Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. 2026/04/07 15:02:01 ignoring optional flag "sandbox_arg"="0" 2026/04/07 15:02:01 ignoring optional flag "type"="gce" 2026/04/07 15:02:01 parsed 1 programs 2026/04/07 15:02:01 executed programs: 0 [ 65.426273][ T29] audit: type=1400 audit(1775574121.479:84): avc: denied { mounton } for pid=3440 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 65.450902][ T3440] cgroup: Unknown subsys name 'net' [ 65.461002][ T3440] cgroup: Unknown subsys name 'cpuset' [ 65.467621][ T3440] cgroup: Unknown subsys name 'rlimit' [ 75.148140][ T29] audit: type=1400 audit(1775574131.199:85): avc: denied { write } for pid=3890 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.176158][ T29] audit: type=1400 audit(1775574131.229:86): avc: denied { ioctl } for pid=3890 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.408580][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.560368][ T23] usb 1-1: config 204 has an invalid interface number: 37 but max is 2 [ 75.568848][ T23] usb 1-1: config 204 has an invalid interface association descriptor of length 2, skipping [ 75.578971][ T23] usb 1-1: config 204 has an invalid interface number: 191 but max is 2 [ 75.587314][ T23] usb 1-1: config 204 has an invalid interface number: 98 but max is 2 [ 75.595597][ T23] usb 1-1: config 204 has no interface number 0 [ 75.601885][ T23] usb 1-1: config 204 has no interface number 1 [ 75.608120][ T23] usb 1-1: config 204 has no interface number 2 [ 75.614481][ T23] usb 1-1: config 204 interface 37 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 75.625480][ T23] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 75.637260][ T23] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x8B has an invalid bInterval 178, changing to 11 [ 75.648763][ T23] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 75.660017][ T23] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0x97, changing to 0x87 [ 75.671884][ T23] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 75.682784][ T23] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 75.693688][ T23] usb 1-1: config 204 interface 37 has no altsetting 0 [ 75.700583][ T23] usb 1-1: config 204 interface 191 has no altsetting 0 [ 75.707538][ T23] usb 1-1: config 204 interface 98 has no altsetting 0 [ 75.716657][ T23] usb 1-1: New USB device found, idVendor=054c, idProduct=0257, bcdDevice=25.0a [ 75.725843][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.733890][ T23] usb 1-1: Product: syz [ 75.738068][ T23] usb 1-1: Manufacturer: syz [ 75.742723][ T23] usb 1-1: SerialNumber: syz 2026/04/07 15:02:12 executed programs: 1 [ 76.789595][ T23] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 77.775139][ T23] zd1211rw 1-1:204.37: phy0 [ 77.960825][ T23] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 78.809672][ T23] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 79.788189][ T23] zd1211rw 1-1:204.191: phy1 [ 79.977251][ T23] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 79.983996][ T23] [ 79.986405][ T23] ============================================ [ 79.992538][ T23] WARNING: possible recursive locking detected [ 79.998719][ T23] syzkaller #0 Not tainted [ 80.003129][ T23] -------------------------------------------- [ 80.009265][ T23] kworker/1:0/23 is trying to acquire lock: [ 80.015157][ T23] ffff88811ad2dd10 (&chip->mutex){+.+.}-{4:4}, at: zd_chip_disable_rxtx+0x1f/0x50 [ 80.024578][ T23] [ 80.024578][ T23] but task is already holding lock: [ 80.032018][ T23] ffff88811b1bdd10 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 80.040466][ T23] [ 80.040466][ T23] other info that might help us debug this: [ 80.048546][ T23] Possible unsafe locking scenario: [ 80.048546][ T23] [ 80.056171][ T23] CPU0 [ 80.059442][ T23] ---- [ 80.062711][ T23] lock(&chip->mutex); [ 80.066881][ T23] lock(&chip->mutex); [ 80.071113][ T23] [ 80.071113][ T23] *** DEADLOCK *** [ 80.071113][ T23] [ 80.079246][ T23] May be due to missing lock nesting notation [ 80.079246][ T23] [ 80.087897][ T23] 6 locks held by kworker/1:0/23: [ 80.092915][ T23] #0: ffff8881056ab948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 80.103789][ T23] #1: ffffc9000018fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 80.115176][ T23] #2: ffff88810b3f91e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 80.124058][ T23] #3: ffff88811b2501e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 80.133363][ T23] #4: ffff88811b5fc1a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 80.142631][ T23] #5: ffff88811b1bdd10 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 80.151524][ T23] [ 80.151524][ T23] stack backtrace: [ 80.157590][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 80.157608][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 80.157622][ T23] Workqueue: usb_hub_wq hub_event [ 80.157645][ T23] Call Trace: [ 80.157652][ T23] [ 80.157658][ T23] dump_stack_lvl+0x100/0x190 [ 80.157680][ T23] print_deadlock_bug.cold+0xbd/0xca [ 80.157695][ T23] __lock_acquire+0x12bb/0x2630 [ 80.157719][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.157742][ T23] lock_acquire+0x1cf/0x380 [ 80.157766][ T23] ? zd_chip_disable_rxtx+0x1f/0x50 [ 80.157786][ T23] ? __pfx___might_resched+0x10/0x10 [ 80.157802][ T23] __mutex_lock+0x1a2/0x1b90 [ 80.157816][ T23] ? zd_chip_disable_rxtx+0x1f/0x50 [ 80.157834][ T23] ? trace_contention_end+0x140/0x180 [ 80.157847][ T23] ? zd_chip_disable_rxtx+0x1f/0x50 [ 80.157865][ T23] ? __mutex_lock+0x26a/0x1b90 [ 80.157879][ T23] ? __pfx___flush_work+0x10/0x10 [ 80.157895][ T23] ? pre_reset+0x20b/0x280 [ 80.157910][ T23] ? __pfx___mutex_lock+0x10/0x10 [ 80.157923][ T23] ? rcu_is_watching+0x12/0xc0 [ 80.157940][ T23] ? do_raw_spin_lock+0x128/0x260 [ 80.157957][ T23] ? zd_chip_disable_rxtx+0x1f/0x50 [ 80.157975][ T23] zd_chip_disable_rxtx+0x1f/0x50 [ 80.157994][ T23] zd_op_stop+0x6b/0x1a0 [ 80.158013][ T23] pre_reset+0x191/0x280 [ 80.158029][ T23] usb_reset_device+0x3f1/0xaa0 [ 80.158050][ T23] ? __pfx_pre_reset+0x10/0x10 [ 80.158067][ T23] probe+0x118/0x5d0 [ 80.158082][ T23] usb_probe_interface+0x303/0x8f0 [ 80.158099][ T23] ? __pfx_usb_probe_interface+0x10/0x10 [ 80.158115][ T23] really_probe+0x241/0xa60 [ 80.158135][ T23] __driver_probe_device+0x1de/0x400 [ 80.158156][ T23] driver_probe_device+0x4c/0x1b0 [ 80.158175][ T23] __device_attach_driver+0x1df/0x340 [ 80.158195][ T23] ? __pfx___device_attach_driver+0x10/0x10 [ 80.158215][ T23] bus_for_each_drv+0x159/0x1e0 [ 80.158231][ T23] ? __pfx_bus_for_each_drv+0x10/0x10 [ 80.158247][ T23] ? lockdep_hardirqs_on+0x78/0x100 [ 80.158269][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.158303][ T23] __device_attach+0x1e4/0x4d0 [ 80.158332][ T23] ? __pfx___device_attach+0x10/0x10 [ 80.158358][ T23] ? do_raw_spin_unlock+0x145/0x1e0 [ 80.158374][ T23] device_initial_probe+0xaf/0xd0 [ 80.158395][ T23] bus_probe_device+0x64/0x160 [ 80.158416][ T23] device_add+0x11d9/0x1950 [ 80.158440][ T23] ? __pfx_device_add+0x10/0x10 [ 80.158462][ T23] ? kfree+0x1dc/0x640 [ 80.158481][ T23] ? create_intf_ep_devs.isra.0+0x19f/0x200 [ 80.158521][ T23] usb_set_configuration+0xd97/0x1c60 [ 80.158539][ T23] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 80.158560][ T23] usb_generic_driver_probe+0xa1/0xe0 [ 80.158580][ T23] usb_probe_device+0xef/0x400 [ 80.158594][ T23] ? __pfx_usb_probe_device+0x10/0x10 [ 80.158608][ T23] really_probe+0x241/0xa60 [ 80.158628][ T23] __driver_probe_device+0x1de/0x400 [ 80.158647][ T23] ? usb_driver_applicable+0x1c7/0x220 [ 80.158663][ T23] driver_probe_device+0x4c/0x1b0 [ 80.158683][ T23] __device_attach_driver+0x1df/0x340 [ 80.158703][ T23] ? __pfx___device_attach_driver+0x10/0x10 [ 80.158722][ T23] bus_for_each_drv+0x159/0x1e0 [ 80.158738][ T23] ? __pfx_bus_for_each_drv+0x10/0x10 [ 80.158756][ T23] ? lockdep_hardirqs_on+0x78/0x100 [ 80.158770][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.158791][ T23] __device_attach+0x1e4/0x4d0 [ 80.158810][ T23] ? __pfx___device_attach+0x10/0x10 [ 80.158830][ T23] ? do_raw_spin_unlock+0x145/0x1e0 [ 80.158846][ T23] device_initial_probe+0xaf/0xd0 [ 80.158866][ T23] bus_probe_device+0x64/0x160 [ 80.158884][ T23] device_add+0x11d9/0x1950 [ 80.158897][ T23] ? __pfx_device_add+0x10/0x10 [ 80.158909][ T23] ? add_device_randomness+0xb7/0xf0 [ 80.158927][ T23] usb_new_device.cold+0x685/0x115c [ 80.158943][ T23] ? do_raw_spin_lock+0x128/0x260 [ 80.158957][ T23] ? __pfx_usb_new_device+0x10/0x10 [ 80.158971][ T23] ? mark_held_locks+0x40/0x70 [ 80.158992][ T23] hub_event+0x314d/0x4af0 [ 80.159012][ T23] ? __pfx_hub_event+0x10/0x10 [ 80.159025][ T23] ? debug_object_deactivate+0x2e4/0x3b0 [ 80.159045][ T23] ? rcu_is_watching+0x12/0xc0 [ 80.159061][ T23] process_one_work+0xa23/0x19a0 [ 80.159080][ T23] ? __pfx_process_one_work+0x10/0x10 [ 80.159097][ T23] ? __pfx_hub_event+0x10/0x10 [ 80.159111][ T23] worker_thread+0x5ef/0xe50 [ 80.159129][ T23] ? kthread+0x13a/0x450 [ 80.159142][ T23] ? __pfx_worker_thread+0x10/0x10 [ 80.159156][ T23] kthread+0x370/0x450 [ 80.159170][ T23] ? __pfx_kthread+0x10/0x10 [ 80.159184][ T23] ret_from_fork+0x6c3/0xcb0 [ 80.159203][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 80.159222][ T23] ? __switch_to+0x7aa/0x1120 [ 80.159235][ T23] ? __pfx_kthread+0x10/0x10 [ 80.159249][ T23] ret_from_fork_asm+0x1a/0x30 [ 80.159273][ T23] [ 80.636930][ T23] zd1211rw 1-1:204.191: error ioread32(CR_REG1): -11 [ 80.978670][ T23] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 81.932327][ T23] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' [ 81.946358][ T23] zd1211rw 1-1:204.98: phy2 [ 82.013441][ T29] audit: type=1400 audit(1775574138.069:87): avc: denied { read } for pid=2892 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 82.101144][ T29] audit: type=1400 audit(1775574138.159:88): avc: denied { read open } for pid=3907 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=473 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.126731][ T29] audit: type=1400 audit(1775574138.159:89): avc: denied { getattr } for pid=3907 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=473 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.132905][ T3419] usb 1-1: USB disconnect, device number 2 [ 82.258185][ T29] audit: type=1400 audit(1775574138.309:90): avc: denied { add_name } for pid=3906 comm="dhcpcd-run-hook" name="resolv.conf.wlan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.305772][ T29] audit: type=1400 audit(1775574138.359:91): avc: denied { remove_name } for pid=3917 comm="rm" name="resolv.conf.wlan0.link" dev="tmpfs" ino=534 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 2026/04/07 15:02:18 executed programs: 4 [ 82.878395][ T3419] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.029565][ T3419] usb 1-1: config 204 has an invalid interface number: 37 but max is 2 [ 83.037875][ T3419] usb 1-1: config 204 has an invalid interface association descriptor of length 2, skipping [ 83.047974][ T3419] usb 1-1: config 204 has an invalid interface number: 191 but max is 2 [ 83.056337][ T3419] usb 1-1: config 204 has an invalid interface number: 98 but max is 2 [ 83.064619][ T3419] usb 1-1: config 204 has no interface number 0 [ 83.070918][ T3419] usb 1-1: config 204 has no interface number 1 [ 83.077150][ T3419] usb 1-1: config 204 has no interface number 2 [ 83.083440][ T3419] usb 1-1: config 204 interface 37 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 83.094520][ T3419] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 83.106354][ T3419] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x8B has an invalid bInterval 178, changing to 11 [ 83.117849][ T3419] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 83.128914][ T3419] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0x97, changing to 0x87 [ 83.140757][ T3419] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 83.151609][ T3419] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 83.162443][ T3419] usb 1-1: config 204 interface 37 has no altsetting 0 [ 83.169341][ T3419] usb 1-1: config 204 interface 191 has no altsetting 0 [ 83.176285][ T3419] usb 1-1: config 204 interface 98 has no altsetting 0 [ 83.184756][ T3419] usb 1-1: New USB device found, idVendor=054c, idProduct=0257, bcdDevice=25.0a [ 83.193950][ T3419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.201957][ T3419] usb 1-1: Product: syz [ 83.206129][ T3419] usb 1-1: Manufacturer: syz [ 83.210761][ T3419] usb 1-1: SerialNumber: syz [ 84.248704][ T3419] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 85.202646][ T3419] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 85.216728][ T3419] zd1211rw 1-1:204.37: phy3 [ 85.403155][ T3419] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 86.238690][ T3419] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 87.192594][ T3419] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 87.206830][ T3419] zd1211rw 1-1:204.191: phy4 [ 87.393628][ T3419] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 87.401010][ T3419] zd1211rw 1-1:204.191: error ioread32(CR_REG1): -11 2026/04/07 15:02:23 executed programs: 7 [ 88.228689][ T3419] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 89.182711][ T3419] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 89.196752][ T3419] zd1211rw 1-1:204.98: phy5 [ 89.383242][ T23] usb 1-1: USB disconnect, device number 3