Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. 2025/09/08 19:46:48 ignoring optional flag "sandbox_arg"="0" 2025/09/08 19:46:48 ignoring optional flag "type"="gce" 2025/09/08 19:46:48 parsed 1 programs 2025/09/08 19:46:48 executed programs: 0 [ 68.719186][ T29] audit: type=1400 audit(1757360808.577:83): avc: denied { mounton } for pid=3434 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 68.721304][ T3434] cgroup: Unknown subsys name 'net' [ 68.752178][ T3434] cgroup: Unknown subsys name 'cpuset' [ 68.759230][ T3434] cgroup: Unknown subsys name 'rlimit' [ 71.449987][ T29] audit: type=1400 audit(1757360811.317:84): avc: denied { create } for pid=3440 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.471062][ T29] audit: type=1400 audit(1757360811.317:85): avc: denied { write } for pid=3440 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.509617][ T29] audit: type=1400 audit(1757360811.357:86): avc: denied { read } for pid=3440 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.656644][ T29] audit: type=1400 audit(1757360819.517:87): avc: denied { write } for pid=3885 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.686583][ T29] audit: type=1400 audit(1757360819.547:88): avc: denied { ioctl } for pid=3885 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.919766][ T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.071575][ T64] usb 1-1: config 204 has an invalid interface number: 37 but max is 2 [ 80.079983][ T64] usb 1-1: config 204 has an invalid interface association descriptor of length 2, skipping [ 80.090490][ T64] usb 1-1: config 204 has an invalid interface number: 191 but max is 2 [ 80.098937][ T64] usb 1-1: config 204 has an invalid interface number: 98 but max is 2 [ 80.107247][ T64] usb 1-1: config 204 has no interface number 0 [ 80.113523][ T64] usb 1-1: config 204 has no interface number 1 [ 80.119826][ T64] usb 1-1: config 204 has no interface number 2 [ 80.126465][ T64] usb 1-1: config 204 interface 37 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 80.138037][ T64] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 80.150219][ T64] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x8B has an invalid bInterval 178, changing to 11 [ 80.161932][ T64] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 80.173795][ T64] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0x97, changing to 0x87 [ 80.185972][ T64] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 80.197309][ T64] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 80.208804][ T64] usb 1-1: config 204 interface 37 has no altsetting 0 [ 80.215719][ T64] usb 1-1: config 204 interface 191 has no altsetting 0 [ 80.222808][ T64] usb 1-1: config 204 interface 98 has no altsetting 0 [ 80.232233][ T64] usb 1-1: New USB device found, idVendor=054c, idProduct=0257, bcdDevice=25.0a [ 80.241565][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.249765][ T64] usb 1-1: Product: syz [ 80.254108][ T64] usb 1-1: Manufacturer: syz [ 80.258753][ T64] usb 1-1: SerialNumber: syz 2025/09/08 19:47:00 executed programs: 1 [ 81.311037][ T64] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 82.297528][ T64] zd1211rw 1-1:204.37: phy0 [ 82.479563][ T64] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 83.320968][ T64] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 84.299835][ T64] zd1211rw 1-1:204.191: phy1 [ 84.488063][ T64] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 84.494890][ T64] [ 84.497212][ T64] ============================================ [ 84.503355][ T64] WARNING: possible recursive locking detected [ 84.509512][ T64] syzkaller #0 Not tainted [ 84.514122][ T64] -------------------------------------------- [ 84.520257][ T64] kworker/1:1/64 is trying to acquire lock: [ 84.526319][ T64] ffff88811bcf5c90 (&chip->mutex){+.+.}-{4:4}, at: zd_chip_disable_rxtx+0x1f/0x50 [ 84.535572][ T64] [ 84.535572][ T64] but task is already holding lock: [ 84.543188][ T64] ffff888122b2dc90 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 84.551803][ T64] [ 84.551803][ T64] other info that might help us debug this: [ 84.559853][ T64] Possible unsafe locking scenario: [ 84.559853][ T64] [ 84.567556][ T64] CPU0 [ 84.570909][ T64] ---- [ 84.574175][ T64] lock(&chip->mutex); [ 84.578320][ T64] lock(&chip->mutex); [ 84.582528][ T64] [ 84.582528][ T64] *** DEADLOCK *** [ 84.582528][ T64] [ 84.591032][ T64] May be due to missing lock nesting notation [ 84.591032][ T64] [ 84.599425][ T64] 6 locks held by kworker/1:1/64: [ 84.604442][ T64] #0: ffff8881072d2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 84.615661][ T64] #1: ffffc90000527d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 84.627106][ T64] #2: ffff88810b35a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1be/0x5060 [ 84.636269][ T64] #3: ffff88811bb7e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 84.646105][ T64] #4: ffff888116b58160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 84.655418][ T64] #5: ffff888122b2dc90 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 84.664825][ T64] [ 84.664825][ T64] stack backtrace: [ 84.670818][ T64] CPU: 1 UID: 0 PID: 64 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.670838][ T64] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.670848][ T64] Workqueue: usb_hub_wq hub_event [ 84.670875][ T64] Call Trace: [ 84.670882][ T64] [ 84.670893][ T64] dump_stack_lvl+0x116/0x1f0 [ 84.670918][ T64] print_deadlock_bug+0x1e9/0x240 [ 84.670939][ T64] __lock_acquire+0x1133/0x1ce0 [ 84.670954][ T64] lock_acquire+0x179/0x350 [ 84.670966][ T64] ? zd_chip_disable_rxtx+0x1f/0x50 [ 84.670986][ T64] ? __pfx___might_resched+0x10/0x10 [ 84.671003][ T64] ? __pfx___mutex_trylock_common+0x10/0x10 [ 84.671016][ T64] ? zd_chip_disable_rxtx+0x1f/0x50 [ 84.671035][ T64] __mutex_lock+0x193/0x1060 [ 84.671051][ T64] ? zd_chip_disable_rxtx+0x1f/0x50 [ 84.671069][ T64] ? rcu_is_watching+0x12/0xc0 [ 84.671085][ T64] ? trace_contention_end+0xdd/0x130 [ 84.671097][ T64] ? __mutex_lock+0x1c5/0x1060 [ 84.671113][ T64] ? __pfx___mutex_lock+0x10/0x10 [ 84.671133][ T64] ? zd_chip_disable_rxtx+0x1f/0x50 [ 84.671154][ T64] zd_chip_disable_rxtx+0x1f/0x50 [ 84.671173][ T64] zd_op_stop+0x6b/0x1a0 [ 84.671185][ T64] pre_reset+0x191/0x280 [ 84.671201][ T64] usb_reset_device+0x419/0xa90 [ 84.671215][ T64] ? __pfx_pre_reset+0x10/0x10 [ 84.671233][ T64] probe+0x118/0x970 [ 84.671248][ T64] usb_probe_interface+0x300/0xa40 [ 84.671267][ T64] ? __pfx_usb_probe_interface+0x10/0x10 [ 84.671288][ T64] really_probe+0x241/0xa90 [ 84.671317][ T64] __driver_probe_device+0x1de/0x440 [ 84.671347][ T64] driver_probe_device+0x4c/0x1b0 [ 84.671371][ T64] __device_attach_driver+0x1df/0x310 [ 84.671388][ T64] ? __pfx___device_attach_driver+0x10/0x10 [ 84.671405][ T64] bus_for_each_drv+0x159/0x1e0 [ 84.671418][ T64] ? __pfx_bus_for_each_drv+0x10/0x10 [ 84.671432][ T64] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.671447][ T64] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.671462][ T64] __device_attach+0x1e4/0x4b0 [ 84.671479][ T64] ? __pfx___device_attach+0x10/0x10 [ 84.671495][ T64] ? do_raw_spin_unlock+0x172/0x230 [ 84.671512][ T64] bus_probe_device+0x17f/0x1c0 [ 84.671527][ T64] device_add+0x1148/0x1aa0 [ 84.671547][ T64] ? __pfx_device_add+0x10/0x10 [ 84.671566][ T64] ? usb_cache_string+0xf2/0x150 [ 84.671579][ T64] ? create_intf_ep_devs.isra.0+0x4a/0x200 [ 84.671596][ T64] usb_set_configuration+0x1187/0x1e20 [ 84.671617][ T64] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 84.671631][ T64] usb_generic_driver_probe+0xb1/0x110 [ 84.671645][ T64] usb_probe_device+0xef/0x3e0 [ 84.671661][ T64] ? __pfx_usb_probe_device+0x10/0x10 [ 84.671677][ T64] really_probe+0x241/0xa90 [ 84.671754][ T64] __driver_probe_device+0x1de/0x440 [ 84.671775][ T64] ? usb_driver_applicable+0x1c7/0x220 [ 84.671795][ T64] driver_probe_device+0x4c/0x1b0 [ 84.671812][ T64] __device_attach_driver+0x1df/0x310 [ 84.671829][ T64] ? __pfx___device_attach_driver+0x10/0x10 [ 84.671846][ T64] bus_for_each_drv+0x159/0x1e0 [ 84.671860][ T64] ? __pfx_bus_for_each_drv+0x10/0x10 [ 84.671874][ T64] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.671890][ T64] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.671905][ T64] __device_attach+0x1e4/0x4b0 [ 84.671921][ T64] ? __pfx___device_attach+0x10/0x10 [ 84.671938][ T64] ? do_raw_spin_unlock+0x172/0x230 [ 84.671956][ T64] bus_probe_device+0x17f/0x1c0 [ 84.671971][ T64] device_add+0x1148/0x1aa0 [ 84.671999][ T64] ? __pfx_device_add+0x10/0x10 [ 84.672018][ T64] ? add_device_randomness+0xb7/0xf0 [ 84.672034][ T64] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 84.672054][ T64] usb_new_device+0xd07/0x1a60 [ 84.672071][ T64] ? do_raw_spin_lock+0x12c/0x2b0 [ 84.672086][ T64] ? __pfx_usb_new_device+0x10/0x10 [ 84.672102][ T64] ? mark_held_locks+0x49/0x80 [ 84.672115][ T64] hub_event+0x2fce/0x5060 [ 84.672138][ T64] ? __pfx_hub_event+0x10/0x10 [ 84.672153][ T64] ? assoc_array_apply_edit+0x420/0x6c0 [ 84.672174][ T64] ? rcu_is_watching+0x12/0xc0 [ 84.672192][ T64] process_one_work+0x9cc/0x1b70 [ 84.672211][ T64] ? __pfx_hcd_resume_work+0x10/0x10 [ 84.672232][ T64] ? __pfx_process_one_work+0x10/0x10 [ 84.672251][ T64] ? assign_work+0x1a0/0x250 [ 84.672267][ T64] worker_thread+0x6c8/0xf10 [ 84.672286][ T64] ? __kthread_parkme+0x19e/0x250 [ 84.672300][ T64] ? __pfx_worker_thread+0x10/0x10 [ 84.672316][ T64] kthread+0x3c5/0x780 [ 84.672331][ T64] ? __pfx_kthread+0x10/0x10 [ 84.672348][ T64] ? rcu_is_watching+0x12/0xc0 [ 84.672365][ T64] ? __pfx_kthread+0x10/0x10 [ 84.672380][ T64] ret_from_fork+0x5b6/0x6c0 [ 84.672394][ T64] ? __pfx_kthread+0x10/0x10 [ 84.672409][ T64] ret_from_fork_asm+0x1a/0x30 [ 84.672443][ T64] [ 85.141425][ T64] zd1211rw 1-1:204.191: error ioread32(CR_REG1): -11 [ 85.969925][ T64] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 86.924018][ T64] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' [ 86.938967][ T64] zd1211rw 1-1:204.98: phy2 [ 86.996572][ T29] audit: type=1400 audit(1757360826.857:89): avc: denied { read } for pid=2887 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 87.127573][ T10] usb 1-1: USB disconnect, device number 2 2025/09/08 19:47:07 executed programs: 4 [ 87.638702][ T29] audit: type=1400 audit(1757360827.497:90): avc: denied { write } for pid=3429 comm="syz-execprog" path="pipe:[2308]" dev="pipefs" ino=2308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 87.909546][ T64] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.060809][ T64] usb 1-1: config 204 has an invalid interface number: 37 but max is 2 [ 88.069105][ T64] usb 1-1: config 204 has an invalid interface association descriptor of length 2, skipping [ 88.079381][ T64] usb 1-1: config 204 has an invalid interface number: 191 but max is 2 [ 88.088050][ T64] usb 1-1: config 204 has an invalid interface number: 98 but max is 2 [ 88.096702][ T64] usb 1-1: config 204 has no interface number 0 [ 88.102979][ T64] usb 1-1: config 204 has no interface number 1 [ 88.109295][ T64] usb 1-1: config 204 has no interface number 2 [ 88.115746][ T64] usb 1-1: config 204 interface 37 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 88.126985][ T64] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 88.139016][ T64] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x8B has an invalid bInterval 178, changing to 11 [ 88.150926][ T64] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 88.162084][ T64] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0x97, changing to 0x87 [ 88.173867][ T64] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 88.184702][ T64] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 88.195640][ T64] usb 1-1: config 204 interface 37 has no altsetting 0 [ 88.202642][ T64] usb 1-1: config 204 interface 191 has no altsetting 0 [ 88.209745][ T64] usb 1-1: config 204 interface 98 has no altsetting 0 [ 88.218446][ T64] usb 1-1: New USB device found, idVendor=054c, idProduct=0257, bcdDevice=25.0a [ 88.227620][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.235657][ T64] usb 1-1: Product: syz [ 88.239999][ T64] usb 1-1: Manufacturer: syz [ 88.244634][ T64] usb 1-1: SerialNumber: syz [ 89.280027][ T64] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 90.234620][ T64] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 90.249604][ T64] zd1211rw 1-1:204.37: phy3 [ 90.444383][ T64] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 91.280028][ T64] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 92.244151][ T64] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 92.259203][ T64] zd1211rw 1-1:204.191: phy4 [ 92.444772][ T64] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 92.452239][ T64] zd1211rw 1-1:204.191: error ioread32(CR_REG1): -11 2025/09/08 19:47:12 executed programs: 7 [ 93.299957][ T64] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 94.254227][ T64] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 94.268695][ T64] zd1211rw 1-1:204.98: phy5 [ 94.455594][ T10] usb 1-1: USB disconnect, device number 3