Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. 2025/06/21 12:34:14 ignoring optional flag "sandboxArg"="0" 2025/06/21 12:34:14 ignoring optional flag "type"="gce" 2025/06/21 12:34:14 parsed 1 programs 2025/06/21 12:34:14 executed programs: 0 [ 79.021372][ T29] audit: type=1400 audit(1750509254.351:83): avc: denied { mounton } for pid=3434 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 79.022977][ T3434] cgroup: Unknown subsys name 'net' [ 79.053877][ T3434] cgroup: Unknown subsys name 'cpuset' [ 79.061227][ T3434] cgroup: Unknown subsys name 'rlimit' [ 82.652562][ T29] audit: type=1400 audit(1750509257.991:84): avc: denied { create } for pid=3439 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.678315][ T29] audit: type=1400 audit(1750509257.991:85): avc: denied { write } for pid=3439 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.699447][ T29] audit: type=1400 audit(1750509258.031:86): avc: denied { read } for pid=3439 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.408781][ T29] audit: type=1400 audit(1750509268.741:87): avc: denied { write } for pid=3889 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.432182][ T29] audit: type=1400 audit(1750509268.741:88): avc: denied { ioctl } for pid=3889 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.651686][ T38] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.804565][ T38] usb 1-1: config 204 has an invalid interface number: 37 but max is 2 [ 93.812990][ T38] usb 1-1: config 204 has an invalid interface association descriptor of length 2, skipping [ 93.823173][ T38] usb 1-1: config 204 has an invalid interface number: 191 but max is 2 [ 93.831592][ T38] usb 1-1: config 204 has an invalid interface number: 98 but max is 2 [ 93.839856][ T38] usb 1-1: config 204 has no interface number 0 [ 93.846172][ T38] usb 1-1: config 204 has no interface number 1 [ 93.852487][ T38] usb 1-1: config 204 has no interface number 2 [ 93.858876][ T38] usb 1-1: config 204 interface 37 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 93.869901][ T38] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 93.881699][ T38] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x8B has an invalid bInterval 178, changing to 11 [ 93.893149][ T38] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 93.904269][ T38] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0x97, changing to 0x87 [ 93.916071][ T38] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 93.926912][ T38] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 93.937775][ T38] usb 1-1: config 204 interface 37 has no altsetting 0 [ 93.944705][ T38] usb 1-1: config 204 interface 191 has no altsetting 0 [ 93.951725][ T38] usb 1-1: config 204 interface 98 has no altsetting 0 [ 93.960790][ T38] usb 1-1: New USB device found, idVendor=054c, idProduct=0257, bcdDevice=25.0a [ 93.970086][ T38] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.978134][ T38] usb 1-1: Product: syz [ 93.982405][ T38] usb 1-1: Manufacturer: syz [ 93.987039][ T38] usb 1-1: SerialNumber: syz 2025/06/21 12:34:30 executed programs: 1 [ 95.033186][ T38] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 96.020433][ T38] zd1211rw 1-1:204.37: phy0 [ 96.200245][ T38] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 97.033164][ T38] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 98.016609][ T38] zd1211rw 1-1:204.191: phy1 [ 98.202690][ T38] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 98.209510][ T38] [ 98.211868][ T38] ============================================ [ 98.218025][ T38] WARNING: possible recursive locking detected [ 98.224189][ T38] 6.16.0-rc2-syzkaller-00033-g9962d0433a86 #0 Not tainted [ 98.231304][ T38] -------------------------------------------- [ 98.237481][ T38] kworker/1:1/38 is trying to acquire lock: [ 98.243384][ T38] ffff88811ca2dc70 (&chip->mutex){+.+.}-{4:4}, at: zd_chip_disable_rxtx+0x1f/0x50 [ 98.252670][ T38] [ 98.252670][ T38] but task is already holding lock: [ 98.260167][ T38] ffff88811cf0dc70 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 98.268637][ T38] [ 98.268637][ T38] other info that might help us debug this: [ 98.276703][ T38] Possible unsafe locking scenario: [ 98.276703][ T38] [ 98.284167][ T38] CPU0 [ 98.287471][ T38] ---- [ 98.290760][ T38] lock(&chip->mutex); [ 98.294945][ T38] lock(&chip->mutex); [ 98.299138][ T38] [ 98.299138][ T38] *** DEADLOCK *** [ 98.299138][ T38] [ 98.307289][ T38] May be due to missing lock nesting notation [ 98.307289][ T38] [ 98.315620][ T38] 6 locks held by kworker/1:1/38: [ 98.320653][ T38] #0: ffff8881066f3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 98.331488][ T38] #1: ffffc90000287d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 98.342791][ T38] #2: ffff8881073ad198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1be/0x5030 [ 98.351701][ T38] #3: ffff88811bd10198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 98.360964][ T38] #4: ffff88811c9a8160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 98.370224][ T38] #5: ffff88811cf0dc70 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 98.379142][ T38] [ 98.379142][ T38] stack backtrace: [ 98.385153][ T38] CPU: 1 UID: 0 PID: 38 Comm: kworker/1:1 Not tainted 6.16.0-rc2-syzkaller-00033-g9962d0433a86 #0 PREEMPT(voluntary) [ 98.385182][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.385198][ T38] Workqueue: usb_hub_wq hub_event [ 98.385223][ T38] Call Trace: [ 98.385231][ T38] [ 98.385240][ T38] dump_stack_lvl+0x116/0x1f0 [ 98.385281][ T38] print_deadlock_bug+0x1e9/0x240 [ 98.385317][ T38] __lock_acquire+0x1106/0x1c90 [ 98.385349][ T38] lock_acquire+0x179/0x350 [ 98.385370][ T38] ? zd_chip_disable_rxtx+0x1f/0x50 [ 98.385399][ T38] ? __pfx___might_resched+0x10/0x10 [ 98.385431][ T38] ? __pfx___mutex_trylock_common+0x10/0x10 [ 98.385456][ T38] __mutex_lock+0x199/0xb90 [ 98.385488][ T38] ? zd_chip_disable_rxtx+0x1f/0x50 [ 98.385514][ T38] ? rcu_is_watching+0x12/0xc0 [ 98.385545][ T38] ? trace_contention_end+0xdd/0x130 [ 98.385567][ T38] ? zd_chip_disable_rxtx+0x1f/0x50 [ 98.385596][ T38] ? __mutex_lock+0x1ca/0xb90 [ 98.385627][ T38] ? __pfx___mutex_lock+0x10/0x10 [ 98.385657][ T38] ? pre_reset+0x20b/0x280 [ 98.385686][ T38] ? zd_chip_disable_rxtx+0x1f/0x50 [ 98.385714][ T38] zd_chip_disable_rxtx+0x1f/0x50 [ 98.385741][ T38] zd_op_stop+0x6b/0x1a0 [ 98.385774][ T38] pre_reset+0x191/0x280 [ 98.385808][ T38] usb_reset_device+0x419/0xa90 [ 98.385858][ T38] ? __pfx_pre_reset+0x10/0x10 [ 98.385893][ T38] probe+0x118/0x970 [ 98.385924][ T38] usb_probe_interface+0x300/0x9c0 [ 98.385961][ T38] ? __pfx_usb_probe_interface+0x10/0x10 [ 98.385988][ T38] really_probe+0x241/0xa90 [ 98.386015][ T38] __driver_probe_device+0x1de/0x440 [ 98.386042][ T38] driver_probe_device+0x4c/0x1b0 [ 98.386069][ T38] __device_attach_driver+0x1df/0x310 [ 98.386096][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 98.386122][ T38] bus_for_each_drv+0x159/0x1e0 [ 98.386159][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 98.386195][ T38] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.386225][ T38] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 98.386255][ T38] __device_attach+0x1e4/0x4b0 [ 98.386281][ T38] ? __pfx___device_attach+0x10/0x10 [ 98.386308][ T38] ? do_raw_spin_unlock+0x172/0x230 [ 98.386343][ T38] bus_probe_device+0x17f/0x1c0 [ 98.386366][ T38] device_add+0x1148/0x1a70 [ 98.386398][ T38] ? __pfx_device_add+0x10/0x10 [ 98.386429][ T38] ? usb_cache_string+0xf2/0x150 [ 98.386462][ T38] ? create_intf_ep_devs.isra.0+0x4a/0x200 [ 98.386500][ T38] usb_set_configuration+0x1187/0x1e20 [ 98.386530][ T38] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 98.386563][ T38] usb_generic_driver_probe+0xb1/0x110 [ 98.386596][ T38] usb_probe_device+0xec/0x3e0 [ 98.386618][ T38] ? __pfx_usb_probe_device+0x10/0x10 [ 98.386641][ T38] really_probe+0x241/0xa90 [ 98.386667][ T38] __driver_probe_device+0x1de/0x440 [ 98.386692][ T38] ? usb_driver_applicable+0x1c7/0x220 [ 98.386719][ T38] driver_probe_device+0x4c/0x1b0 [ 98.386745][ T38] __device_attach_driver+0x1df/0x310 [ 98.386772][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 98.386799][ T38] bus_for_each_drv+0x159/0x1e0 [ 98.386834][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 98.386870][ T38] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.386900][ T38] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 98.386929][ T38] __device_attach+0x1e4/0x4b0 [ 98.386955][ T38] ? __pfx___device_attach+0x10/0x10 [ 98.386987][ T38] ? do_raw_spin_unlock+0x172/0x230 [ 98.387030][ T38] bus_probe_device+0x17f/0x1c0 [ 98.387062][ T38] device_add+0x1148/0x1a70 [ 98.387094][ T38] ? __pfx_device_add+0x10/0x10 [ 98.387124][ T38] ? add_device_randomness+0xb7/0xf0 [ 98.387147][ T38] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 98.387175][ T38] usb_new_device+0xd07/0x1a20 [ 98.387196][ T38] ? do_raw_spin_lock+0x12c/0x2b0 [ 98.387222][ T38] ? __pfx_usb_new_device+0x10/0x10 [ 98.387242][ T38] ? mark_held_locks+0x49/0x80 [ 98.387264][ T38] hub_event+0x2f85/0x5030 [ 98.387296][ T38] ? __pfx_hub_event+0x10/0x10 [ 98.387315][ T38] ? assoc_array_gc+0xe00/0x15b0 [ 98.387347][ T38] ? rcu_is_watching+0x12/0xc0 [ 98.387379][ T38] process_one_work+0x9cc/0x1b70 [ 98.387410][ T38] ? __pfx_hcd_resume_work+0x10/0x10 [ 98.387435][ T38] ? __pfx_process_one_work+0x10/0x10 [ 98.387466][ T38] ? assign_work+0x1a0/0x250 [ 98.387490][ T38] worker_thread+0x6c8/0xf10 [ 98.387521][ T38] ? __kthread_parkme+0x19e/0x250 [ 98.387557][ T38] ? __pfx_worker_thread+0x10/0x10 [ 98.387586][ T38] kthread+0x3c5/0x780 [ 98.387610][ T38] ? __pfx_kthread+0x10/0x10 [ 98.387635][ T38] ? rcu_is_watching+0x12/0xc0 [ 98.387664][ T38] ? __pfx_kthread+0x10/0x10 [ 98.387688][ T38] ret_from_fork+0x5b3/0x6c0 [ 98.387723][ T38] ? __pfx_kthread+0x10/0x10 [ 98.387747][ T38] ret_from_fork_asm+0x1a/0x30 [ 98.387782][ T38] [ 98.856493][ T38] zd1211rw 1-1:204.191: error ioread32(CR_REG1): -11 [ 99.691931][ T38] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 100.646344][ T38] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' [ 100.662847][ T38] zd1211rw 1-1:204.98: phy2 [ 100.793012][ T29] audit: type=1400 audit(1750509276.131:89): avc: denied { read } for pid=2882 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 100.851871][ T3413] usb 1-1: USB disconnect, device number 2 2025/06/21 12:34:36 executed programs: 4 [ 101.358396][ T29] audit: type=1400 audit(1750509276.691:90): avc: denied { write } for pid=3429 comm="syz-execprog" path="pipe:[2593]" dev="pipefs" ino=2593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 101.631513][ T38] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.802930][ T38] usb 1-1: config 204 has an invalid interface number: 37 but max is 2 [ 101.811275][ T38] usb 1-1: config 204 has an invalid interface association descriptor of length 2, skipping [ 101.821454][ T38] usb 1-1: config 204 has an invalid interface number: 191 but max is 2 [ 101.829823][ T38] usb 1-1: config 204 has an invalid interface number: 98 but max is 2 [ 101.838257][ T38] usb 1-1: config 204 has no interface number 0 [ 101.844579][ T38] usb 1-1: config 204 has no interface number 1 [ 101.850840][ T38] usb 1-1: config 204 has no interface number 2 [ 101.857218][ T38] usb 1-1: config 204 interface 37 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 101.868230][ T38] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 101.880059][ T38] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x8B has an invalid bInterval 178, changing to 11 [ 101.891519][ T38] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 101.902603][ T38] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0x97, changing to 0x87 [ 101.914391][ T38] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 101.925263][ T38] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 101.936196][ T38] usb 1-1: config 204 interface 37 has no altsetting 0 [ 101.943104][ T38] usb 1-1: config 204 interface 191 has no altsetting 0 [ 101.950199][ T38] usb 1-1: config 204 interface 98 has no altsetting 0 [ 101.958817][ T38] usb 1-1: New USB device found, idVendor=054c, idProduct=0257, bcdDevice=25.0a [ 101.967937][ T38] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.975993][ T38] usb 1-1: Product: syz [ 101.980188][ T38] usb 1-1: Manufacturer: syz [ 101.984861][ T38] usb 1-1: SerialNumber: syz [ 103.021989][ T38] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 103.976077][ T38] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 103.993057][ T38] zd1211rw 1-1:204.37: phy3 [ 104.177358][ T38] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 105.011921][ T38] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 105.966220][ T38] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 105.982749][ T38] zd1211rw 1-1:204.191: phy4 [ 106.167750][ T38] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 106.174581][ T38] zd1211rw 1-1:204.191: error ioread32(CR_REG1): -11 2025/06/21 12:34:42 executed programs: 7 [ 107.011958][ T38] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 107.966399][ T38] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 107.983065][ T38] zd1211rw 1-1:204.98: phy5 [ 108.167671][ T38] usb 1-1: USB disconnect, device number 3