Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 38.926673][ T29] audit: type=1400 audit(1728140794.578:80): avc: denied { execmem } for pid=2648 comm="syz-executor227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.960608][ T29] audit: type=1400 audit(1728140794.588:81): avc: denied { read write } for pid=2650 comm="syz-executor227" name="raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.984605][ T29] audit: type=1400 audit(1728140794.588:82): avc: denied { open } for pid=2650 comm="syz-executor227" path="/dev/raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.008530][ T29] audit: type=1400 audit(1728140794.588:83): avc: denied { ioctl } for pid=2650 comm="syz-executor227" path="/dev/raw-gadget" dev="devtmpfs" ino=140 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.179899][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.189859][ T804] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 39.199665][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 39.209669][ T295] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.217422][ T48] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 39.329651][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 39.336972][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 39.347322][ T804] usb 2-1: Using ep0 maxpacket: 32 [ 39.352719][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 39.360869][ T804] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 39.371037][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 39.380176][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 39.388523][ T9] usb 1-1: Product: syz [ 39.389734][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 39.392775][ T9] usb 1-1: Manufacturer: syz [ 39.397890][ T295] usb 5-1: Using ep0 maxpacket: 32 [ 39.402489][ T9] usb 1-1: SerialNumber: syz [ 39.402620][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 39.411525][ T48] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 39.419049][ T9] usb 1-1: config 0 descriptor?? [ 39.424245][ T295] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 39.437391][ T8] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 39.438158][ T2650] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 39.447804][ T8] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 39.463499][ T48] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 39.463994][ T8] usb 3-1: Product: syz [ 39.472189][ T48] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 39.481365][ T8] usb 3-1: Manufacturer: syz [ 39.485549][ T48] usb 4-1: Product: syz [ 39.493823][ T8] usb 3-1: SerialNumber: syz [ 39.498378][ T48] usb 4-1: Manufacturer: syz [ 39.507594][ T804] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 39.512072][ T48] usb 4-1: SerialNumber: syz [ 39.521338][ T804] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 39.531466][ T48] usb 4-1: config 0 descriptor?? [ 39.534394][ T804] usb 2-1: Product: syz [ 39.543653][ T2658] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 39.544706][ T295] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 39.550834][ T804] usb 2-1: Manufacturer: syz [ 39.550863][ T804] usb 2-1: SerialNumber: syz [ 39.560073][ T8] usb 3-1: config 0 descriptor?? [ 39.564582][ T295] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 39.576724][ T2656] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 39.582346][ T295] usb 5-1: Product: syz [ 39.594060][ T295] usb 5-1: Manufacturer: syz [ 39.598708][ T295] usb 5-1: SerialNumber: syz [ 39.603926][ T8] chaoskey 3-1:0.0: Unable to register with hwrng [ 39.609343][ T48] chaoskey 4-1:0.0: Unable to register with hwrng [ 39.621401][ T804] usb 2-1: config 0 descriptor?? [ 39.627927][ T2655] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 39.651873][ T295] usb 5-1: config 0 descriptor?? [ 39.657594][ T2657] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 39.667971][ T804] chaoskey 2-1:0.0: Unable to register with hwrng executing program [ 39.693975][ T295] chaoskey 5-1:0.0: Unable to register with hwrng [ 39.707783][ T804] usb 1-1: USB disconnect, device number 2 [ 39.743891][ T804] [ 39.746268][ T804] ====================================================== [ 39.753319][ T804] WARNING: possible circular locking dependency detected [ 39.760346][ T804] 6.12.0-rc1-syzkaller-00027-g4a9fe2a8ac53 #0 Not tainted [ 39.767490][ T804] ------------------------------------------------------ [ 39.774507][ T804] kworker/0:2/804 is trying to acquire lock: [ 39.780486][ T804] ffffffff899dadb0 (minor_rwsem){++++}-{3:3}, at: usb_deregister_dev+0x7c/0x1e0 [ 39.789623][ T804] [ 39.789623][ T804] but task is already holding lock: [ 39.797007][ T804] ffffffff89b120e8 (chaoskey_list_lock){+.+.}-{3:3}, at: chaoskey_disconnect+0xa8/0x2a0 [ 39.806808][ T804] [ 39.806808][ T804] which lock already depends on the new lock. [ 39.806808][ T804] [ 39.817224][ T804] [ 39.817224][ T804] the existing dependency chain (in reverse order) is: [ 39.826271][ T804] [ 39.826271][ T804] -> #1 (chaoskey_list_lock){+.+.}-{3:3}: [ 39.834206][ T804] __mutex_lock+0x175/0x9c0 [ 39.839268][ T804] chaoskey_open+0xdd/0x220 [ 39.844314][ T804] usb_open+0x186/0x220 [ 39.849003][ T804] chrdev_open+0x237/0x6a0 [ 39.853955][ T804] do_dentry_open+0x6cb/0x1390 [ 39.859263][ T804] vfs_open+0x82/0x3f0 [ 39.863864][ T804] path_openat+0x1e6a/0x2d60 [ 39.869007][ T804] do_filp_open+0x1dc/0x430 [ 39.874154][ T804] do_sys_openat2+0x17a/0x1e0 [ 39.879374][ T804] __x64_sys_openat+0x175/0x210 [ 39.884786][ T804] do_syscall_64+0xcd/0x250 [ 39.889840][ T804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.896288][ T804] [ 39.896288][ T804] -> #0 (minor_rwsem){++++}-{3:3}: [ 39.903606][ T804] __lock_acquire+0x250b/0x3ce0 [ 39.909013][ T804] lock_acquire.part.0+0x11b/0x380 [ 39.914664][ T804] down_write+0x93/0x200 [ 39.919448][ T804] usb_deregister_dev+0x7c/0x1e0 [ 39.924923][ T804] chaoskey_disconnect+0xb7/0x2a0 [ 39.930577][ T804] usb_unbind_interface+0x1e8/0x970 [ 39.936315][ T804] device_remove+0x122/0x170 [ 39.941448][ T804] device_release_driver_internal+0x44a/0x610 [ 39.948051][ T804] bus_remove_device+0x22f/0x420 [ 39.953533][ T804] device_del+0x396/0x9f0 [ 39.958483][ T804] usb_disable_device+0x36c/0x7f0 [ 39.964057][ T804] usb_disconnect+0x2e1/0x920 [ 39.969287][ T804] hub_event+0x1bed/0x4f40 [ 39.974253][ T804] process_one_work+0x9c5/0x1ba0 [ 39.979760][ T804] worker_thread+0x6c8/0xf00 [ 39.984892][ T804] kthread+0x2c1/0x3a0 [ 39.989491][ T804] ret_from_fork+0x45/0x80 [ 39.994479][ T804] ret_from_fork_asm+0x1a/0x30 [ 39.999801][ T804] [ 39.999801][ T804] other info that might help us debug this: [ 39.999801][ T804] [ 40.010308][ T804] Possible unsafe locking scenario: [ 40.010308][ T804] [ 40.017756][ T804] CPU0 CPU1 [ 40.023242][ T804] ---- ---- [ 40.028706][ T804] lock(chaoskey_list_lock); [ 40.033496][ T804] lock(minor_rwsem); [ 40.040093][ T804] lock(chaoskey_list_lock); [ 40.047303][ T804] lock(minor_rwsem); [ 40.051402][ T804] [ 40.051402][ T804] *** DEADLOCK *** [ 40.051402][ T804] [ 40.059588][ T804] 6 locks held by kworker/0:2/804: [ 40.064711][ T804] #0: ffff888106684148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 40.075550][ T804] #1: ffffc90001c2fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 40.086835][ T804] #2: ffff888109b0b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1be/0x4f40 [ 40.095875][ T804] #3: ffff8881027fd190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10a/0x920 [ 40.105478][ T804] #4: ffff888107af6160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 40.116081][ T804] #5: ffffffff89b120e8 (chaoskey_list_lock){+.+.}-{3:3}, at: chaoskey_disconnect+0xa8/0x2a0 [ 40.126530][ T804] [ 40.126530][ T804] stack backtrace: [ 40.132504][ T804] CPU: 0 UID: 0 PID: 804 Comm: kworker/0:2 Not tainted 6.12.0-rc1-syzkaller-00027-g4a9fe2a8ac53 #0 [ 40.143215][ T804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.153502][ T804] Workqueue: usb_hub_wq hub_event [ 40.158584][ T804] Call Trace: [ 40.161874][ T804] [ 40.164919][ T804] dump_stack_lvl+0x116/0x1f0 [ 40.169875][ T804] print_circular_bug+0x41c/0x610 [ 40.174941][ T804] check_noncircular+0x31a/0x400 [ 40.179908][ T804] ? __pfx_check_noncircular+0x10/0x10 [ 40.185394][ T804] ? kasan_save_stack+0x33/0x60 [ 40.190287][ T804] ? kasan_save_free_info+0x3b/0x60 [ 40.195601][ T804] ? __kasan_slab_free+0x37/0x50 [ 40.200566][ T804] ? kfree+0x130/0x480 [ 40.204697][ T804] ? lockdep_lock+0xc6/0x200 [ 40.209312][ T804] ? __pfx_lockdep_lock+0x10/0x10 [ 40.214363][ T804] ? hub_event+0x1bed/0x4f40 [ 40.218995][ T804] ? kthread+0x2c1/0x3a0 [ 40.223474][ T804] __lock_acquire+0x250b/0x3ce0 [ 40.228377][ T804] ? __pfx___lock_acquire+0x10/0x10 [ 40.233648][ T804] ? mark_held_locks+0x9f/0xe0 [ 40.238443][ T804] lock_acquire.part.0+0x11b/0x380 [ 40.243587][ T804] ? usb_deregister_dev+0x7c/0x1e0 [ 40.248722][ T804] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 40.254385][ T804] ? rcu_is_watching+0x12/0xc0 [ 40.259170][ T804] ? trace_lock_acquire+0x14a/0x1d0 [ 40.264406][ T804] ? usb_deregister_dev+0x7c/0x1e0 [ 40.269574][ T804] ? lock_acquire+0x2f/0xb0 [ 40.274185][ T804] ? usb_deregister_dev+0x7c/0x1e0 [ 40.279375][ T804] down_write+0x93/0x200 [ 40.283658][ T804] ? usb_deregister_dev+0x7c/0x1e0 [ 40.288790][ T804] ? __pfx_down_write+0x10/0x10 [ 40.293702][ T804] ? __pfx_device_destroy+0x10/0x10 [ 40.298931][ T804] usb_deregister_dev+0x7c/0x1e0 [ 40.303922][ T804] chaoskey_disconnect+0xb7/0x2a0 [ 40.308967][ T804] usb_unbind_interface+0x1e8/0x970 [ 40.314355][ T804] ? kernfs_find_ns+0x2ee/0x3f0 [ 40.319252][ T804] ? __pfx_usb_unbind_interface+0x10/0x10 [ 40.325015][ T804] device_remove+0x122/0x170 [ 40.329718][ T804] device_release_driver_internal+0x44a/0x610 [ 40.335810][ T804] bus_remove_device+0x22f/0x420 [ 40.340779][ T804] device_del+0x396/0x9f0 [ 40.345145][ T804] ? __pfx_device_del+0x10/0x10 [ 40.350099][ T804] ? kobject_put+0x210/0x5a0 [ 40.354722][ T804] usb_disable_device+0x36c/0x7f0 [ 40.359874][ T804] usb_disconnect+0x2e1/0x920 [ 40.364793][ T804] hub_event+0x1bed/0x4f40 [ 40.369269][ T804] ? lock_acquire+0x2f/0xb0 [ 40.373833][ T804] ? __pfx_hub_event+0x10/0x10 [ 40.378633][ T804] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 40.384296][ T804] ? rcu_is_watching+0x12/0xc0 [ 40.389098][ T804] ? trace_lock_acquire+0x14a/0x1d0 [ 40.394312][ T804] ? process_one_work+0x921/0x1ba0 [ 40.399445][ T804] ? lock_acquire+0x2f/0xb0 [ 40.403986][ T804] ? process_one_work+0x921/0x1ba0 [ 40.409522][ T804] process_one_work+0x9c5/0x1ba0 [ 40.414611][ T804] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 40.420293][ T804] ? __pfx_process_one_work+0x10/0x10 [ 40.425719][ T804] ? assign_work+0x1a0/0x250 [ 40.430378][ T804] worker_thread+0x6c8/0xf00 [ 40.435021][ T804] ? __kthread_parkme+0x148/0x220 [ 40.440069][ T804] ? __pfx_worker_thread+0x10/0x10 executing program [ 40.445218][ T804] kthread+0x2c1/0x3a0 [ 40.449313][ T804] ? _raw_spin_unlock_irq+0x23/0x50 [ 40.454527][ T804] ? __pfx_kthread+0x10/0x10 [ 40.459148][ T804] ret_from_fork+0x45/0x80 [ 40.463624][ T804] ? __pfx_kthread+0x10/0x10 [ 40.468236][ T804] ret_from_fork_asm+0x1a/0x30 [ 40.473027][ T804] [ 40.478156][ T8] usb 3-1: USB disconnect, device number 2 [ 40.491351][ T2665] usb 4-1: USB disconnect, device number 2 executing program executing program executing program [ 40.498145][ T9] usb 5-1: USB disconnect, device number 2 [ 40.510485][ T2668] usb 2-1: USB disconnect, device number 2 [ 40.809620][ T2665] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 40.817336][ T804] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.824973][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 40.832703][ T2668] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 40.840604][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 40.989671][ T804] usb 1-1: Using ep0 maxpacket: 32 [ 40.994967][ T2665] usb 4-1: Using ep0 maxpacket: 32 [ 41.000196][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 41.005410][ T2668] usb 2-1: Using ep0 maxpacket: 32 [ 41.010591][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 41.016853][ T804] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 41.027582][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 41.037792][ T2665] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 41.048099][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 41.058790][ T2668] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 41.070402][ T804] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 41.079704][ T804] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 41.087913][ T804] usb 1-1: Product: syz [ 41.092131][ T804] usb 1-1: Manufacturer: syz [ 41.096759][ T804] usb 1-1: SerialNumber: syz [ 41.101466][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 41.110635][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 41.118836][ T9] usb 5-1: Product: syz [ 41.123054][ T9] usb 5-1: Manufacturer: syz [ 41.127759][ T9] usb 5-1: SerialNumber: syz [ 41.132544][ T8] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 41.142091][ T8] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 41.150294][ T8] usb 3-1: Product: syz [ 41.154585][ T8] usb 3-1: Manufacturer: syz [ 41.159184][ T8] usb 3-1: SerialNumber: syz [ 41.164833][ T2665] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 41.173918][ T2665] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 41.182150][ T2665] usb 4-1: Product: syz [ 41.186343][ T2665] usb 4-1: Manufacturer: syz [ 41.190983][ T2665] usb 4-1: SerialNumber: syz [ 41.196176][ T2668] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 41.205484][ T2668] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 41.213706][ T2668] usb 2-1: Product: syz [ 41.217871][ T2668] usb 2-1: Manufacturer: syz [ 41.222529][ T2668] usb 2-1: SerialNumber: syz [ 41.227772][ T9] usb 5-1: config 0 descriptor?? [ 41.233775][ T2674] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 41.235019][ T8] usb 3-1: config 0 descriptor?? [ 41.246773][ T804] usb 1-1: config 0 descriptor?? [ 41.253885][ T2667] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 41.258433][ T2665] usb 4-1: config 0 descriptor?? [ 41.267143][ T2666] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 41.267591][ T2668] usb 2-1: config 0 descriptor?? [ 41.284307][ T2671] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 41.286432][ T8] chaoskey 3-1:0.0: Unable to register with hwrng [ 41.299748][ T804] chaoskey 1-1:0.0: Unable to register with hwrng [ 41.309825][ T2665] chaoskey 4-1:0.0: Unable to register with hwrng [ 41.320697][ T2669] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 41.334408][ T2668] chaoskey 2-1:0.0: Unable to register with hwrng executing program [ 41.453397][ T295] usb 5-1: USB disconnect, device number 3 [ 41.481510][ T2668] usb 1-1: USB disconnect, device number 3 [ 41.481622][ T48] usb 3-1: USB disconnect, device number 3 executing program executing program [ 41.502381][ T2664] usb 4-1: USB disconnect, device number 3 executing program [ 41.535988][ T2665] usb 2-1: USB disconnect, device number 3 [ 41.789662][ T295] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 41.939607][ T295] usb 5-1: Using ep0 maxpacket: 32 [ 41.945957][ T295] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 41.957849][ T295] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 41.966987][ T295] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 41.975249][ T295] usb 5-1: Product: syz [ 41.979442][ T295] usb 5-1: Manufacturer: syz [ 41.984134][ T295] usb 5-1: SerialNumber: syz [ 41.990084][ T295] usb 5-1: config 0 descriptor?? [ 41.995453][ T2676] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 executing program [ 42.204638][ T2668] usb 5-1: USB disconnect, device number 4 executing program executing program executing program executing program