Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts. 2026/04/07 15:14:23 ignoring optional flag "type"="gce" 2026/04/07 15:14:23 parsed 1 programs 2026/04/07 15:14:23 executed programs: 0 [ 77.169032][ T29] audit: type=1400 audit(1775574873.774:90): avc: denied { write } for pid=3904 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.193739][ T29] audit: type=1400 audit(1775574873.774:91): avc: denied { ioctl } for pid=3904 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.430180][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 77.581814][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 77.590709][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 77.599602][ T23] usb 1-1: config 0 has an invalid interface number: 144 but max is 1 [ 77.607967][ T23] usb 1-1: config 0 has an invalid interface number: 22 but max is 1 [ 77.616310][ T23] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 77.626551][ T23] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 77.635368][ T23] usb 1-1: config 0 has an invalid interface number: 243 but max is 1 [ 77.643588][ T23] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 77.652928][ T23] usb 1-1: config 0 has no interface number 0 [ 77.659092][ T23] usb 1-1: config 0 has no interface number 1 [ 77.665211][ T23] usb 1-1: config 0 has no interface number 2 [ 77.671365][ T23] usb 1-1: config 0 interface 144 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 77.682343][ T23] usb 1-1: config 0 interface 144 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 77.693503][ T23] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 77.704517][ T23] usb 1-1: config 0 interface 22 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.715630][ T23] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 77.726562][ T23] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 77.737717][ T23] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 77.748444][ T23] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 77.759248][ T23] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 77.769981][ T23] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 77.780624][ T23] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0xA has invalid maxpacket 503, setting to 64 [ 77.791624][ T23] usb 1-1: config 0 interface 22 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.802649][ T23] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 77.813465][ T23] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 77.824477][ T23] usb 1-1: config 0 interface 22 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.835327][ T23] usb 1-1: config 0 interface 22 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 16 [ 77.848883][ T23] usb 1-1: too many endpoints for config 0 interface 243 altsetting 168: 112, using maximum allowed: 30 [ 77.860181][ T23] usb 1-1: config 0 interface 243 altsetting 168 has a duplicate endpoint with address 0x6, skipping [ 77.871358][ T23] usb 1-1: config 0 interface 243 altsetting 168 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 77.882637][ T23] usb 1-1: config 0 interface 243 altsetting 168 has an invalid descriptor for endpoint zero, skipping [ 77.893926][ T23] usb 1-1: config 0 interface 243 altsetting 168 has 3 endpoint descriptors, different from the interface descriptor's value: 112 [ 77.907634][ T23] usb 1-1: config 0 interface 144 has no altsetting 0 [ 77.914485][ T23] usb 1-1: config 0 interface 243 has no altsetting 0 [ 77.923885][ T23] usb 1-1: string descriptor 0 read error: -22 [ 77.930204][ T23] usb 1-1: New USB device found, idVendor=0471, idProduct=1237, bcdDevice=d0.1f [ 77.939320][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.951082][ T23] usb 1-1: config 0 descriptor?? [ 78.090218][ T23] usb 1-1: reset full-speed USB device number 2 using dummy_hcd 2026/04/07 15:14:35 executed programs: 1 [ 78.989895][ T23] usb 1-1: device descriptor read/64, error -71 [ 79.252327][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.887492][ T23] zd1211rw 1-1:0.144: phy0 [ 79.895336][ T23] zd1211rw 1-1:0.144: error ioread32(CR_REG1): -11 [ 79.917468][ T29] audit: type=1400 audit(1775574876.524:92): avc: denied { read } for pid=2898 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 80.012694][ T29] audit: type=1400 audit(1775574876.624:93): avc: denied { read open } for pid=3913 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=474 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.040418][ T23] usb 1-1: reset full-speed USB device number 2 using dummy_hcd [ 80.889958][ T23] usb 1-1: device descriptor read/64, error -71 [ 81.152004][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.781067][ T23] zd1211rw 1-1:0.22: phy1 [ 81.797786][ T23] zd1211rw 1-1:0.144: error ioread32(CR_REG1): -11 [ 81.804861][ T23] [ 81.807293][ T23] ============================================ [ 81.813437][ T23] WARNING: possible recursive locking detected [ 81.819836][ T23] syzkaller #0 Not tainted [ 81.824394][ T23] -------------------------------------------- [ 81.830717][ T23] kworker/1:0/23 is trying to acquire lock: [ 81.836900][ T23] ffff88811b3b5d10 (&chip->mutex){+.+.}-{4:4}, at: zd_chip_disable_rxtx+0x1f/0x50 [ 81.846372][ T23] [ 81.846372][ T23] but task is already holding lock: [ 81.853788][ T23] ffff888122bddd10 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 81.862644][ T23] [ 81.862644][ T23] other info that might help us debug this: [ 81.870718][ T23] Possible unsafe locking scenario: [ 81.870718][ T23] [ 81.878449][ T23] CPU0 [ 81.882011][ T23] ---- [ 81.885746][ T23] lock(&chip->mutex); [ 81.889944][ T23] lock(&chip->mutex); [ 81.894382][ T23] [ 81.894382][ T23] *** DEADLOCK *** [ 81.894382][ T23] [ 81.902550][ T23] May be due to missing lock nesting notation [ 81.902550][ T23] [ 81.911151][ T23] 6 locks held by kworker/1:0/23: [ 81.916290][ T23] #0: ffff888102ab5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 81.927150][ T23] #1: ffffc9000018fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 81.938604][ T23] #2: ffff88810ab981e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 81.947697][ T23] #3: ffff88811a3f61e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 81.957337][ T23] #4: ffff888118f4e1a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 81.966928][ T23] #5: ffff888122bddd10 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 81.976887][ T23] [ 81.976887][ T23] stack backtrace: [ 81.983419][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 81.983460][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 81.983481][ T23] Workqueue: usb_hub_wq hub_event [ 81.983517][ T23] Call Trace: [ 81.983525][ T23] [ 81.983534][ T23] dump_stack_lvl+0x100/0x190 [ 81.983571][ T23] print_deadlock_bug.cold+0xbd/0xca [ 81.983599][ T23] __lock_acquire+0x12bb/0x2630 [ 81.983638][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 81.983680][ T23] lock_acquire+0x1cf/0x380 [ 81.983715][ T23] ? zd_chip_disable_rxtx+0x1f/0x50 [ 81.983750][ T23] ? __pfx___might_resched+0x10/0x10 [ 81.983775][ T23] __mutex_lock+0x1a2/0x1b90 [ 81.983799][ T23] ? zd_chip_disable_rxtx+0x1f/0x50 [ 81.983832][ T23] ? trace_contention_end+0x140/0x180 [ 81.983861][ T23] ? zd_chip_disable_rxtx+0x1f/0x50 [ 81.983893][ T23] ? __mutex_lock+0x26a/0x1b90 [ 81.983918][ T23] ? __pfx___flush_work+0x10/0x10 [ 81.983948][ T23] ? pre_reset+0x20b/0x280 [ 81.983974][ T23] ? __pfx___mutex_lock+0x10/0x10 [ 81.983999][ T23] ? rcu_is_watching+0x12/0xc0 [ 81.984028][ T23] ? do_raw_spin_lock+0x128/0x260 [ 81.984061][ T23] ? zd_chip_disable_rxtx+0x1f/0x50 [ 81.984097][ T23] zd_chip_disable_rxtx+0x1f/0x50 [ 81.984126][ T23] zd_op_stop+0x6b/0x1a0 [ 81.984156][ T23] pre_reset+0x191/0x280 [ 81.984180][ T23] usb_reset_device+0x3f1/0xaa0 [ 81.984216][ T23] ? __pfx_pre_reset+0x10/0x10 [ 81.984246][ T23] probe+0x118/0x5d0 [ 81.984285][ T23] usb_probe_interface+0x303/0x8f0 [ 81.984313][ T23] ? __pfx_usb_probe_interface+0x10/0x10 [ 81.984340][ T23] really_probe+0x241/0xa60 [ 81.984376][ T23] __driver_probe_device+0x1de/0x400 [ 81.984412][ T23] driver_probe_device+0x4c/0x1b0 [ 81.984448][ T23] __device_attach_driver+0x1df/0x340 [ 81.984491][ T23] ? __pfx___device_attach_driver+0x10/0x10 [ 81.984527][ T23] bus_for_each_drv+0x159/0x1e0 [ 81.984555][ T23] ? __pfx_bus_for_each_drv+0x10/0x10 [ 81.984583][ T23] ? lockdep_hardirqs_on+0x78/0x100 [ 81.984609][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 81.984648][ T23] __device_attach+0x1e4/0x4d0 [ 81.984683][ T23] ? __pfx___device_attach+0x10/0x10 [ 81.984719][ T23] ? do_raw_spin_unlock+0x145/0x1e0 [ 81.984749][ T23] device_initial_probe+0xaf/0xd0 [ 81.984786][ T23] bus_probe_device+0x64/0x160 [ 81.984819][ T23] device_add+0x11d9/0x1950 [ 81.984842][ T23] ? __pfx_device_add+0x10/0x10 [ 81.984862][ T23] ? usb_create_ep_devs+0x1f7/0x2b0 [ 81.984890][ T23] ? create_intf_ep_devs.isra.0+0x19f/0x200 [ 81.984930][ T23] usb_set_configuration+0xd97/0x1c60 [ 81.984962][ T23] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 81.984995][ T23] usb_generic_driver_probe+0xa1/0xe0 [ 81.985031][ T23] usb_probe_device+0xef/0x400 [ 81.985057][ T23] ? __pfx_usb_probe_device+0x10/0x10 [ 81.985084][ T23] really_probe+0x241/0xa60 [ 81.985118][ T23] __driver_probe_device+0x1de/0x400 [ 81.985153][ T23] ? usb_driver_applicable+0x1c7/0x220 [ 81.985183][ T23] driver_probe_device+0x4c/0x1b0 [ 81.985219][ T23] __device_attach_driver+0x1df/0x340 [ 81.985253][ T23] ? __pfx___device_attach_driver+0x10/0x10 [ 81.985289][ T23] bus_for_each_drv+0x159/0x1e0 [ 81.985317][ T23] ? __pfx_bus_for_each_drv+0x10/0x10 [ 81.985345][ T23] ? lockdep_hardirqs_on+0x78/0x100 [ 81.985367][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 81.985406][ T23] __device_attach+0x1e4/0x4d0 [ 81.985448][ T23] ? __pfx___device_attach+0x10/0x10 [ 81.985485][ T23] ? do_raw_spin_unlock+0x145/0x1e0 [ 81.985513][ T23] device_initial_probe+0xaf/0xd0 [ 81.985550][ T23] bus_probe_device+0x64/0x160 [ 81.985580][ T23] device_add+0x11d9/0x1950 [ 81.985604][ T23] ? __pfx_device_add+0x10/0x10 [ 81.985627][ T23] ? usb_detect_static_quirks+0x335/0x3e0 [ 81.985661][ T23] ? kfree+0x1dc/0x640 [ 81.985687][ T23] usb_new_device.cold+0x685/0x115c [ 81.985716][ T23] ? do_raw_spin_lock+0x128/0x260 [ 81.985742][ T23] ? __pfx_usb_new_device+0x10/0x10 [ 81.985767][ T23] ? mark_held_locks+0x40/0x70 [ 81.985806][ T23] hub_event+0x314d/0x4af0 [ 81.985840][ T23] ? __pfx_hub_event+0x10/0x10 [ 81.985862][ T23] ? debug_object_deactivate+0x2e4/0x3b0 [ 81.985895][ T23] ? rcu_is_watching+0x12/0xc0 [ 81.985924][ T23] process_one_work+0xa23/0x19a0 [ 81.985956][ T23] ? __pfx_process_one_work+0x10/0x10 [ 81.985988][ T23] ? __pfx_hub_event+0x10/0x10 [ 81.986012][ T23] worker_thread+0x5ef/0xe50 [ 81.986044][ T23] ? kthread+0x13a/0x450 [ 81.986066][ T23] ? __pfx_worker_thread+0x10/0x10 [ 81.986092][ T23] kthread+0x370/0x450 [ 81.986115][ T23] ? __pfx_kthread+0x10/0x10 [ 81.986138][ T23] ret_from_fork+0x6c3/0xcb0 [ 81.986170][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 81.986204][ T23] ? __switch_to+0x7aa/0x1120 [ 81.986227][ T23] ? __pfx_kthread+0x10/0x10 [ 81.986251][ T23] ret_from_fork_asm+0x1a/0x30 [ 81.986291][ T23] [ 82.486965][ T23] zd1211rw 1-1:0.22: error ioread32(CR_REG1): -11 [ 83.109884][ T23] usb 1-1: reset full-speed USB device number 2 using dummy_hcd [ 83.261536][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.873042][ T23] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' [ 83.893289][ T23] zd1211rw 1-1:0.243: phy2 [ 84.077627][ T9] usb 1-1: USB disconnect, device number 2 2026/04/07 15:14:41 executed programs: 4 [ 84.839868][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 84.991530][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.000294][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 85.008890][ T23] usb 1-1: config 0 has an invalid interface number: 144 but max is 1 [ 85.017409][ T23] usb 1-1: config 0 has an invalid interface number: 22 but max is 1 [ 85.025806][ T23] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 85.036172][ T23] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 85.044972][ T23] usb 1-1: config 0 has an invalid interface number: 243 but max is 1 [ 85.054207][ T23] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 85.063540][ T23] usb 1-1: config 0 has no interface number 0 [ 85.069834][ T23] usb 1-1: config 0 has no interface number 1 [ 85.076384][ T23] usb 1-1: config 0 has no interface number 2 [ 85.082735][ T23] usb 1-1: config 0 interface 144 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 85.093807][ T23] usb 1-1: config 0 interface 144 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 85.105060][ T23] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 85.116382][ T23] usb 1-1: config 0 interface 22 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.127321][ T23] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 85.138933][ T23] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 85.150725][ T23] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 85.162375][ T23] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 85.173794][ T23] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 85.184869][ T23] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 85.196466][ T23] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0xA has invalid maxpacket 503, setting to 64 [ 85.209007][ T23] usb 1-1: config 0 interface 22 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.221259][ T23] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 85.232724][ T23] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 85.244675][ T23] usb 1-1: config 0 interface 22 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.256779][ T23] usb 1-1: config 0 interface 22 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 16 [ 85.270505][ T23] usb 1-1: too many endpoints for config 0 interface 243 altsetting 168: 112, using maximum allowed: 30 [ 85.282517][ T23] usb 1-1: config 0 interface 243 altsetting 168 has a duplicate endpoint with address 0x6, skipping [ 85.294905][ T23] usb 1-1: config 0 interface 243 altsetting 168 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 85.306895][ T23] usb 1-1: config 0 interface 243 altsetting 168 has an invalid descriptor for endpoint zero, skipping [ 85.318573][ T23] usb 1-1: config 0 interface 243 altsetting 168 has 3 endpoint descriptors, different from the interface descriptor's value: 112 [ 85.333230][ T23] usb 1-1: config 0 interface 144 has no altsetting 0 [ 85.340119][ T23] usb 1-1: config 0 interface 243 has no altsetting 0 [ 85.350378][ T23] usb 1-1: string descriptor 0 read error: -22 [ 85.357126][ T23] usb 1-1: New USB device found, idVendor=0471, idProduct=1237, bcdDevice=d0.1f [ 85.366953][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.377031][ T23] usb 1-1: config 0 descriptor?? [ 85.509898][ T23] usb 1-1: reset full-speed USB device number 3 using dummy_hcd [ 86.409860][ T23] usb 1-1: device descriptor read/64, error -71 [ 86.671611][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.283392][ T23] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 87.299503][ T23] zd1211rw 1-1:0.144: phy3 [ 87.305532][ T23] zd1211rw 1-1:0.144: error ioread32(CR_REG1): -11 [ 87.439871][ T23] usb 1-1: reset full-speed USB device number 3 using dummy_hcd [ 88.319856][ T23] usb 1-1: device descriptor read/64, error -71 [ 88.581749][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 89.193173][ T23] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 89.209399][ T23] zd1211rw 1-1:0.22: phy4 [ 89.219578][ T23] zd1211rw 1-1:0.144: error ioread32(CR_REG1): -11 [ 89.230551][ T23] zd1211rw 1-1:0.22: error ioread32(CR_REG1): -11 [ 89.364153][ T23] usb 1-1: reset full-speed USB device number 3 using dummy_hcd 2026/04/07 15:14:46 executed programs: 7 [ 90.230023][ T23] usb 1-1: device descriptor read/64, error -71 [ 90.492191][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.105245][ T23] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 91.123150][ T23] zd1211rw 1-1:0.243: phy5 [ 91.304757][ T23] usb 1-1: USB disconnect, device number 3