Warning: Permanently added '10.128.1.230' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 62.811280][ T29] audit: type=1400 audit(1728110273.072:80): avc: denied { execmem } for pid=2648 comm="syz-executor233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.853810][ T29] audit: type=1400 audit(1728110273.092:81): avc: denied { read write } for pid=2650 comm="syz-executor233" name="raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.877722][ T29] audit: type=1400 audit(1728110273.092:82): avc: denied { open } for pid=2650 comm="syz-executor233" path="/dev/raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.901475][ T29] audit: type=1400 audit(1728110273.092:83): avc: denied { ioctl } for pid=2650 comm="syz-executor233" path="/dev/raw-gadget" dev="devtmpfs" ino=140 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.062705][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.082516][ T803] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.112745][ T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.172538][ T2660] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.180146][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.212531][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 63.219676][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 63.232002][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 63.241137][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 63.249633][ T9] usb 1-1: Product: syz [ 63.253928][ T9] usb 1-1: Manufacturer: syz [ 63.258593][ T9] usb 1-1: SerialNumber: syz [ 63.263326][ T803] usb 3-1: Using ep0 maxpacket: 32 [ 63.270052][ T803] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 63.272480][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 63.283497][ T803] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 63.287672][ T36] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 63.294708][ T803] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 63.306902][ T36] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 63.313027][ T803] usb 3-1: Product: syz [ 63.313049][ T803] usb 3-1: Manufacturer: syz [ 63.313067][ T803] usb 3-1: SerialNumber: syz [ 63.322184][ T36] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 63.327883][ T9] usb 1-1: config 0 descriptor?? [ 63.330994][ T36] usb 5-1: Product: syz [ 63.353100][ T36] usb 5-1: Manufacturer: syz [ 63.353356][ T803] usb 3-1: config 0 descriptor?? [ 63.357704][ T36] usb 5-1: SerialNumber: syz [ 63.358914][ T2650] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.364072][ T2658] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 63.382496][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 63.387834][ T2660] usb 2-1: Using ep0 maxpacket: 32 [ 63.397171][ T36] usb 5-1: config 0 descriptor?? [ 63.403051][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 63.406315][ T803] chaoskey 3-1:0.0: Unable to register with hwrng [ 63.418034][ T2655] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 63.428698][ T24] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 63.437937][ T24] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 63.446372][ T24] usb 4-1: Product: syz [ 63.450569][ T24] usb 4-1: Manufacturer: syz [ 63.455266][ T24] usb 4-1: SerialNumber: syz [ 63.462487][ T36] chaoskey 5-1:0.0: Unable to register with hwrng [ 63.473556][ T2660] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 63.485797][ T2660] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 63.495030][ T2660] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 63.503349][ T2660] usb 2-1: Product: syz [ 63.507521][ T2660] usb 2-1: Manufacturer: syz [ 63.512134][ T2660] usb 2-1: SerialNumber: syz [ 63.517434][ T24] usb 4-1: config 0 descriptor?? [ 63.522855][ T2659] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 63.524923][ T2660] usb 2-1: config 0 descriptor?? [ 63.535771][ T2657] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 63.545654][ T2660] chaoskey 2-1:0.0: Unable to register with hwrng [ 63.555416][ T24] chaoskey 4-1:0.0: Unable to register with hwrng executing program executing program [ 63.584378][ T24] usb 1-1: USB disconnect, device number 2 [ 63.605708][ T803] usb 3-1: USB disconnect, device number 2 executing program [ 63.651685][ T9] usb 5-1: USB disconnect, device number 2 executing program executing program [ 63.746159][ T2660] usb 2-1: USB disconnect, device number 2 [ 63.746809][ T2663] usb 4-1: USB disconnect, device number 2 [ 63.952591][ T803] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 63.972601][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 63.982695][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.072677][ T2663] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 64.102669][ T803] usb 3-1: Using ep0 maxpacket: 32 [ 64.109289][ T803] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 64.121367][ T803] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.122507][ T2660] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 64.130502][ T803] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.146332][ T803] usb 3-1: Product: syz [ 64.150492][ T803] usb 3-1: Manufacturer: syz [ 64.155162][ T803] usb 3-1: SerialNumber: syz [ 64.159997][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 64.162521][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 64.167847][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 64.172357][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 64.181117][ T803] usb 3-1: config 0 descriptor?? [ 64.193413][ T24] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.199646][ T2668] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 64.204391][ T24] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.212521][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.219591][ T24] usb 1-1: Product: syz [ 64.228616][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.232758][ T24] usb 1-1: Manufacturer: syz [ 64.232777][ T24] usb 1-1: SerialNumber: syz [ 64.250299][ T9] usb 5-1: Product: syz [ 64.254302][ T24] usb 1-1: config 0 descriptor?? [ 64.254519][ T9] usb 5-1: Manufacturer: syz [ 64.260364][ T2667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.264120][ T9] usb 5-1: SerialNumber: syz [ 64.282448][ T803] chaoskey 3-1:0.0: Unable to register with hwrng [ 64.293843][ T2663] usb 4-1: Using ep0 maxpacket: 32 [ 64.313707][ T2663] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 64.325709][ T2663] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.332901][ T2660] usb 2-1: Using ep0 maxpacket: 32 [ 64.334982][ T2663] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.342323][ T2660] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 64.348300][ T2663] usb 4-1: Product: syz [ 64.360820][ T2660] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.362584][ T2663] usb 4-1: Manufacturer: syz executing program [ 64.371694][ T2660] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.376243][ T2663] usb 4-1: SerialNumber: syz [ 64.384448][ T2660] usb 2-1: Product: syz [ 64.390041][ T9] usb 5-1: config 0 descriptor?? [ 64.393205][ T2660] usb 2-1: Manufacturer: syz [ 64.401165][ T2669] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 64.402775][ T2660] usb 2-1: SerialNumber: syz [ 64.415471][ T803] usb 3-1: USB disconnect, device number 3 [ 64.427976][ T9] chaoskey 5-1:0.0: Unable to register with hwrng [ 64.429958][ T2660] usb 2-1: config 0 descriptor?? [ 64.440444][ T2663] usb 4-1: config 0 descriptor?? [ 64.446097][ T2673] [ 64.448454][ T2673] ====================================================== [ 64.454151][ T2671] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 64.455468][ T2673] WARNING: possible circular locking dependency detected [ 64.455489][ T2673] 6.12.0-rc1-syzkaller-00027-g4a9fe2a8ac53 #0 Not tainted [ 64.476806][ T2673] ------------------------------------------------------ [ 64.483831][ T2673] syz-executor233/2673 is trying to acquire lock: [ 64.490690][ T2673] ffffffff89b120e8 (chaoskey_list_lock){+.+.}-{3:3}, at: chaoskey_open+0xdd/0x220 [ 64.499922][ T2673] [ 64.499922][ T2673] but task is already holding lock: [ 64.507276][ T2673] ffffffff899dadb0 (minor_rwsem){++++}-{3:3}, at: usb_open+0x23/0x220 [ 64.515455][ T2673] [ 64.515455][ T2673] which lock already depends on the new lock. [ 64.515455][ T2673] [ 64.525944][ T2673] [ 64.525944][ T2673] the existing dependency chain (in reverse order) is: [ 64.535028][ T2673] [ 64.535028][ T2673] -> #1 (minor_rwsem){++++}-{3:3}: [ 64.542326][ T2673] down_write+0x93/0x200 [ 64.547095][ T2673] usb_deregister_dev+0x7c/0x1e0 [ 64.552564][ T2673] chaoskey_disconnect+0xb7/0x2a0 [ 64.558128][ T2673] usb_unbind_interface+0x1e8/0x970 [ 64.563838][ T2673] device_remove+0x122/0x170 [ 64.569029][ T2673] device_release_driver_internal+0x44a/0x610 [ 64.575705][ T2673] bus_remove_device+0x22f/0x420 [ 64.581160][ T2673] device_del+0x396/0x9f0 [ 64.586035][ T2673] usb_disable_device+0x36c/0x7f0 [ 64.591583][ T2673] usb_disconnect+0x2e1/0x920 [ 64.596778][ T2673] hub_event+0x1bed/0x4f40 [ 64.601722][ T2673] process_one_work+0x9c5/0x1ba0 [ 64.607175][ T2673] worker_thread+0x6c8/0xf00 [ 64.612427][ T2673] kthread+0x2c1/0x3a0 [ 64.617018][ T2673] ret_from_fork+0x45/0x80 [ 64.621968][ T2673] ret_from_fork_asm+0x1a/0x30 [ 64.627258][ T2673] [ 64.627258][ T2673] -> #0 (chaoskey_list_lock){+.+.}-{3:3}: [ 64.628194][ T803] usb 5-1: USB disconnect, device number 3 [ 64.635207][ T2673] __lock_acquire+0x250b/0x3ce0 [ 64.635239][ T2673] lock_acquire.part.0+0x11b/0x380 [ 64.635266][ T2673] __mutex_lock+0x175/0x9c0 [ 64.635290][ T2673] chaoskey_open+0xdd/0x220 [ 64.662084][ T2673] usb_open+0x186/0x220 [ 64.666860][ T2673] chrdev_open+0x237/0x6a0 [ 64.672266][ T2673] do_dentry_open+0x6cb/0x1390 [ 64.677575][ T2673] vfs_open+0x82/0x3f0 [ 64.682247][ T2673] path_openat+0x1e6a/0x2d60 [ 64.687396][ T2673] do_filp_open+0x1dc/0x430 [ 64.692449][ T2673] do_sys_openat2+0x17a/0x1e0 [ 64.697668][ T2673] __x64_sys_openat+0x175/0x210 [ 64.703039][ T2673] do_syscall_64+0xcd/0x250 [ 64.708061][ T2673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.714473][ T2673] [ 64.714473][ T2673] other info that might help us debug this: [ 64.714473][ T2673] [ 64.724692][ T2673] Possible unsafe locking scenario: [ 64.724692][ T2673] [ 64.732128][ T2673] CPU0 CPU1 [ 64.737650][ T2673] ---- ---- [ 64.743005][ T2673] rlock(minor_rwsem); [ 64.747161][ T2673] lock(chaoskey_list_lock); [ 64.754364][ T2673] lock(minor_rwsem); [ 64.760938][ T2673] lock(chaoskey_list_lock); [ 64.765598][ T2673] [ 64.765598][ T2673] *** DEADLOCK *** [ 64.765598][ T2673] [ 64.773731][ T2673] 1 lock held by syz-executor233/2673: [ 64.779256][ T2673] #0: ffffffff899dadb0 (minor_rwsem){++++}-{3:3}, at: usb_open+0x23/0x220 [ 64.787865][ T2673] [ 64.787865][ T2673] stack backtrace: [ 64.793772][ T2673] CPU: 1 UID: 0 PID: 2673 Comm: syz-executor233 Not tainted 6.12.0-rc1-syzkaller-00027-g4a9fe2a8ac53 #0 [ 64.804871][ T2673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.814932][ T2673] Call Trace: [ 64.818299][ T2673] [ 64.821219][ T2673] dump_stack_lvl+0x116/0x1f0 [ 64.825913][ T2673] print_circular_bug+0x41c/0x610 [ 64.831045][ T2673] check_noncircular+0x31a/0x400 [ 64.835997][ T2673] ? __pfx_check_noncircular+0x10/0x10 [ 64.841458][ T2673] ? lockdep_lock+0xc6/0x200 [ 64.846140][ T2673] ? lockdep_lock+0xc6/0x200 [ 64.851379][ T2673] ? __pfx_lockdep_lock+0x10/0x10 [ 64.856541][ T2673] ? __lock_acquire+0x163e/0x3ce0 [ 64.861563][ T2673] __lock_acquire+0x250b/0x3ce0 [ 64.866438][ T2673] ? __pfx___lock_acquire+0x10/0x10 [ 64.871650][ T2673] ? lock_acquire.part.0+0x11b/0x380 [ 64.876940][ T2673] ? find_held_lock+0x2d/0x110 [ 64.881785][ T2673] lock_acquire.part.0+0x11b/0x380 [ 64.886895][ T2673] ? chaoskey_open+0xdd/0x220 [ 64.891563][ T2673] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 64.897193][ T2673] ? rcu_is_watching+0x12/0xc0 [ 64.901943][ T2673] ? trace_lock_acquire+0x14a/0x1d0 [ 64.907133][ T2673] ? chaoskey_open+0xdd/0x220 [ 64.911801][ T2673] ? lock_acquire+0x2f/0xb0 [ 64.916422][ T2673] ? chaoskey_open+0xdd/0x220 [ 64.921107][ T2673] __mutex_lock+0x175/0x9c0 [ 64.925610][ T2673] ? chaoskey_open+0xdd/0x220 [ 64.930291][ T2673] ? bus_find_device+0x181/0x1e0 [ 64.935225][ T2673] ? chaoskey_open+0xdd/0x220 [ 64.939922][ T2673] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 64.945646][ T2673] ? __pfx___mutex_lock+0x10/0x10 [ 64.950678][ T2673] ? kobject_put+0xab/0x5a0 [ 64.955181][ T2673] ? usb_find_interface+0xb4/0xf0 [ 64.960203][ T2673] ? __pfx_usb_find_interface+0x10/0x10 [ 64.965740][ T2673] ? chaoskey_open+0xdd/0x220 [ 64.970515][ T2673] chaoskey_open+0xdd/0x220 [ 64.975024][ T2673] ? __pfx_chaoskey_open+0x10/0x10 [ 64.980162][ T2673] usb_open+0x186/0x220 [ 64.984316][ T2673] ? __pfx_usb_open+0x10/0x10 [ 64.988987][ T2673] chrdev_open+0x237/0x6a0 [ 64.993402][ T2673] ? __pfx_chrdev_open+0x10/0x10 [ 64.998352][ T2673] ? lockref_get+0x15/0x50 [ 65.002795][ T2673] do_dentry_open+0x6cb/0x1390 [ 65.007565][ T2673] ? __pfx_chrdev_open+0x10/0x10 [ 65.012494][ T2673] ? inode_permission+0xdd/0x5f0 [ 65.017432][ T2673] vfs_open+0x82/0x3f0 [ 65.021542][ T2673] ? may_open+0x1f2/0x400 [ 65.025876][ T2673] path_openat+0x1e6a/0x2d60 [ 65.030466][ T2673] ? __pfx_path_openat+0x10/0x10 [ 65.035421][ T2673] ? __pfx___lock_acquire+0x10/0x10 [ 65.040732][ T2673] do_filp_open+0x1dc/0x430 [ 65.045433][ T2673] ? __pfx_do_filp_open+0x10/0x10 [ 65.050451][ T2673] ? find_held_lock+0x2d/0x110 [ 65.055451][ T2673] ? _raw_spin_unlock+0x28/0x50 [ 65.060481][ T2673] ? alloc_fd+0x2d7/0x6c0 [ 65.064861][ T2673] do_sys_openat2+0x17a/0x1e0 [ 65.069551][ T2673] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.074792][ T2673] ? do_user_addr_fault+0xd97/0x12c0 [ 65.080094][ T2673] ? __pfx_lock_release+0x10/0x10 [ 65.085128][ T2673] ? trace_lock_acquire+0x14a/0x1d0 [ 65.090341][ T2673] __x64_sys_openat+0x175/0x210 [ 65.095883][ T2673] ? __pfx___x64_sys_openat+0x10/0x10 [ 65.101250][ T2673] ? do_user_addr_fault+0x839/0x12c0 [ 65.106529][ T2673] do_syscall_64+0xcd/0x250 [ 65.111047][ T2673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.116936][ T2673] RIP: 0033:0x7fab087d4e91 [ 65.121348][ T2673] Code: 75 57 89 f0 25 00 00 41 00 3d 00 00 41 00 74 49 80 3d fa a1 07 00 00 74 6d 89 da 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 93 00 00 00 48 8b 54 24 28 64 48 2b 14 25 [ 65.140955][ T2673] RSP: 002b:00007ffe8b2c7190 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 65.149644][ T2673] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fab087d4e91 [ 65.157719][ T2673] RDX: 0000000000000002 RSI: 00007ffe8b2c7210 RDI: 00000000ffffff9c [ 65.165684][ T2673] RBP: 00007ffe8b2c7210 R08: 000000000000000f R09: 00007ffe8b2c6fa7 [ 65.173735][ T2673] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe8b2c72cc executing program executing program executing program [ 65.181707][ T2673] R13: 00007ffe8b2c7300 R14: 00007ffe8b2c72e0 R15: 0000000000000002 [ 65.189790][ T2673] [ 65.195232][ T24] usb 1-1: USB disconnect, device number 3 [ 65.202148][ T2672] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 executing program