Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. 2025/06/21 12:48:28 ignoring optional flag "sandboxArg"="0" 2025/06/21 12:48:28 ignoring optional flag "type"="gce" 2025/06/21 12:48:29 parsed 1 programs [ 82.442514][ T29] audit: type=1400 audit(1750510109.262:87): avc: denied { unlink } for pid=3440 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/06/21 12:48:29 executed programs: 0 [ 82.534637][ T3440] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.167385][ T29] audit: type=1400 audit(1750510112.982:88): avc: denied { create } for pid=3446 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.188893][ T29] audit: type=1400 audit(1750510112.982:89): avc: denied { write } for pid=3446 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.222092][ T29] audit: type=1400 audit(1750510113.042:90): avc: denied { read } for pid=3446 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.330999][ T29] audit: type=1400 audit(1750510124.142:91): avc: denied { write } for pid=3900 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.369274][ T29] audit: type=1400 audit(1750510124.182:92): avc: denied { ioctl } for pid=3900 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.600837][ T38] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.753418][ T38] usb 1-1: config 1 has an invalid interface number: 203 but max is 3 [ 97.761761][ T38] usb 1-1: config 1 has an invalid interface number: 73 but max is 3 [ 97.770034][ T38] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 97.778800][ T38] usb 1-1: config 1 has an invalid interface number: 242 but max is 3 [ 97.787056][ T38] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 97.795826][ T38] usb 1-1: config 1 has an invalid interface number: 14 but max is 3 [ 97.803978][ T38] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 97.812735][ T38] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.822873][ T38] usb 1-1: config 1 has no interface number 0 [ 97.828974][ T38] usb 1-1: config 1 has no interface number 1 [ 97.835112][ T38] usb 1-1: config 1 has no interface number 2 [ 97.841258][ T38] usb 1-1: config 1 has no interface number 3 [ 97.847431][ T38] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x6 has an invalid bInterval 32, changing to 9 [ 97.858722][ T38] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 97.869926][ T38] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 97.881092][ T38] usb 1-1: config 1 interface 73 altsetting 129 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 97.892160][ T38] usb 1-1: config 1 interface 242 altsetting 112 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 97.903367][ T38] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x4, skipping [ 97.914296][ T38] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0xD, skipping [ 97.925237][ T38] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x9, skipping [ 97.936660][ T38] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0xB, skipping [ 97.947634][ T38] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x9, skipping [ 97.958570][ T38] usb 1-1: config 1 interface 242 altsetting 112 has an invalid descriptor for endpoint zero, skipping [ 97.969674][ T38] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x4, skipping [ 97.980658][ T38] usb 1-1: config 1 interface 14 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 97.993692][ T38] usb 1-1: config 1 interface 203 has no altsetting 0 [ 98.000506][ T38] usb 1-1: config 1 interface 73 has no altsetting 0 [ 98.007306][ T38] usb 1-1: config 1 interface 242 has no altsetting 0 [ 98.014199][ T38] usb 1-1: config 1 interface 14 has no altsetting 0 [ 98.023632][ T38] usb 1-1: New USB device found, idVendor=0586, idProduct=3410, bcdDevice=44.1d [ 98.032813][ T38] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.040887][ T38] usb 1-1: Product: syz [ 98.045100][ T38] usb 1-1: Manufacturer: syz [ 98.049710][ T38] usb 1-1: SerialNumber: syz 2025/06/21 12:48:45 executed programs: 1 [ 98.773307][ T29] audit: type=1400 audit(1750510125.592:93): avc: denied { write } for pid=3435 comm="syz-execprog" path="pipe:[3178]" dev="pipefs" ino=3178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 99.090980][ T38] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 100.272197][ T38] zd1211rw 1-1:1.203: phy0 [ 100.453091][ T38] zd1211rw 1-1:1.203: error ioread32(CR_REG1): -11 [ 101.290963][ T38] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 102.468200][ T38] zd1211rw 1-1:1.73: phy1 [ 102.652876][ T38] zd1211rw 1-1:1.203: error ioread32(CR_REG1): -11 [ 102.659614][ T38] [ 102.661958][ T38] ============================================ [ 102.668141][ T38] WARNING: possible recursive locking detected [ 102.674442][ T38] 6.16.0-rc2-syzkaller-00033-g9962d0433a86 #0 Not tainted [ 102.681573][ T38] -------------------------------------------- [ 102.687737][ T38] kworker/1:1/38 is trying to acquire lock: [ 102.693645][ T38] ffff88811d5a5c70 (&chip->mutex){+.+.}-{4:4}, at: zd_chip_disable_rxtx+0x1f/0x50 [ 102.703050][ T38] [ 102.703050][ T38] but task is already holding lock: [ 102.710437][ T38] ffff8881165a5c70 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 102.718934][ T38] [ 102.718934][ T38] other info that might help us debug this: [ 102.727027][ T38] Possible unsafe locking scenario: [ 102.727027][ T38] [ 102.734491][ T38] CPU0 [ 102.737789][ T38] ---- [ 102.741074][ T38] lock(&chip->mutex); [ 102.745248][ T38] lock(&chip->mutex); [ 102.749539][ T38] [ 102.749539][ T38] *** DEADLOCK *** [ 102.749539][ T38] [ 102.757691][ T38] May be due to missing lock nesting notation [ 102.757691][ T38] [ 102.766029][ T38] 6 locks held by kworker/1:1/38: [ 102.771067][ T38] #0: ffff8881066f3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 102.781897][ T38] #1: ffffc90000287d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 102.793163][ T38] #2: ffff88810aff2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1be/0x5030 [ 102.802066][ T38] #3: ffff888117263198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 102.811322][ T38] #4: ffff888117264160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 102.820598][ T38] #5: ffff8881165a5c70 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 102.829509][ T38] [ 102.829509][ T38] stack backtrace: [ 102.835428][ T38] CPU: 1 UID: 0 PID: 38 Comm: kworker/1:1 Not tainted 6.16.0-rc2-syzkaller-00033-g9962d0433a86 #0 PREEMPT(voluntary) [ 102.835458][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.835476][ T38] Workqueue: usb_hub_wq hub_event [ 102.835502][ T38] Call Trace: [ 102.835511][ T38] [ 102.835520][ T38] dump_stack_lvl+0x116/0x1f0 [ 102.835559][ T38] print_deadlock_bug+0x1e9/0x240 [ 102.835606][ T38] __lock_acquire+0x1106/0x1c90 [ 102.835644][ T38] lock_acquire+0x179/0x350 [ 102.835671][ T38] ? zd_chip_disable_rxtx+0x1f/0x50 [ 102.835702][ T38] ? __pfx___might_resched+0x10/0x10 [ 102.835739][ T38] ? __pfx___mutex_trylock_common+0x10/0x10 [ 102.835764][ T38] __mutex_lock+0x199/0xb90 [ 102.835794][ T38] ? zd_chip_disable_rxtx+0x1f/0x50 [ 102.835820][ T38] ? rcu_is_watching+0x12/0xc0 [ 102.835850][ T38] ? trace_contention_end+0xdd/0x130 [ 102.835872][ T38] ? zd_chip_disable_rxtx+0x1f/0x50 [ 102.835898][ T38] ? __mutex_lock+0x1ca/0xb90 [ 102.835928][ T38] ? __pfx___mutex_lock+0x10/0x10 [ 102.835958][ T38] ? pre_reset+0x20b/0x280 [ 102.835987][ T38] ? zd_chip_disable_rxtx+0x1f/0x50 [ 102.836014][ T38] zd_chip_disable_rxtx+0x1f/0x50 [ 102.836041][ T38] zd_op_stop+0x6b/0x1a0 [ 102.836070][ T38] pre_reset+0x191/0x280 [ 102.836092][ T38] usb_reset_device+0x419/0xa90 [ 102.836125][ T38] ? __pfx_pre_reset+0x10/0x10 [ 102.836151][ T38] probe+0x118/0x970 [ 102.836172][ T38] usb_probe_interface+0x300/0x9c0 [ 102.836200][ T38] ? __pfx_usb_probe_interface+0x10/0x10 [ 102.836226][ T38] really_probe+0x241/0xa90 [ 102.836253][ T38] __driver_probe_device+0x1de/0x440 [ 102.836280][ T38] driver_probe_device+0x4c/0x1b0 [ 102.836306][ T38] __device_attach_driver+0x1df/0x310 [ 102.836333][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 102.836359][ T38] bus_for_each_drv+0x159/0x1e0 [ 102.836395][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.836430][ T38] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.836460][ T38] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.836491][ T38] __device_attach+0x1e4/0x4b0 [ 102.836516][ T38] ? __pfx___device_attach+0x10/0x10 [ 102.836543][ T38] ? do_raw_spin_unlock+0x172/0x230 [ 102.836571][ T38] bus_probe_device+0x17f/0x1c0 [ 102.836594][ T38] device_add+0x1148/0x1a70 [ 102.836625][ T38] ? __pfx_device_add+0x10/0x10 [ 102.836656][ T38] ? usb_cache_string+0xf2/0x150 [ 102.836692][ T38] ? create_intf_ep_devs.isra.0+0x4a/0x200 [ 102.836758][ T38] usb_set_configuration+0x1187/0x1e20 [ 102.836790][ T38] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 102.836823][ T38] usb_generic_driver_probe+0xb1/0x110 [ 102.836856][ T38] usb_probe_device+0xec/0x3e0 [ 102.836878][ T38] ? __pfx_usb_probe_device+0x10/0x10 [ 102.836901][ T38] really_probe+0x241/0xa90 [ 102.836927][ T38] __driver_probe_device+0x1de/0x440 [ 102.836952][ T38] ? usb_driver_applicable+0x1c7/0x220 [ 102.836979][ T38] driver_probe_device+0x4c/0x1b0 [ 102.837005][ T38] __device_attach_driver+0x1df/0x310 [ 102.837032][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 102.837059][ T38] bus_for_each_drv+0x159/0x1e0 [ 102.837094][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.837130][ T38] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.837160][ T38] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.837189][ T38] __device_attach+0x1e4/0x4b0 [ 102.837215][ T38] ? __pfx___device_attach+0x10/0x10 [ 102.837242][ T38] ? do_raw_spin_unlock+0x172/0x230 [ 102.837271][ T38] bus_probe_device+0x17f/0x1c0 [ 102.837294][ T38] device_add+0x1148/0x1a70 [ 102.837325][ T38] ? __pfx_device_add+0x10/0x10 [ 102.837355][ T38] ? add_device_randomness+0xb7/0xf0 [ 102.837379][ T38] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 102.837406][ T38] usb_new_device+0xd07/0x1a20 [ 102.837429][ T38] ? do_raw_spin_lock+0x12c/0x2b0 [ 102.837454][ T38] ? __pfx_usb_new_device+0x10/0x10 [ 102.837477][ T38] ? mark_held_locks+0x49/0x80 [ 102.837499][ T38] hub_event+0x2f85/0x5030 [ 102.837533][ T38] ? __pfx_hub_event+0x10/0x10 [ 102.837553][ T38] ? assoc_array_gc+0xe00/0x15b0 [ 102.837579][ T38] ? rcu_is_watching+0x12/0xc0 [ 102.837610][ T38] process_one_work+0x9cc/0x1b70 [ 102.837641][ T38] ? __pfx_hcd_resume_work+0x10/0x10 [ 102.837665][ T38] ? __pfx_process_one_work+0x10/0x10 [ 102.837696][ T38] ? assign_work+0x1a0/0x250 [ 102.837726][ T38] worker_thread+0x6c8/0xf10 [ 102.837757][ T38] ? __kthread_parkme+0x19e/0x250 [ 102.837796][ T38] ? __pfx_worker_thread+0x10/0x10 [ 102.837837][ T38] kthread+0x3c5/0x780 [ 102.837872][ T38] ? __pfx_kthread+0x10/0x10 [ 102.837897][ T38] ? rcu_is_watching+0x12/0xc0 [ 102.837926][ T38] ? __pfx_kthread+0x10/0x10 [ 102.837950][ T38] ret_from_fork+0x5b3/0x6c0 [ 102.837985][ T38] ? __pfx_kthread+0x10/0x10 [ 102.838009][ T38] ret_from_fork_asm+0x1a/0x30 [ 102.838044][ T38] [ 103.306401][ T38] zd1211rw 1-1:1.73: error ioread32(CR_REG1): -11 [ 104.140704][ T38] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 105.297292][ T38] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' [ 105.314142][ T38] zd1211rw 1-1:1.242: phy2 [ 105.498545][ T38] zd1211rw 1-1:1.203: error ioread32(CR_REG1): -11 [ 105.505317][ T38] zd1211rw 1-1:1.73: error ioread32(CR_REG1): -11 [ 105.511902][ T38] zd1211rw 1-1:1.242: error ioread32(CR_REG1): -11 2025/06/21 12:48:52 executed programs: 4 [ 106.340687][ T38] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 107.496855][ T38] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 107.513935][ T38] zd1211rw 1-1:1.14: phy3 [ 107.590778][ T29] audit: type=1400 audit(1750510134.402:94): avc: denied { read } for pid=2883 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 107.696046][ T38] usb 1-1: USB disconnect, device number 2 [ 108.480698][ T38] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.632235][ T38] usb 1-1: config 1 has an invalid interface number: 203 but max is 3 [ 108.640734][ T38] usb 1-1: config 1 has an invalid interface number: 73 but max is 3 [ 108.648941][ T38] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 108.657785][ T38] usb 1-1: config 1 has an invalid interface number: 242 but max is 3 [ 108.666037][ T38] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 108.674786][ T38] usb 1-1: config 1 has an invalid interface number: 14 but max is 3 [ 108.682921][ T38] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 108.691680][ T38] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.701808][ T38] usb 1-1: config 1 has no interface number 0 [ 108.707899][ T38] usb 1-1: config 1 has no interface number 1 [ 108.714057][ T38] usb 1-1: config 1 has no interface number 2 [ 108.720173][ T38] usb 1-1: config 1 has no interface number 3 [ 108.726390][ T38] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x6 has an invalid bInterval 32, changing to 9 [ 108.737705][ T38] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 108.748937][ T38] usb 1-1: config 1 interface 203 altsetting 254 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 108.760119][ T38] usb 1-1: config 1 interface 73 altsetting 129 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 108.771181][ T38] usb 1-1: config 1 interface 242 altsetting 112 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 108.782387][ T38] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x4, skipping [ 108.793345][ T38] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0xD, skipping [ 108.804273][ T38] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x9, skipping [ 108.815223][ T38] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0xB, skipping [ 108.826158][ T38] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x9, skipping [ 108.837097][ T38] usb 1-1: config 1 interface 242 altsetting 112 has an invalid descriptor for endpoint zero, skipping [ 108.848200][ T38] usb 1-1: config 1 interface 242 altsetting 112 has a duplicate endpoint with address 0x4, skipping [ 108.859234][ T38] usb 1-1: config 1 interface 14 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 108.872271][ T38] usb 1-1: config 1 interface 203 has no altsetting 0 [ 108.879076][ T38] usb 1-1: config 1 interface 73 has no altsetting 0 [ 108.885819][ T38] usb 1-1: config 1 interface 242 has no altsetting 0 [ 108.892712][ T38] usb 1-1: config 1 interface 14 has no altsetting 0 [ 108.901099][ T38] usb 1-1: New USB device found, idVendor=0586, idProduct=3410, bcdDevice=44.1d [ 108.910201][ T38] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.918376][ T38] usb 1-1: Product: syz [ 108.922614][ T38] usb 1-1: Manufacturer: syz [ 108.927227][ T38] usb 1-1: SerialNumber: syz [ 109.960687][ T38] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 111.116492][ T38] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 111.133526][ T38] zd1211rw 1-1:1.203: phy4 [ 111.318514][ T38] zd1211rw 1-1:1.203: error ioread32(CR_REG1): -11 2025/06/21 12:48:58 executed programs: 7 [ 112.150693][ T38] usb 1-1: reset high-speed USB device number 3 using dummy_hcd