R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 00007fb4d5535f80 R15: 00007ffd72f9e238
 </TASK>
============================================
WARNING: possible recursive locking detected
6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0 Not tainted
--------------------------------------------
syz.1.1716/12219 is trying to acquire lock:
ffffffff8f0ab368 (fw_lock){+.+.}-{3:3}, at: assign_fw+0x4e/0x600 drivers/base/firmware_loader/main.c:700

but task is already holding lock:
ffffffff8f0ab368 (fw_lock){+.+.}-{3:3}, at: device_cache_fw_images drivers/base/firmware_loader/main.c:1549 [inline]
ffffffff8f0ab368 (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0x69/0x150 drivers/base/firmware_loader/main.c:1602

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(fw_lock);
  lock(fw_lock);

 *** DEADLOCK ***

 May be due to missing lock nesting notation

5 locks held by syz.1.1716/12219:
 #0: ffffffff8eea4b88 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
 #1: ffffffff8e07e188 (system_transition_mutex){+.+.}-{3:3}, at: lock_system_sleep+0x87/0xa0 kernel/power/main.c:56
 #2: ffffffff8e0bbf50 ((pm_chain_head).rwsem){++++}-{3:3}, at: blocking_notifier_call_chain_robust kernel/notifier.c:352 [inline]
 #2: ffffffff8e0bbf50 ((pm_chain_head).rwsem){++++}-{3:3}, at: blocking_notifier_call_chain_robust+0xa9/0x170 kernel/notifier.c:341
 #3: ffffffff8f0ab368 (fw_lock){+.+.}-{3:3}, at: device_cache_fw_images drivers/base/firmware_loader/main.c:1549 [inline]
 #3: ffffffff8f0ab368 (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0x69/0x150 drivers/base/firmware_loader/main.c:1602
 #4: ffffffff8f0a5ee8 (dpm_list_mtx){+.+.}-{3:3}, at: device_pm_lock drivers/base/power/main.c:113 [inline]
 #4: ffffffff8f0a5ee8 (dpm_list_mtx){+.+.}-{3:3}, at: dpm_for_each_dev drivers/base/power/main.c:1961 [inline]
 #4: ffffffff8f0a5ee8 (dpm_list_mtx){+.+.}-{3:3}, at: dpm_for_each_dev+0x2d/0xb0 drivers/base/power/main.c:1954

stack backtrace:
CPU: 3 UID: 0 PID: 12219 Comm: syz.1.1716 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_deadlock_bug+0x2e3/0x410 kernel/locking/lockdep.c:3037
 check_deadlock kernel/locking/lockdep.c:3089 [inline]
 validate_chain kernel/locking/lockdep.c:3891 [inline]
 __lock_acquire+0x2185/0x3ce0 kernel/locking/lockdep.c:5202
 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5825
 __mutex_lock_common kernel/locking/mutex.c:608 [inline]
 __mutex_lock+0x175/0x9c0 kernel/locking/mutex.c:752
 assign_fw+0x4e/0x600 drivers/base/firmware_loader/main.c:700
 _request_firmware+0x923/0x13d0 drivers/base/firmware_loader/main.c:945
 request_firmware drivers/base/firmware_loader/main.c:993 [inline]
 cache_firmware drivers/base/firmware_loader/main.c:1331 [inline]
 __async_dev_cache_fw_image+0xb2/0x340 drivers/base/firmware_loader/main.c:1445
 async_schedule_node_domain+0xd1/0x120 kernel/async.c:221
 async_schedule_domain include/linux/async.h:72 [inline]
 dev_cache_fw_image+0x38f/0x490 drivers/base/firmware_loader/main.c:1501
 dpm_for_each_dev drivers/base/power/main.c:1963 [inline]
 dpm_for_each_dev+0x5a/0xb0 drivers/base/power/main.c:1954
 device_cache_fw_images drivers/base/firmware_loader/main.c:1551 [inline]
 fw_pm_notify+0x81/0x150 drivers/base/firmware_loader/main.c:1602
 notifier_call_chain+0xb9/0x410 kernel/notifier.c:93
 notifier_call_chain_robust kernel/notifier.c:128 [inline]
 blocking_notifier_call_chain_robust kernel/notifier.c:353 [inline]
 blocking_notifier_call_chain_robust+0xc9/0x170 kernel/notifier.c:341
 pm_notifier_call_chain_robust+0x27/0x60 kernel/power/main.c:102
 snapshot_open+0x218/0x2b0 kernel/power/user.c:87
 misc_open+0x35a/0x420 drivers/char/misc.c:165
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x6ca/0x1530 fs/open.c:958
 vfs_open+0x82/0x3f0 fs/open.c:1088
 do_open fs/namei.c:3774 [inline]
 path_openat+0x1e6a/0x2d60 fs/namei.c:3933
 do_filp_open+0x1dc/0x430 fs/namei.c:3960
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1415
 do_sys_open fs/open.c:1430 [inline]
 __do_sys_openat fs/open.c:1446 [inline]
 __se_sys_openat fs/open.c:1441 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1441
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb4d537dff9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fb4d6096038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fb4d5535f80 RCX: 00007fb4d537dff9
RDX: 0000000000000001 RSI: 00000000200000c0 RDI: ffffffffffffff9c
RBP: 00007fb4d6096090 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 00007fb4d5535f80 R15: 00007ffd72f9e238
 </TASK>