Warning: Permanently added '10.128.0.135' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 41.330267][ T71] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 41.730335][ T71] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.770376][ T71] usb 1-1: not running at top speed; connect to a high speed hub [ 41.850422][ T71] usb 1-1: config 0 has an invalid interface number: 144 but max is 1 [ 41.858628][ T71] usb 1-1: config 0 has an invalid interface number: 22 but max is 1 [ 41.866759][ T71] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 41.876679][ T71] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 41.885440][ T71] usb 1-1: config 0 has an invalid interface number: 243 but max is 1 [ 41.893715][ T71] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 41.902683][ T71] usb 1-1: config 0 has no interface number 0 [ 41.908751][ T71] usb 1-1: config 0 has no interface number 1 [ 41.914855][ T71] usb 1-1: config 0 has no interface number 2 [ 41.920973][ T71] usb 1-1: config 0 interface 144 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 41.931940][ T71] usb 1-1: config 0 interface 144 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 41.942913][ T71] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 41.953788][ T71] usb 1-1: config 0 interface 22 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 41.964402][ T71] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 41.975024][ T71] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 41.985901][ T71] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 41.996512][ T71] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 42.007129][ T71] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 42.017740][ T71] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 42.028440][ T71] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0xA has invalid maxpacket 503, setting to 64 [ 42.039257][ T71] usb 1-1: config 0 interface 22 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 42.049976][ T71] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 42.060600][ T71] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 42.071478][ T71] usb 1-1: config 0 interface 22 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 42.082028][ T71] usb 1-1: config 0 interface 22 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 16 [ 42.095171][ T71] usb 1-1: too many endpoints for config 0 interface 243 altsetting 168: 112, using maximum allowed: 30 [ 42.106339][ T71] usb 1-1: config 0 interface 243 altsetting 168 has a duplicate endpoint with address 0x6, skipping [ 42.117223][ T71] usb 1-1: config 0 interface 243 altsetting 168 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 42.128282][ T71] usb 1-1: config 0 interface 243 altsetting 168 has an invalid endpoint with address 0x0, skipping [ 42.139070][ T71] usb 1-1: config 0 interface 243 altsetting 168 has 3 endpoint descriptors, different from the interface descriptor's value: 112 [ 42.152499][ T71] usb 1-1: config 0 interface 144 has no altsetting 0 [ 42.159267][ T71] usb 1-1: config 0 interface 243 has no altsetting 0 [ 42.400365][ T71] usb 1-1: string descriptor 0 read error: -22 [ 42.406622][ T71] usb 1-1: New USB device found, idVendor=0471, idProduct=1237, bcdDevice=d0.1f [ 42.415694][ T71] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.425862][ T71] usb 1-1: config 0 descriptor?? [ 42.620379][ T71] usb 1-1: reset full-speed USB device number 2 using dummy_hcd executing program [ 43.130273][ T71] usb 1-1: device descriptor read/64, error -71 [ 43.650351][ T71] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.400093][ T71] zd1211rw 1-1:0.144: phy0 [ 44.406751][ T71] zd1211rw 1-1:0.144: error ioread32(CR_REG1): -11 executing program [ 44.560300][ T71] usb 1-1: reset full-speed USB device number 2 using dummy_hcd [ 45.020280][ T71] usb 1-1: device descriptor read/64, error -71 [ 45.540373][ T71] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.277200][ T71] zd1211rw 1-1:0.22: phy1 [ 46.284380][ T71] zd1211rw 1-1:0.144: error ioread32(CR_REG1): -11 [ 46.290965][ T71] [ 46.293315][ T71] ============================================ [ 46.299453][ T71] WARNING: possible recursive locking detected [ 46.305580][ T71] 6.1.0-rc3-syzkaller-00026-ga8bc8cc193c6 #0 Not tainted [ 46.312578][ T71] -------------------------------------------- [ 46.318705][ T71] kworker/0:2/71 is trying to acquire lock: [ 46.324572][ T71] ffff888111dd5f90 (&chip->mutex){+.+.}-{3:3}, at: zd_chip_disable_rxtx+0x1c/0x40 [ 46.333782][ T71] [ 46.333782][ T71] but task is already holding lock: [ 46.341124][ T71] ffff88811dd6df90 (&chip->mutex){+.+.}-{3:3}, at: pre_reset+0x20f/0x280 [ 46.349545][ T71] [ 46.349545][ T71] other info that might help us debug this: [ 46.357600][ T71] Possible unsafe locking scenario: [ 46.357600][ T71] [ 46.365030][ T71] CPU0 [ 46.368295][ T71] ---- [ 46.371554][ T71] lock(&chip->mutex); [ 46.375689][ T71] lock(&chip->mutex); [ 46.379827][ T71] [ 46.379827][ T71] *** DEADLOCK *** [ 46.379827][ T71] [ 46.387947][ T71] May be due to missing lock nesting notation [ 46.387947][ T71] [ 46.396246][ T71] 6 locks held by kworker/0:2/71: [ 46.401260][ T71] #0: ffff888109c85138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 46.411943][ T71] #1: ffffc90001477da8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 46.423150][ T71] #2: ffff88810f8eb190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1bc/0x45c0 [ 46.432004][ T71] #3: ffff888110401190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x76/0x530 [ 46.441376][ T71] #4: ffff888110405118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x76/0x530 [ 46.450573][ T71] #5: ffff88811dd6df90 (&chip->mutex){+.+.}-{3:3}, at: pre_reset+0x20f/0x280 [ 46.459429][ T71] [ 46.459429][ T71] stack backtrace: [ 46.465297][ T71] CPU: 0 PID: 71 Comm: kworker/0:2 Not tainted 6.1.0-rc3-syzkaller-00026-ga8bc8cc193c6 #0 [ 46.475166][ T71] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 46.485206][ T71] Workqueue: usb_hub_wq hub_event [ 46.490223][ T71] Call Trace: [ 46.493487][ T71] [ 46.496403][ T71] dump_stack_lvl+0xcd/0x134 [ 46.500995][ T71] __lock_acquire.cold+0x116/0x3a7 [ 46.506104][ T71] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 46.512089][ T71] ? lock_downgrade+0x6e0/0x6e0 [ 46.516928][ T71] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 46.522910][ T71] lock_acquire+0x1df/0x630 [ 46.527402][ T71] ? zd_chip_disable_rxtx+0x1c/0x40 [ 46.532586][ T71] ? lock_release+0x810/0x810 [ 46.537253][ T71] __mutex_lock+0x12f/0x1350 [ 46.541833][ T71] ? zd_chip_disable_rxtx+0x1c/0x40 [ 46.547016][ T71] ? rcu_read_lock_sched_held+0x3a/0x70 [ 46.552550][ T71] ? zd_chip_disable_rxtx+0x1c/0x40 [ 46.557731][ T71] ? mutex_lock_io_nested+0x1190/0x1190 [ 46.563285][ T71] ? pre_reset+0x20f/0x280 [ 46.567688][ T71] ? mutex_lock_io_nested+0x1190/0x1190 [ 46.573224][ T71] ? mark_held_locks+0x9f/0xe0 [ 46.577982][ T71] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 46.583772][ T71] zd_chip_disable_rxtx+0x1c/0x40 [ 46.588783][ T71] zd_op_stop+0x60/0x1a0 [ 46.593020][ T71] pre_reset+0x195/0x280 [ 46.597269][ T71] usb_reset_device+0x417/0xac0 [ 46.602103][ T71] ? zd_usb_disable_tx+0x170/0x170 [ 46.607211][ T71] probe+0x10f/0x590 [ 46.611093][ T71] usb_probe_interface+0x30b/0x7f0 [ 46.616192][ T71] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 46.621551][ T71] really_probe+0x249/0xb90 [ 46.626039][ T71] __driver_probe_device+0x1df/0x4d0 [ 46.631310][ T71] ? usb_match_id.part.0+0x15d/0x1b0 [ 46.636584][ T71] driver_probe_device+0x4c/0x1a0 [ 46.641592][ T71] __device_attach_driver+0x1d0/0x2e0 [ 46.646946][ T71] ? driver_allows_async_probing+0x170/0x170 [ 46.652928][ T71] bus_for_each_drv+0x15f/0x1e0 [ 46.657772][ T71] ? bus_for_each_dev+0x1d0/0x1d0 [ 46.662783][ T71] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 46.668572][ T71] ? lockdep_hardirqs_on+0x79/0x100 [ 46.673756][ T71] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 46.679548][ T71] __device_attach+0x1e4/0x530 [ 46.684295][ T71] ? device_driver_attach+0x210/0x210 [ 46.689651][ T71] ? kobject_uevent_env+0x2a7/0x1640 [ 46.694922][ T71] bus_probe_device+0x1e4/0x290 [ 46.699769][ T71] device_add+0xbd5/0x1e90 [ 46.704177][ T71] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 46.710406][ T71] ? usb_create_ep_devs+0x1f3/0x2a0 [ 46.715607][ T71] ? create_intf_ep_devs.isra.0+0x18d/0x1f0 [ 46.721487][ T71] usb_set_configuration+0x1019/0x1900 [ 46.726935][ T71] usb_generic_driver_probe+0xba/0x100 [ 46.732383][ T71] usb_probe_device+0xd4/0x2c0 [ 46.737485][ T71] ? usb_driver_release_interface+0x180/0x180 [ 46.743538][ T71] really_probe+0x249/0xb90 [ 46.748028][ T71] __driver_probe_device+0x1df/0x4d0 [ 46.753295][ T71] driver_probe_device+0x4c/0x1a0 [ 46.758306][ T71] __device_attach_driver+0x1d0/0x2e0 [ 46.763662][ T71] ? driver_allows_async_probing+0x170/0x170 [ 46.769626][ T71] bus_for_each_drv+0x15f/0x1e0 [ 46.774466][ T71] ? bus_for_each_dev+0x1d0/0x1d0 [ 46.779479][ T71] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 46.785272][ T71] ? lockdep_hardirqs_on+0x79/0x100 [ 46.790458][ T71] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 46.796250][ T71] __device_attach+0x1e4/0x530 [ 46.800999][ T71] ? device_driver_attach+0x210/0x210 [ 46.806354][ T71] ? kobject_uevent_env+0x2a7/0x1640 [ 46.811623][ T71] bus_probe_device+0x1e4/0x290 [ 46.816463][ T71] device_add+0xbd5/0x1e90 [ 46.820868][ T71] ? usb_match_device+0xd4/0x550 [ 46.825793][ T71] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 46.832026][ T71] ? usb_detect_static_quirks+0x305/0x3b0 [ 46.837729][ T71] ? __phys_addr+0xc4/0x140 [ 46.842222][ T71] usb_new_device.cold+0x685/0x10ad [ 46.847419][ T71] ? hub_disconnect+0x510/0x510 [ 46.852260][ T71] ? rwlock_bug.part.0+0x90/0x90 [ 46.857196][ T71] ? _raw_spin_unlock_irq+0x1f/0x40 [ 46.862391][ T71] hub_event+0x26c7/0x45c0 [ 46.866801][ T71] ? hub_port_debounce+0x3b0/0x3b0 [ 46.871903][ T71] ? lock_release+0x810/0x810 [ 46.876578][ T71] ? lock_downgrade+0x6e0/0x6e0 [ 46.881425][ T71] ? do_raw_spin_lock+0x120/0x2a0 [ 46.886448][ T71] process_one_work+0x9bf/0x1710 [ 46.891382][ T71] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 46.896744][ T71] ? rwlock_bug.part.0+0x90/0x90 [ 46.901683][ T71] ? _raw_spin_lock_irq+0x41/0x50 [ 46.906698][ T71] worker_thread+0x665/0x1080 [ 46.911366][ T71] ? __kthread_parkme+0x15f/0x220 [ 46.916376][ T71] ? process_one_work+0x1710/0x1710 [ 46.921564][ T71] kthread+0x2ea/0x3a0 executing program [ 46.925619][ T71] ? kthread_complete_and_exit+0x40/0x40 [ 46.931240][ T71] ret_from_fork+0x1f/0x30 [ 46.935648][ T71] [ 46.943054][ T71] zd1211rw 1-1:0.22: error ioread32(CR_REG1): -11 [ 47.320221][ T71] usb 1-1: reset full-speed USB device number 2 using dummy_hcd [ 47.720289][ T71] usb 1-1: unable to get BOS descriptor or descriptor too short [ 48.460421][ T71] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' [ 48.472268][ T71] zd1211rw 1-1:0.243: phy2 executing program [ 48.661737][ T71] usb 1-1: USB disconnect, device number 2 [ 49.170336][ T71] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 49.570267][ T71] usb 1-1: unable to get BOS descriptor or descriptor too short [ 49.610330][ T71] usb 1-1: not running at top speed; connect to a high speed hub [ 49.690342][ T71] usb 1-1: config 0 has an invalid interface number: 144 but max is 1 [ 49.698511][ T71] usb 1-1: config 0 has an invalid interface number: 22 but max is 1 [ 49.706581][ T71] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 49.716555][ T71] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 49.725246][ T71] usb 1-1: config 0 has an invalid interface number: 243 but max is 1 [ 49.733418][ T71] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 49.742387][ T71] usb 1-1: config 0 has no interface number 0 [ 49.748457][ T71] usb 1-1: config 0 has no interface number 1 [ 49.754547][ T71] usb 1-1: config 0 has no interface number 2 [ 49.760654][ T71] usb 1-1: config 0 interface 144 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 49.771613][ T71] usb 1-1: config 0 interface 144 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 49.782574][ T71] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 49.793441][ T71] usb 1-1: config 0 interface 22 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 49.804039][ T71] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 49.814639][ T71] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 49.825509][ T71] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 49.836101][ T71] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 49.846695][ T71] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 49.857298][ T71] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 49.867899][ T71] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0xA has invalid maxpacket 503, setting to 64 [ 49.878678][ T71] usb 1-1: config 0 interface 22 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 49.889286][ T71] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 49.899901][ T71] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 49.910774][ T71] usb 1-1: config 0 interface 22 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 49.921370][ T71] usb 1-1: config 0 interface 22 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 16 [ 49.934594][ T71] usb 1-1: too many endpoints for config 0 interface 243 altsetting 168: 112, using maximum allowed: 30 [ 49.945721][ T71] usb 1-1: config 0 interface 243 altsetting 168 has a duplicate endpoint with address 0x6, skipping [ 49.956594][ T71] usb 1-1: config 0 interface 243 altsetting 168 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 49.967626][ T71] usb 1-1: config 0 interface 243 altsetting 168 has an invalid endpoint with address 0x0, skipping [ 49.978408][ T71] usb 1-1: config 0 interface 243 altsetting 168 has 3 endpoint descriptors, different from the interface descriptor's value: 112 [ 49.991794][ T71] usb 1-1: config 0 interface 144 has no altsetting 0 [ 49.998553][ T71] usb 1-1: config 0 interface 243 has no altsetting 0 [ 50.240326][ T71] usb 1-1: string descriptor 0 read error: -22 [ 50.246539][ T71] usb 1-1: New USB device found, idVendor=0471, idProduct=1237, bcdDevice=d0.1f [ 50.255579][ T71] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.264313][ T71] usb 1-1: config 0 descriptor?? [ 50.450259][ T71] usb 1-1: reset full-speed USB device number 3 using dummy_hcd executing program [ 50.960220][ T71] usb 1-1: device descriptor read/64, error -71 [ 51.480283][ T71] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.220403][ T71] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 52.232560][ T71] zd1211rw 1-1:0.144: phy3 [ 52.237774][ T71] zd1211rw 1-1:0.144: error ioread32(CR_REG1): -11 executing program [ 52.390231][ T71] usb 1-1: reset full-speed USB device number 3 using dummy_hcd [ 52.850253][ T71] usb 1-1: device descriptor read/64, error -71 [ 53.370299][ T71] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.110405][ T71] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 54.122748][ T71] zd1211rw 1-1:0.22: phy4 [ 54.128370][ T71] zd1211rw 1-1:0.144: error ioread32(CR_REG1): -11 [ 54.135080][ T71] zd1211rw 1-1:0.22: error ioread32(CR_REG1): -11 executing program [ 54.290250][ T71] usb 1-1: reset full-speed USB device number 3 using dummy_hcd [ 54.750219][ T71] usb 1-1: device descriptor read/64, error -71 [ 55.270298][ T71] usb 1-1: unable to get BOS descriptor or descriptor too short [ 56.010429][ T71] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 56.022427][ T71] zd1211rw 1-1:0.243: phy5 executing program [ 56.213092][ T71] usb 1-1: USB disconnect, device number 3