Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. 2025/04/16 14:08:44 ignoring optional flag "sandboxArg"="0" 2025/04/16 14:08:44 ignoring optional flag "type"="gce" 2025/04/16 14:08:45 parsed 1 programs [ 66.566569][ T3402] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.024693][ T3409] veth0_vlan: entered promiscuous mode [ 68.308386][ T2012] veth0_vlan: left promiscuous mode 2025/04/16 14:08:48 executed programs: 0 [ 69.455059][ T3633] veth0_vlan: entered promiscuous mode [ 69.903545][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.063417][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 70.071491][ T11] usb 1-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 70.080615][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.088593][ T11] usb 1-1: Product: syz [ 70.092713][ T11] usb 1-1: Manufacturer: syz [ 70.097318][ T11] usb 1-1: SerialNumber: syz [ 70.103849][ T11] usb 1-1: config 0 descriptor?? [ 70.310111][ T11] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 70.352559][ T11] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 70.360681][ T11] dib0700: firmware download failed at 7 with -22 [ 70.394333][ T24] cfg80211: failed to load regulatory.db [ 70.661510][ T3811] FAULT_INJECTION: forcing a failure. [ 70.661510][ T3811] name failslab, interval 1, probability 0, space 0, times 1 [ 70.674438][ T3811] CPU: 1 UID: 0 PID: 3811 Comm: syz.0.15 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(undef) [ 70.674442][ T3811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.674443][ T3811] Call Trace: [ 70.674445][ T3811] [ 70.674446][ T3811] dump_stack_lvl+0xa7/0x100 [ 70.674452][ T3811] should_fail_ex+0x19e/0x1b0 [ 70.674456][ T3811] should_failslab+0x53/0x70 [ 70.674460][ T3811] __kmalloc_cache_noprof+0x63/0x410 [ 70.674464][ T3811] ? async_schedule_node_domain+0x2b/0xb0 [ 70.674469][ T3811] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 70.674474][ T3811] async_schedule_node_domain+0x2b/0xb0 [ 70.674478][ T3811] dev_cache_fw_image+0x167/0x1a0 [ 70.674483][ T3811] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 70.674486][ T3811] dpm_for_each_dev+0x47/0x70 [ 70.674490][ T3811] fw_pm_notify+0xf1/0x150 [ 70.674493][ T3811] ? __pfx_autoremove_wake_function+0x10/0x10 [ 70.674498][ T3811] notifier_call_chain+0x6d/0x100 [ 70.674502][ T3811] blocking_notifier_call_chain_robust+0x65/0xc0 [ 70.674507][ T3811] pm_notifier_call_chain_robust+0x1b/0x40 [ 70.674511][ T3811] snapshot_open+0x108/0x150 [ 70.674515][ T3811] misc_open+0xf9/0x120 [ 70.674519][ T3811] chrdev_open+0x1e5/0x230 [ 70.674524][ T3811] ? __pfx_chrdev_open+0x10/0x10 [ 70.674527][ T3811] do_dentry_open+0x387/0x4e0 [ 70.674531][ T3811] vfs_open+0x28/0xe0 [ 70.674534][ T3811] path_openat+0xc41/0xe70 [ 70.674538][ T3811] ? __lock_acquire+0x4f3/0x2590 [ 70.674548][ T3811] do_filp_open+0xc8/0x190 [ 70.674559][ T3811] do_sys_openat2+0x84/0xe0 [ 70.674563][ T3811] __x64_sys_openat+0x7f/0xa0 [ 70.674567][ T3811] do_syscall_64+0xa0/0x1b0 [ 70.674570][ T3811] ? clear_bhb_loop+0x45/0xa0 [ 70.674575][ T3811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.674581][ T3811] RIP: 0033:0x7fa1cc975b59 [ 70.674585][ T3811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.674587][ T3811] RSP: 002b:00007fa1cd6de048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 70.674592][ T3811] RAX: ffffffffffffffda RBX: 00007fa1ccb06038 RCX: 00007fa1cc975b59 [ 70.674593][ T3811] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 70.674594][ T3811] RBP: 00007fa1cd6de0a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.674596][ T3811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.674597][ T3811] R13: 000000000000006e R14: 00007fa1ccb06038 R15: 00007ffda9b324a8 [ 70.674602][ T3811] [ 70.675158][ T3811] [ 70.922652][ T3811] ============================================ [ 70.928764][ T3811] WARNING: possible recursive locking detected [ 70.934899][ T3811] 6.15.0-rc2-syzkaller #0 Not tainted [ 70.940295][ T3811] -------------------------------------------- [ 70.946426][ T3811] syz.0.15/3811 is trying to acquire lock: [ 70.952202][ T3811] ffffffff84329b80 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x27/0x2a0 [ 70.960080][ T3811] [ 70.960080][ T3811] but task is already holding lock: [ 70.967408][ T3811] ffffffff84329b80 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0xd9/0x150 [ 70.975704][ T3811] [ 70.975704][ T3811] other info that might help us debug this: [ 70.983727][ T3811] Possible unsafe locking scenario: [ 70.983727][ T3811] [ 70.991138][ T3811] CPU0 [ 70.994392][ T3811] ---- [ 70.997699][ T3811] lock(fw_lock); [ 71.001476][ T3811] lock(fw_lock); [ 71.005162][ T3811] [ 71.005162][ T3811] *** DEADLOCK *** [ 71.005162][ T3811] [ 71.013375][ T3811] May be due to missing lock nesting notation [ 71.013375][ T3811] [ 71.021659][ T3811] 5 locks held by syz.0.15/3811: [ 71.026645][ T3811] #0: ffffffff84312b60 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x2c/0x120 [ 71.035038][ T3811] #1: ffffffff84108e78 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x2a/0x40 [ 71.045325][ T3811] #2: ffffffff84110a90 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0x45/0xc0 [ 71.057000][ T3811] #3: ffffffff84329b80 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0xd9/0x150 [ 71.065566][ T3811] #4: ffffffff843291b0 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x24/0x70 [ 71.074812][ T3811] [ 71.074812][ T3811] stack backtrace: [ 71.080671][ T3811] CPU: 1 UID: 0 PID: 3811 Comm: syz.0.15 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(undef) [ 71.080674][ T3811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.080675][ T3811] Call Trace: [ 71.080678][ T3811] [ 71.080680][ T3811] dump_stack_lvl+0xa7/0x100 [ 71.080685][ T3811] print_deadlock_bug+0x244/0x260 [ 71.080690][ T3811] __lock_acquire+0x10e0/0x2590 [ 71.080694][ T3811] lock_acquire+0xda/0x250 [ 71.080697][ T3811] ? assign_fw+0x27/0x2a0 [ 71.080700][ T3811] ? debug_check_no_obj_freed+0x1f7/0x250 [ 71.080703][ T3811] ? assign_fw+0x27/0x2a0 [ 71.080704][ T3811] __mutex_lock+0xab/0xab0 [ 71.080710][ T3811] ? assign_fw+0x27/0x2a0 [ 71.080712][ T3811] ? kmem_cache_free+0xfb/0x3e0 [ 71.080716][ T3811] assign_fw+0x27/0x2a0 [ 71.080719][ T3811] _request_firmware+0x3b9/0x4e0 [ 71.080722][ T3811] __async_dev_cache_fw_image+0x50/0x140 [ 71.080726][ T3811] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 71.080729][ T3811] async_schedule_node_domain+0x7f/0xb0 [ 71.080734][ T3811] dev_cache_fw_image+0x167/0x1a0 [ 71.080737][ T3811] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 71.080739][ T3811] dpm_for_each_dev+0x47/0x70 [ 71.080743][ T3811] fw_pm_notify+0xf1/0x150 [ 71.080746][ T3811] ? __pfx_autoremove_wake_function+0x10/0x10 [ 71.080749][ T3811] notifier_call_chain+0x6d/0x100 [ 71.080752][ T3811] blocking_notifier_call_chain_robust+0x65/0xc0 [ 71.080755][ T3811] pm_notifier_call_chain_robust+0x1b/0x40 [ 71.080758][ T3811] snapshot_open+0x108/0x150 [ 71.080761][ T3811] misc_open+0xf9/0x120 [ 71.080765][ T3811] chrdev_open+0x1e5/0x230 [ 71.080768][ T3811] ? __pfx_chrdev_open+0x10/0x10 [ 71.080771][ T3811] do_dentry_open+0x387/0x4e0 [ 71.080774][ T3811] vfs_open+0x28/0xe0 [ 71.080776][ T3811] path_openat+0xc41/0xe70 [ 71.080780][ T3811] ? __lock_acquire+0x4f3/0x2590 [ 71.080783][ T3811] do_filp_open+0xc8/0x190 [ 71.080789][ T3811] do_sys_openat2+0x84/0xe0 [ 71.080792][ T3811] __x64_sys_openat+0x7f/0xa0 [ 71.080795][ T3811] do_syscall_64+0xa0/0x1b0 [ 71.080797][ T3811] ? clear_bhb_loop+0x45/0xa0 [ 71.080800][ T3811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.080803][ T3811] RIP: 0033:0x7fa1cc975b59 [ 71.080805][ T3811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.080807][ T3811] RSP: 002b:00007fa1cd6de048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 71.080810][ T3811] RAX: ffffffffffffffda RBX: 00007fa1ccb06038 RCX: 00007fa1cc975b59 [ 71.080811][ T3811] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 71.080813][ T3811] RBP: 00007fa1cd6de0a0 R08: 0000000000000000 R09: 0000000000000000 [ 71.080814][ T3811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.080814][ T3811] R13: 000000000000006e R14: 00007fa1ccb06038 R15: 00007ffda9b324a8 [ 71.080817][ T3811]