altsetting 0 [ 38.912066][ T25] usb 1-1: config 1 interface 242 has no altsetting 0 [ 38.918910][ T25] usb 1-1: config 1 interface 14 has no altsetting 0 [ 39.077861][ T25] usb 1-1: New USB device found, idVendor=0586, idProduct=3410, bcdDevice=44.1d [ 39.086996][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.095237][ T25] usb 1-1: Product: syz [ 39.099478][ T25] usb 1-1: Manufacturer: syz [ 39.104176][ T25] usb 1-1: SerialNumber: syz executing program [ 39.907848][ T25] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 41.421546][ T25] zd1211rw 1-1:1.203: phy0 executing program [ 41.639356][ T25] zd1211rw 1-1:1.203: error ioread32(CR_REG1): -11 [ 42.017882][ T25] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 43.517884][ T25] zd1211rw 1-1:1.73: phy1 executing program [ 43.748214][ T25] zd1211rw 1-1:1.203: error ioread32(CR_REG1): -11 [ 43.754826][ T25] [ 43.757165][ T25] ============================================ [ 43.763325][ T25] WARNING: possible recursive locking detected [ 43.769560][ T25] 6.5.0-rc6-syzkaller-00158-g895ed7eb263d #0 Not tainted [ 43.776678][ T25] -------------------------------------------- [ 43.782929][ T25] kworker/1:1/25 is trying to acquire lock: [ 43.788828][ T25] ffff88810f336030 (&chip->mutex){+.+.}-{3:3}, at: zd_chip_disable_rxtx+0x1f/0x50 [ 43.798094][ T25] [ 43.798094][ T25] but task is already holding lock: [ 43.805546][ T25] ffff88811ef2e030 (&chip->mutex){+.+.}-{3:3}, at: pre_reset+0x209/0x270 [ 43.814104][ T25] [ 43.814104][ T25] other info that might help us debug this: [ 43.822162][ T25] Possible unsafe locking scenario: [ 43.822162][ T25] [ 43.829710][ T25] CPU0 [ 43.833090][ T25] ---- [ 43.836381][ T25] lock(&chip->mutex); [ 43.840682][ T25] lock(&chip->mutex); [ 43.844855][ T25] [ 43.844855][ T25] *** DEADLOCK *** [ 43.844855][ T25] [ 43.853005][ T25] May be due to missing lock nesting notation [ 43.853005][ T25] [ 43.861327][ T25] 6 locks held by kworker/1:1/25: [ 43.866371][ T25] #0: ffff88810ca58138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x96a/0x16f0 [ 43.877277][ T25] #1: ffffc900001b7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x99e/0x16f0 [ 43.888635][ T25] #2: ffff888105b69190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f30 [ 43.897573][ T25] #3: ffff88811ee58190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 43.906850][ T25] #4: ffff88811ee5c160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 43.916379][ T25] #5: ffff88811ef2e030 (&chip->mutex){+.+.}-{3:3}, at: pre_reset+0x209/0x270 [ 43.925300][ T25] [ 43.925300][ T25] stack backtrace: [ 43.931212][ T25] CPU: 1 PID: 25 Comm: kworker/1:1 Not tainted 6.5.0-rc6-syzkaller-00158-g895ed7eb263d #0 [ 43.941147][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 43.951324][ T25] Workqueue: usb_hub_wq hub_event [ 43.956426][ T25] Call Trace: [ 43.959725][ T25] [ 43.962676][ T25] dump_stack_lvl+0xd9/0x1b0 [ 43.967301][ T25] __lock_acquire+0x2971/0x5de0 [ 43.972795][ T25] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 43.978933][ T25] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 43.984974][ T25] lock_acquire+0x1ae/0x510 [ 43.989553][ T25] ? zd_chip_disable_rxtx+0x1f/0x50 [ 43.995068][ T25] ? lock_sync+0x190/0x190 [ 43.999539][ T25] ? preempt_count_sub+0x150/0x150 [ 44.004696][ T25] __mutex_lock+0x181/0x1340 [ 44.009319][ T25] ? zd_chip_disable_rxtx+0x1f/0x50 [ 44.014551][ T25] ? zd_chip_disable_rxtx+0x1f/0x50 [ 44.019819][ T25] ? __mutex_lock+0x25b/0x1340 [ 44.024619][ T25] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 44.030187][ T25] ? zd_usb_disable_int+0x17a/0x1b0 [ 44.035418][ T25] ? zd_chip_disable_rxtx+0x1f/0x50 [ 44.040657][ T25] zd_chip_disable_rxtx+0x1f/0x50 [ 44.045716][ T25] zd_op_stop+0x64/0x1a0 [ 44.049976][ T25] pre_reset+0x18f/0x270 [ 44.054236][ T25] usb_reset_device+0x41a/0xad0 [ 44.059114][ T25] ? zd_usb_disable_tx+0x170/0x170 [ 44.064248][ T25] probe+0x114/0x970 [ 44.068181][ T25] usb_probe_interface+0x307/0x930 [ 44.073348][ T25] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 44.078771][ T25] really_probe+0x234/0xc90 [ 44.083342][ T25] __driver_probe_device+0x1de/0x4b0 [ 44.089280][ T25] driver_probe_device+0x4c/0x1a0 [ 44.094355][ T25] __device_attach_driver+0x1d4/0x300 [ 44.099867][ T25] ? driver_probe_device+0x1a0/0x1a0 [ 44.105183][ T25] bus_for_each_drv+0x157/0x1d0 [ 44.110264][ T25] ? bus_for_each_dev+0x1d0/0x1d0 [ 44.115606][ T25] ? lockdep_hardirqs_on+0x7d/0x100 [ 44.121029][ T25] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 44.126896][ T25] __device_attach+0x1e8/0x4b0 [ 44.131691][ T25] ? device_driver_attach+0x200/0x200 [ 44.137715][ T25] ? do_raw_spin_unlock+0x173/0x230 [ 44.143492][ T25] bus_probe_device+0x17c/0x1c0 [ 44.152834][ T25] device_add+0x11f1/0x1b40 [ 44.158089][ T25] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 44.164973][ T25] ? __kmem_cache_free+0xff/0x340 [ 44.170042][ T25] ? create_intf_ep_devs.isra.0+0x4a/0x200 [ 44.175903][ T25] usb_set_configuration+0x10cb/0x1c40 [ 44.181596][ T25] usb_generic_driver_probe+0xca/0x130 [ 44.187111][ T25] usb_probe_device+0xda/0x2c0 [ 44.191932][ T25] ? usb_driver_release_interface+0x190/0x190 [ 44.198152][ T25] really_probe+0x234/0xc90 [ 44.202896][ T25] __driver_probe_device+0x1de/0x4b0 [ 44.208236][ T25] ? usb_driver_applicable+0x1c4/0x220 [ 44.213769][ T25] driver_probe_device+0x4c/0x1a0 [ 44.218844][ T25] __device_attach_driver+0x1d4/0x300 [ 44.224317][ T25] ? driver_probe_device+0x1a0/0x1a0 [ 44.229637][ T25] bus_for_each_drv+0x157/0x1d0 [ 44.234523][ T25] ? bus_for_each_dev+0x1d0/0x1d0 [ 44.239836][ T25] ? lockdep_hardirqs_on+0x7d/0x100 [ 44.245100][ T25] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 44.250994][ T25] __device_attach+0x1e8/0x4b0 [ 44.255802][ T25] ? device_driver_attach+0x200/0x200 [ 44.261278][ T25] ? do_raw_spin_unlock+0x173/0x230 [ 44.266531][ T25] bus_probe_device+0x17c/0x1c0 [ 44.271498][ T25] device_add+0x11f1/0x1b40 [ 44.276195][ T25] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 44.283182][ T25] ? add_device_randomness+0xb8/0xe0 [ 44.288553][ T25] usb_new_device+0xd80/0x1960 [ 44.293382][ T25] ? hub_disconnect+0x520/0x520 [ 44.298479][ T25] hub_event+0x2e62/0x4f30 [ 44.303054][ T25] ? hub_port_debounce+0x3d0/0x3d0 [ 44.308287][ T25] ? lock_sync+0x190/0x190 [ 44.312729][ T25] ? reacquire_held_locks+0x4b0/0x4b0 [ 44.318302][ T25] ? do_raw_spin_lock+0x12e/0x2b0 [ 44.323358][ T25] ? spin_bug+0x1d0/0x1d0 [ 44.327802][ T25] process_one_work+0xaa2/0x16f0 [ 44.332765][ T25] ? hcd_died_work+0x60/0x60 [ 44.337375][ T25] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 44.342955][ T25] ? spin_bug+0x1d0/0x1d0 [ 44.347326][ T25] worker_thread+0x687/0x1110 [ 44.352030][ T25] ? __kthread_parkme+0x152/0x220 [ 44.357069][ T25] ? process_one_work+0x16f0/0x16f0 [ 44.362377][ T25] kthread+0x33a/0x430 [ 44.366476][ T25] ? kthread_complete_and_exit+0x40/0x40 [ 44.372215][ T25] ret_from_fork+0x2c/0x70 [ 44.376664][ T25] ? kthread_complete_and_exit+0x40/0x40 [ 44.382491][ T25] ret_from_fork_asm+0x11/0x20 [ 44.387476][ T25] [ 44.390772][ T25] zd1211rw 1-1:1.73: error ioread32(CR_REG1): -11 [ 44.757573][ T25] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 46.258250][ T25] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' [ 46.271874][ T25] zd1211rw 1-1:1.242: phy2 executing program [ 46.488023][ T25] zd1211rw 1-1:1.203: error ioread32(CR_REG1): -11 [ 46.494650][ T25] zd1211rw 1-1:1.73: error ioread32(CR_REG1): -11 [ 46.501429][ T25] zd1211rw 1-1:1.242: error ioread32(CR_REG1): -11 [ 46.877605][ T25] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 48.378676][ T25] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 48.392947][ T25] zd1211rw 1-1:1.14: phy3 executing program [ 48.583997][ T25] usb 1-1: USB disconnect, device number 2 [ 49.197725][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 49.597621][ T25] usb 1-1: config 1 has an invalid interface number: 203 but max is 3 [ 49.605914][ T25] usb 1-1: config 1 has an invalid interface number: 73 but max is 3 [ 49.614075][ T25] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 49.623086][ T25] usb 1-1: config 1 has an invalid interface number: 242 but max is 3 [ 49.631352][ T25] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 49.640129][ T25] usb 1-1: config 1 has an invalid interface number: 14 but max is 3 [ 49.648276][ T25] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 49.656990][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.667134][ T25] usb 1-1: config 1 has no interface number 0 [ 49.673339][ T25] usb 1-1: config 1 has no interface number 1 [ 49.679457][ T25] usb 1-1: config 1 has no interface number 2 [ 49.685646][ T25] usb 1-1: config 1 has no interface number 3 [ 49.691983][ T25] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x6 has an invalid bInterval 32, changing to 9 [ 49.703273][ T25] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 49.714475][ T25] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 49.725577][ T25] usb 1-1: config 1 interface 73 altsetting 129 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 49.736589][ T25] usb 1-1: config 1 interface 242 altsetting 112 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 49.747764][ T25] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x4, skipping [ 49.758668][ T25] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0xD, skipping [ 49.769584][ T25] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x9, skipping [ 49.780521][ T25] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0xB, skipping [ 49.791476][ T25] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x9, skipping [ 49.802429][ T25] usb 1-1: config 1 interface 242 altsetting 112 has an invalid endpoint with address 0x80, skipping [ 49.813352][ T25] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x4, skipping [ 49.824463][ T25] usb 1-1: config 1 interface 14 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 49.837466][ T25] usb 1-1: config 1 interface 203 has no altsetting 0 [ 49.844297][ T25] usb 1-1: config 1 interface 73 has no altsetting 0 [ 49.851025][ T25] usb 1-1: config 1 interface 242 has no altsetting 0 [ 49.857841][ T25] usb 1-1: config 1 interface 14 has no altsetting 0 [ 50.017748][ T25] usb 1-1: New USB device found, idVendor=0586, idProduct=3410, bcdDevice=44.1d [ 50.026835][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.034890][ T25] usb 1-1: Product: syz [ 50.039095][ T25] usb 1-1: Manufacturer: syz [ 50.043697][ T25] usb 1-1: SerialNumber: syz executing program [ 50.847622][ T25] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 52.348701][ T25] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 52.362563][ T25] zd1211rw 1-1:1.203: phy4 executing program [ 52.598544][ T25] zd1211rw 1-1:1.203: error ioread32(CR_REG1): -11 [ 52.967609][ T25] usb 1-1: reset high-speed USB device number 3 using dummy_hcd