Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. 2026/06/25 16:42:11 ignoring optional flag "sandbox_arg"="0" 2026/06/25 16:42:11 ignoring optional flag "type"="gce" 2026/06/25 16:42:11 parsed 1 programs 2026/06/25 16:42:11 executed programs: 0 [ 61.599677][ T29] audit: type=1400 audit(1782405731.495:99): avc: denied { mounton } for pid=3467 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 61.624304][ T3467] cgroup: Unknown subsys name 'net' [ 61.632395][ T3467] cgroup: Unknown subsys name 'cpuset' [ 61.639420][ T3467] cgroup: Unknown subsys name 'rlimit' [ 71.490871][ T29] audit: type=1400 audit(1782405741.385:100): avc: denied { write } for pid=3917 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.524674][ T29] audit: type=1400 audit(1782405741.385:101): avc: denied { ioctl } for pid=3917 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.762440][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.914306][ T23] usb 1-1: config 204 has an invalid interface number: 37 but max is 2 [ 71.922723][ T23] usb 1-1: config 204 has an invalid interface association descriptor of length 2, skipping [ 71.933233][ T23] usb 1-1: config 204 has an invalid interface number: 191 but max is 2 [ 71.941571][ T23] usb 1-1: config 204 has an invalid interface number: 98 but max is 2 [ 71.949855][ T23] usb 1-1: config 204 has no interface number 0 [ 71.956140][ T23] usb 1-1: config 204 has no interface number 1 [ 71.962410][ T23] usb 1-1: config 204 has no interface number 2 [ 71.968696][ T23] usb 1-1: config 204 interface 37 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 71.979708][ T23] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 71.991473][ T23] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x8B has an invalid bInterval 178, changing to 11 [ 72.002890][ T23] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 72.013963][ T23] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0x97, changing to 0x87 [ 72.025720][ T23] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 72.036531][ T23] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 72.047399][ T23] usb 1-1: config 204 interface 37 has no altsetting 0 [ 72.054298][ T23] usb 1-1: config 204 interface 191 has no altsetting 0 [ 72.061227][ T23] usb 1-1: config 204 interface 98 has no altsetting 0 [ 72.070076][ T23] usb 1-1: New USB device found, idVendor=054c, idProduct=0257, bcdDevice=25.0a [ 72.079244][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.087369][ T23] usb 1-1: Product: syz [ 72.091544][ T23] usb 1-1: Manufacturer: syz [ 72.096170][ T23] usb 1-1: SerialNumber: syz 2026/06/25 16:42:22 executed programs: 1 [ 73.144011][ T23] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 74.127748][ T23] zd1211rw 1-1:204.37: phy0 [ 74.313770][ T23] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 75.144046][ T23] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 76.125027][ T23] zd1211rw 1-1:204.191: phy1 [ 76.312516][ T23] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 76.319226][ T23] [ 76.321543][ T23] ============================================ [ 76.327767][ T23] WARNING: possible recursive locking detected [ 76.333904][ T23] syzkaller #0 Not tainted [ 76.338300][ T23] -------------------------------------------- [ 76.344451][ T23] kworker/1:0/23 is trying to acquire lock: [ 76.350335][ T23] ffff88811be2de00 (&chip->mutex){+.+.}-{4:4}, at: zd_chip_disable_rxtx+0x1f/0x50 [ 76.359569][ T23] [ 76.359569][ T23] but task is already holding lock: [ 76.366922][ T23] ffff88811bf25e00 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 76.375406][ T23] [ 76.375406][ T23] other info that might help us debug this: [ 76.383472][ T23] Possible unsafe locking scenario: [ 76.383472][ T23] [ 76.390918][ T23] CPU0 [ 76.394217][ T23] ---- [ 76.397481][ T23] lock(&chip->mutex); [ 76.401623][ T23] lock(&chip->mutex); [ 76.405774][ T23] [ 76.405774][ T23] *** DEADLOCK *** [ 76.405774][ T23] [ 76.413901][ T23] May be due to missing lock nesting notation [ 76.413901][ T23] [ 76.422218][ T23] 6 locks held by kworker/1:0/23: [ 76.427224][ T23] #0: ffff8881062b5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 76.438009][ T23] #1: ffffc9000018fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 76.449226][ T23] #2: ffff88810b7321d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 76.458269][ T23] #3: ffff88811bde21d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 76.467491][ T23] #4: ffff88811bd651a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 76.476707][ T23] #5: ffff88811bf25e00 (&chip->mutex){+.+.}-{4:4}, at: pre_reset+0x20b/0x280 [ 76.485580][ T23] [ 76.485580][ T23] stack backtrace: [ 76.491476][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.491495][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.491509][ T23] Workqueue: usb_hub_wq hub_event [ 76.491535][ T23] Call Trace: [ 76.491545][ T23] [ 76.491551][ T23] dump_stack_lvl+0x100/0x190 [ 76.491574][ T23] print_deadlock_bug.cold+0xbd/0xca [ 76.491590][ T23] __lock_acquire+0x1256/0x1a40 [ 76.491610][ T23] lock_acquire+0x1b9/0x370 [ 76.491627][ T23] ? zd_chip_disable_rxtx+0x1f/0x50 [ 76.491649][ T23] ? __pfx___might_resched+0x10/0x10 [ 76.491667][ T23] __mutex_lock+0x1a4/0x1bd0 [ 76.491689][ T23] ? zd_chip_disable_rxtx+0x1f/0x50 [ 76.491709][ T23] ? zd_chip_disable_rxtx+0x1f/0x50 [ 76.491729][ T23] ? __mutex_lock+0x26d/0x1bd0 [ 76.491745][ T23] ? pre_reset+0x20b/0x280 [ 76.491763][ T23] ? __pfx___mutex_lock+0x10/0x10 [ 76.491779][ T23] ? rcu_is_watching+0x12/0xc0 [ 76.491802][ T23] ? do_raw_spin_lock+0x128/0x260 [ 76.491825][ T23] ? zd_chip_disable_rxtx+0x1f/0x50 [ 76.491844][ T23] zd_chip_disable_rxtx+0x1f/0x50 [ 76.491865][ T23] zd_op_stop+0x6b/0x1a0 [ 76.491886][ T23] pre_reset+0x191/0x280 [ 76.491902][ T23] usb_reset_device+0x3f1/0xaa0 [ 76.491916][ T23] ? __pfx_pre_reset+0x10/0x10 [ 76.491941][ T23] probe+0x118/0x5d0 [ 76.491958][ T23] usb_probe_interface+0x303/0x8f0 [ 76.491977][ T23] ? __pfx_usb_probe_interface+0x10/0x10 [ 76.491995][ T23] really_probe+0x241/0xa60 [ 76.492011][ T23] __driver_probe_device+0x20e/0x450 [ 76.492025][ T23] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.492056][ T23] driver_probe_device+0x4a/0x140 [ 76.492080][ T23] __device_attach_driver+0x1df/0x320 [ 76.492105][ T23] ? __pfx___device_attach_driver+0x10/0x10 [ 76.492130][ T23] bus_for_each_drv+0x159/0x1e0 [ 76.492154][ T23] ? __pfx_bus_for_each_drv+0x10/0x10 [ 76.492174][ T23] ? lockdep_hardirqs_on+0x78/0x100 [ 76.492191][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 76.492206][ T23] __device_attach+0x1e4/0x4d0 [ 76.492221][ T23] ? __pfx___device_attach+0x10/0x10 [ 76.492241][ T23] ? do_raw_spin_unlock+0x145/0x1e0 [ 76.492278][ T23] device_initial_probe+0xaf/0xd0 [ 76.492306][ T23] bus_probe_device+0x64/0x160 [ 76.492344][ T23] device_add+0x121d/0x1970 [ 76.492362][ T23] ? __pfx_device_add+0x10/0x10 [ 76.492378][ T23] ? usb_cache_string+0xd6/0x100 [ 76.492391][ T23] ? kfree+0x20c/0x650 [ 76.492407][ T23] ? create_intf_ep_devs.isra.0+0x19f/0x200 [ 76.492423][ T23] usb_set_configuration+0xd97/0x1c60 [ 76.492446][ T23] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 76.492468][ T23] usb_generic_driver_probe+0xa1/0xe0 [ 76.492491][ T23] usb_probe_device+0xef/0x400 [ 76.492506][ T23] ? __pfx_usb_probe_device+0x10/0x10 [ 76.492523][ T23] really_probe+0x241/0xa60 [ 76.492537][ T23] __driver_probe_device+0x20e/0x450 [ 76.492551][ T23] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.492574][ T23] driver_probe_device+0x4a/0x140 [ 76.492589][ T23] __device_attach_driver+0x1df/0x320 [ 76.492604][ T23] ? __pfx___device_attach_driver+0x10/0x10 [ 76.492618][ T23] bus_for_each_drv+0x159/0x1e0 [ 76.492637][ T23] ? __pfx_bus_for_each_drv+0x10/0x10 [ 76.492657][ T23] ? lockdep_hardirqs_on+0x78/0x100 [ 76.492674][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 76.492689][ T23] __device_attach+0x1e4/0x4d0 [ 76.492703][ T23] ? __pfx___device_attach+0x10/0x10 [ 76.492717][ T23] ? do_raw_spin_unlock+0x145/0x1e0 [ 76.492739][ T23] device_initial_probe+0xaf/0xd0 [ 76.492754][ T23] bus_probe_device+0x64/0x160 [ 76.492775][ T23] device_add+0x121d/0x1970 [ 76.492792][ T23] ? __pfx_device_add+0x10/0x10 [ 76.492808][ T23] ? add_device_randomness+0xc9/0x110 [ 76.492831][ T23] usb_new_device.cold+0x685/0x115c [ 76.492850][ T23] ? _mutex_trylock_nest_lock+0x271/0x310 [ 76.492867][ T23] ? do_raw_spin_lock+0x128/0x260 [ 76.492886][ T23] ? __pfx_usb_new_device+0x10/0x10 [ 76.492902][ T23] ? mark_held_locks+0x40/0x70 [ 76.492919][ T23] hub_event+0x314d/0x4af0 [ 76.492950][ T23] ? __pfx_hub_event+0x10/0x10 [ 76.492965][ T23] ? debug_object_deactivate+0x2e4/0x3b0 [ 76.492985][ T23] ? rcu_is_watching+0x12/0xc0 [ 76.493007][ T23] process_one_work+0xa23/0x1940 [ 76.493027][ T23] ? __pfx_process_one_work+0x10/0x10 [ 76.493046][ T23] ? __pfx_hub_event+0x10/0x10 [ 76.493062][ T23] worker_thread+0x5ef/0xe50 [ 76.493081][ T23] ? kthread+0x13a/0x450 [ 76.493096][ T23] ? __pfx_worker_thread+0x10/0x10 [ 76.493112][ T23] kthread+0x370/0x450 [ 76.493126][ T23] ? __pfx_kthread+0x10/0x10 [ 76.493141][ T23] ret_from_fork+0x69a/0xc80 [ 76.493161][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 76.493181][ T23] ? __switch_to+0x7f6/0x10e0 [ 76.493195][ T23] ? __switch_to_asm+0x39/0x70 [ 76.493207][ T23] ? __pfx_kthread+0x10/0x10 [ 76.493222][ T23] ret_from_fork_asm+0x1a/0x30 [ 76.493238][ T23] [ 76.970845][ T23] zd1211rw 1-1:204.191: error ioread32(CR_REG1): -11 [ 77.802493][ T23] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 78.756572][ T23] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' [ 78.770625][ T23] zd1211rw 1-1:204.98: phy2 [ 78.870194][ T29] audit: type=1400 audit(1782405748.765:102): avc: denied { read } for pid=2896 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 78.955690][ T29] audit: type=1400 audit(1782405748.855:103): avc: denied { read } for pid=3934 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.957871][ T9] usb 1-1: USB disconnect, device number 2 [ 78.982333][ T29] audit: type=1400 audit(1782405748.855:104): avc: denied { read open } for pid=3934 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.014752][ T29] audit: type=1400 audit(1782405748.855:105): avc: denied { getattr } for pid=3934 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.124336][ T29] audit: type=1400 audit(1782405749.025:106): avc: denied { write } for pid=3933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.147559][ T29] audit: type=1400 audit(1782405749.025:107): avc: denied { add_name } for pid=3933 comm="dhcpcd-run-hook" name="resolv.conf.wlan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.200775][ T29] audit: type=1400 audit(1782405749.095:108): avc: denied { write } for pid=3944 comm="rm" name="hook-state" dev="tmpfs" ino=471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.222641][ T29] audit: type=1400 audit(1782405749.095:109): avc: denied { remove_name } for pid=3944 comm="rm" name="resolv.conf.wlan0.link" dev="tmpfs" ino=535 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.361239][ T29] audit: type=1400 audit(1782405749.255:110): avc: denied { write } for pid=3946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 2026/06/25 16:42:29 executed programs: 4 [ 79.416834][ T29] audit: type=1400 audit(1782405749.315:111): avc: denied { write } for pid=3957 comm="rm" name="hook-state" dev="tmpfs" ino=471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.702142][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.853545][ T23] usb 1-1: config 204 has an invalid interface number: 37 but max is 2 [ 79.861933][ T23] usb 1-1: config 204 has an invalid interface association descriptor of length 2, skipping [ 79.872033][ T23] usb 1-1: config 204 has an invalid interface number: 191 but max is 2 [ 79.880397][ T23] usb 1-1: config 204 has an invalid interface number: 98 but max is 2 [ 79.888694][ T23] usb 1-1: config 204 has no interface number 0 [ 79.894972][ T23] usb 1-1: config 204 has no interface number 1 [ 79.901383][ T23] usb 1-1: config 204 has no interface number 2 [ 79.907690][ T23] usb 1-1: config 204 interface 37 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 79.918668][ T23] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 79.930407][ T23] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x8B has an invalid bInterval 178, changing to 11 [ 79.941848][ T23] usb 1-1: config 204 interface 37 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 79.952899][ T23] usb 1-1: config 204 interface 37 altsetting 7 has an endpoint descriptor with address 0x97, changing to 0x87 [ 79.964644][ T23] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 79.975525][ T23] usb 1-1: config 204 interface 37 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 79.986364][ T23] usb 1-1: config 204 interface 37 has no altsetting 0 [ 79.993246][ T23] usb 1-1: config 204 interface 191 has no altsetting 0 [ 80.000196][ T23] usb 1-1: config 204 interface 98 has no altsetting 0 [ 80.008726][ T23] usb 1-1: New USB device found, idVendor=054c, idProduct=0257, bcdDevice=25.0a [ 80.017809][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.025811][ T23] usb 1-1: Product: syz [ 80.029994][ T23] usb 1-1: Manufacturer: syz [ 80.034612][ T23] usb 1-1: SerialNumber: syz [ 81.072538][ T23] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 82.027542][ T23] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 82.041684][ T23] zd1211rw 1-1:204.37: phy3 [ 82.228769][ T23] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 83.062534][ T23] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 84.016466][ T23] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 84.031060][ T23] zd1211rw 1-1:204.191: phy4 [ 84.217855][ T23] zd1211rw 1-1:204.37: error ioread32(CR_REG1): -11 [ 84.224607][ T23] zd1211rw 1-1:204.191: error ioread32(CR_REG1): -11 2026/06/25 16:42:34 executed programs: 7 [ 85.052504][ T23] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 86.006125][ T23] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 86.020019][ T23] zd1211rw 1-1:204.98: phy5 [ 86.203950][ T29] audit: type=1400 audit(1782405756.105:112): avc: denied { write } for pid=3970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.228318][ T9] usb 1-1: USB disconnect, device number 3 [ 86.259781][ T29] audit: type=1400 audit(1782405756.155:113): avc: denied { write } for pid=3981 comm="rm" name="hook-state" dev="tmpfs" ino=471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1