Warning: Permanently added '10.128.1.237' (ED25519) to the list of known hosts. 2025/09/08 20:00:24 ignoring optional flag "type"="gce" 2025/09/08 20:00:25 parsed 1 programs 2025/09/08 20:00:25 executed programs: 0 [ 85.513038][ T29] audit: type=1400 audit(1757361628.859:83): avc: denied { create } for pid=3444 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.535727][ T29] audit: type=1400 audit(1757361628.859:84): avc: denied { write } for pid=3444 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.563305][ T29] audit: type=1400 audit(1757361628.909:85): avc: denied { read } for pid=3444 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.472311][ T29] audit: type=1400 audit(1757361639.819:86): avc: denied { write } for pid=3894 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.496832][ T29] audit: type=1400 audit(1757361639.819:87): avc: denied { ioctl } for pid=3894 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.755359][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 96.907663][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.916560][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 96.925779][ T10] usb 1-1: config 0 has an invalid interface number: 144 but max is 1 [ 96.934014][ T10] usb 1-1: config 0 has an invalid interface number: 22 but max is 1 [ 96.942181][ T10] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 96.952157][ T10] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 96.961260][ T10] usb 1-1: config 0 has an invalid interface number: 243 but max is 1 [ 96.969519][ T10] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 96.978528][ T10] usb 1-1: config 0 has no interface number 0 [ 96.984645][ T10] usb 1-1: config 0 has no interface number 1 [ 96.990792][ T10] usb 1-1: config 0 has no interface number 2 [ 96.997057][ T10] usb 1-1: config 0 interface 144 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 97.008110][ T10] usb 1-1: config 0 interface 144 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 97.019155][ T10] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 97.030133][ T10] usb 1-1: config 0 interface 22 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.041280][ T10] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 97.052134][ T10] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 97.063149][ T10] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 97.073976][ T10] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 97.084771][ T10] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 97.095625][ T10] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 97.106328][ T10] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0xA has invalid maxpacket 503, setting to 64 [ 97.117268][ T10] usb 1-1: config 0 interface 22 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.128134][ T10] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 97.138921][ T10] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 97.149873][ T10] usb 1-1: config 0 interface 22 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.160810][ T10] usb 1-1: config 0 interface 22 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 16 [ 97.174082][ T10] usb 1-1: too many endpoints for config 0 interface 243 altsetting 168: 112, using maximum allowed: 30 [ 97.185307][ T10] usb 1-1: config 0 interface 243 altsetting 168 has a duplicate endpoint with address 0x6, skipping [ 97.196337][ T10] usb 1-1: config 0 interface 243 altsetting 168 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 97.207458][ T10] usb 1-1: config 0 interface 243 altsetting 168 has an invalid descriptor for endpoint zero, skipping [ 97.218657][ T10] usb 1-1: config 0 interface 243 altsetting 168 has 3 endpoint descriptors, different from the interface descriptor's value: 112 [ 97.232151][ T10] usb 1-1: config 0 interface 144 has no altsetting 0 [ 97.239018][ T10] usb 1-1: config 0 interface 243 has no altsetting 0 [ 97.248895][ T10] usb 1-1: string descriptor 0 read error: -22 [ 97.255354][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=1237, bcdDevice=d0.1f [ 97.264586][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.276520][ T10] usb 1-1: config 0 descriptor?? [ 97.425369][ T10] usb 1-1: reset full-speed USB device number 2 using dummy_hcd 2025/09/08 20:00:41 executed programs: 1 [ 98.315623][ T10] usb 1-1: device descriptor read/64, error -71 [ 98.577623][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.221913][ T10] zd1211rw 1-1:0.144: phy0 [ 99.233689][ T10] zd1211rw 1-1:0.144: error ioread32(CR_REG1): -11 [ 99.257592][ T29] audit: type=1400 audit(1757361642.599:88): avc: denied { read } for pid=2888 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 99.365493][ T10] usb 1-1: reset full-speed USB device number 2 using dummy_hcd [ 100.235625][ T10] usb 1-1: device descriptor read/64, error -71 [ 100.497766][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.131132][ T10] zd1211rw 1-1:0.22: phy1 [ 101.143340][ T10] zd1211rw 1-1:0.144: error ioread32(CR_REG1): -11 [ 101.155330][ T10] [ 101.157717][ T10] ============================================ [ 101.163892][ T10] WARNING: possible recursive locking detected [ 101.170158][ T10] syzkaller #0 Not tainted [ 101.174602][ T10] -------------------------------------------- [ 101.180777][ T10] kworker/0:1/10 is trying to acquire lock: [ 101.186700][ T10] ffff88811b255c90 (&chip->mutex){+.+.}-{4:4}, at: zd_chip_disable_rxtx+0x1f/0x50 [ 101.196055][ T10] [ 101.196055][ T10] but task is already holding lock: [ 101.203494][ T10] ffff88811d65dc90 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 101.212015][ T10] [ 101.212015][ T10] other info that might help us debug this: [ 101.220107][ T10] Possible unsafe locking scenario: [ 101.220107][ T10] [ 101.227599][ T10] CPU0 [ 101.230998][ T10] ---- [ 101.234354][ T10] lock(&chip->mutex); [ 101.238573][ T10] lock(&chip->mutex); [ 101.242772][ T10] [ 101.242772][ T10] *** DEADLOCK *** [ 101.242772][ T10] [ 101.250944][ T10] May be due to missing lock nesting notation [ 101.250944][ T10] [ 101.259475][ T10] 6 locks held by kworker/0:1/10: [ 101.264624][ T10] #0: ffff888106eef948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 101.275506][ T10] #1: ffffc900000afd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 101.286997][ T10] #2: ffff88810afdb198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1be/0x5060 [ 101.295984][ T10] #3: ffff88811b507198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 101.305415][ T10] #4: ffff88811b503160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 101.314741][ T10] #5: ffff88811d65dc90 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 101.323708][ T10] [ 101.323708][ T10] stack backtrace: [ 101.329640][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.329678][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.329697][ T10] Workqueue: usb_hub_wq hub_event [ 101.329749][ T10] Call Trace: [ 101.329759][ T10] [ 101.329770][ T10] dump_stack_lvl+0x116/0x1f0 [ 101.329819][ T10] print_deadlock_bug+0x1e9/0x240 [ 101.329869][ T10] __lock_acquire+0x1133/0x1ce0 [ 101.329905][ T10] lock_acquire+0x179/0x350 [ 101.329932][ T10] ? zd_chip_disable_rxtx+0x1f/0x50 [ 101.329983][ T10] ? __pfx___might_resched+0x10/0x10 [ 101.330024][ T10] ? __pfx___mutex_trylock_common+0x10/0x10 [ 101.330056][ T10] ? zd_chip_disable_rxtx+0x1f/0x50 [ 101.330100][ T10] __mutex_lock+0x193/0x1060 [ 101.330136][ T10] ? zd_chip_disable_rxtx+0x1f/0x50 [ 101.330181][ T10] ? rcu_is_watching+0x12/0xc0 [ 101.330221][ T10] ? trace_contention_end+0xdd/0x130 [ 101.330251][ T10] ? __mutex_lock+0x1c5/0x1060 [ 101.330291][ T10] ? __pfx___mutex_lock+0x10/0x10 [ 101.330340][ T10] ? zd_chip_disable_rxtx+0x1f/0x50 [ 101.330385][ T10] zd_chip_disable_rxtx+0x1f/0x50 [ 101.330434][ T10] zd_op_stop+0x6b/0x1a0 [ 101.330461][ T10] pre_reset+0x191/0x280 [ 101.330501][ T10] usb_reset_device+0x419/0xa90 [ 101.330548][ T10] ? __pfx_pre_reset+0x10/0x10 [ 101.330593][ T10] probe+0x118/0x970 [ 101.330630][ T10] usb_probe_interface+0x300/0xa40 [ 101.330679][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 101.330726][ T10] really_probe+0x241/0xa90 [ 101.330769][ T10] __driver_probe_device+0x1de/0x440 [ 101.330813][ T10] driver_probe_device+0x4c/0x1b0 [ 101.330854][ T10] __device_attach_driver+0x1df/0x310 [ 101.330898][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 101.330938][ T10] bus_for_each_drv+0x159/0x1e0 [ 101.330970][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 101.331003][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.331040][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 101.331075][ T10] __device_attach+0x1e4/0x4b0 [ 101.331117][ T10] ? __pfx___device_attach+0x10/0x10 [ 101.331158][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 101.331196][ T10] bus_probe_device+0x17f/0x1c0 [ 101.331234][ T10] device_add+0x1148/0x1aa0 [ 101.331284][ T10] ? __pfx_device_add+0x10/0x10 [ 101.331330][ T10] ? usb_create_ep_devs+0x1f7/0x2b0 [ 101.331375][ T10] ? create_intf_ep_devs.isra.0+0x195/0x200 [ 101.331414][ T10] usb_set_configuration+0x1187/0x1e20 [ 101.331465][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 101.331498][ T10] usb_generic_driver_probe+0xb1/0x110 [ 101.331539][ T10] usb_probe_device+0xef/0x3e0 [ 101.331578][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 101.331618][ T10] really_probe+0x241/0xa90 [ 101.331661][ T10] __driver_probe_device+0x1de/0x440 [ 101.331701][ T10] ? usb_driver_applicable+0x1c7/0x220 [ 101.331749][ T10] driver_probe_device+0x4c/0x1b0 [ 101.331791][ T10] __device_attach_driver+0x1df/0x310 [ 101.331835][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 101.331876][ T10] bus_for_each_drv+0x159/0x1e0 [ 101.331910][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 101.331944][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.331980][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 101.332014][ T10] __device_attach+0x1e4/0x4b0 [ 101.332054][ T10] ? __pfx___device_attach+0x10/0x10 [ 101.332098][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 101.332138][ T10] bus_probe_device+0x17f/0x1c0 [ 101.332174][ T10] device_add+0x1148/0x1aa0 [ 101.332224][ T10] ? __pfx_device_add+0x10/0x10 [ 101.332268][ T10] ? usb_detect_static_quirks+0x335/0x3e0 [ 101.332302][ T10] ? usb_cache_string+0xf2/0x150 [ 101.332338][ T10] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 101.332387][ T10] usb_new_device+0xd07/0x1a60 [ 101.332427][ T10] ? do_raw_spin_lock+0x12c/0x2b0 [ 101.332460][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 101.332499][ T10] ? mark_held_locks+0x49/0x80 [ 101.332529][ T10] hub_event+0x2fce/0x5060 [ 101.332590][ T10] ? __pfx_hub_event+0x10/0x10 [ 101.332627][ T10] ? assoc_array_apply_edit+0x420/0x6c0 [ 101.332671][ T10] ? rcu_is_watching+0x12/0xc0 [ 101.332714][ T10] process_one_work+0x9cc/0x1b70 [ 101.332758][ T10] ? __pfx_hcd_resume_work+0x10/0x10 [ 101.332802][ T10] ? __pfx_process_one_work+0x10/0x10 [ 101.332846][ T10] ? assign_work+0x1a0/0x250 [ 101.332883][ T10] worker_thread+0x6c8/0xf10 [ 101.332927][ T10] ? __kthread_parkme+0x19e/0x250 [ 101.332956][ T10] ? __pfx_worker_thread+0x10/0x10 [ 101.332995][ T10] kthread+0x3c5/0x780 [ 101.333030][ T10] ? __pfx_kthread+0x10/0x10 [ 101.333065][ T10] ? rcu_is_watching+0x12/0xc0 [ 101.333106][ T10] ? __pfx_kthread+0x10/0x10 [ 101.333141][ T10] ret_from_fork+0x5b6/0x6c0 [ 101.333169][ T10] ? __pfx_kthread+0x10/0x10 [ 101.333205][ T10] ret_from_fork_asm+0x1a/0x30 [ 101.333253][ T10] [ 101.805895][ T10] zd1211rw 1-1:0.22: error ioread32(CR_REG1): -11 [ 102.655195][ T10] usb 1-1: reset full-speed USB device number 2 using dummy_hcd [ 102.807225][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.418343][ T10] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' [ 103.436983][ T10] zd1211rw 1-1:0.243: phy2 [ 103.619062][ T23] usb 1-1: USB disconnect, device number 2 2025/09/08 20:00:47 executed programs: 4 [ 104.124702][ T29] audit: type=1400 audit(1757361647.469:89): avc: denied { write } for pid=3434 comm="syz-execprog" path="pipe:[938]" dev="pipefs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 104.405133][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 104.566808][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.575362][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 104.584393][ T10] usb 1-1: config 0 has an invalid interface number: 144 but max is 1 [ 104.592715][ T10] usb 1-1: config 0 has an invalid interface number: 22 but max is 1 [ 104.601295][ T10] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 104.611282][ T10] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 104.620036][ T10] usb 1-1: config 0 has an invalid interface number: 243 but max is 1 [ 104.628421][ T10] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 104.637766][ T10] usb 1-1: config 0 has no interface number 0 [ 104.643855][ T10] usb 1-1: config 0 has no interface number 1 [ 104.650392][ T10] usb 1-1: config 0 has no interface number 2 [ 104.658380][ T10] usb 1-1: config 0 interface 144 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 104.669449][ T10] usb 1-1: config 0 interface 144 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 104.681516][ T10] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 104.692623][ T10] usb 1-1: config 0 interface 22 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.703471][ T10] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 104.714326][ T10] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 104.725443][ T10] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 104.736101][ T10] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 104.746798][ T10] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 104.757495][ T10] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 104.768178][ T10] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0xA has invalid maxpacket 503, setting to 64 [ 104.779197][ T10] usb 1-1: config 0 interface 22 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.790283][ T10] usb 1-1: config 0 interface 22 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 104.800936][ T10] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 104.812145][ T10] usb 1-1: config 0 interface 22 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.823203][ T10] usb 1-1: config 0 interface 22 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 16 [ 104.836400][ T10] usb 1-1: too many endpoints for config 0 interface 243 altsetting 168: 112, using maximum allowed: 30 [ 104.847725][ T10] usb 1-1: config 0 interface 243 altsetting 168 has a duplicate endpoint with address 0x6, skipping [ 104.858765][ T10] usb 1-1: config 0 interface 243 altsetting 168 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 104.869879][ T10] usb 1-1: config 0 interface 243 altsetting 168 has an invalid descriptor for endpoint zero, skipping [ 104.881096][ T10] usb 1-1: config 0 interface 243 altsetting 168 has 3 endpoint descriptors, different from the interface descriptor's value: 112 [ 104.894553][ T10] usb 1-1: config 0 interface 144 has no altsetting 0 [ 104.901675][ T10] usb 1-1: config 0 interface 243 has no altsetting 0 [ 104.911361][ T10] usb 1-1: string descriptor 0 read error: -22 [ 104.917803][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=1237, bcdDevice=d0.1f [ 104.927399][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.937132][ T10] usb 1-1: config 0 descriptor?? [ 105.065195][ T10] usb 1-1: reset full-speed USB device number 3 using dummy_hcd [ 105.975173][ T10] usb 1-1: device descriptor read/64, error -71 [ 106.236906][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.848705][ T10] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 106.867913][ T10] zd1211rw 1-1:0.144: phy3 [ 106.874033][ T10] zd1211rw 1-1:0.144: error ioread32(CR_REG1): -11 [ 107.025141][ T10] usb 1-1: reset full-speed USB device number 3 using dummy_hcd [ 107.885179][ T10] usb 1-1: device descriptor read/64, error -71 [ 108.147174][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.760125][ T10] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 108.778566][ T10] zd1211rw 1-1:0.22: phy4 [ 108.787292][ T10] zd1211rw 1-1:0.144: error ioread32(CR_REG1): -11 [ 108.796547][ T10] zd1211rw 1-1:0.22: error ioread32(CR_REG1): -11 [ 108.926874][ T10] usb 1-1: reset full-speed USB device number 3 using dummy_hcd 2025/09/08 20:00:52 executed programs: 7 [ 109.785165][ T10] usb 1-1: device descriptor read/64, error -71 [ 110.047197][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.659478][ T10] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 110.679093][ T10] zd1211rw 1-1:0.243: phy5 [ 110.864109][ T23] usb 1-1: USB disconnect, device number 3