Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. 2024/08/19 07:59:47 ignoring optional flag "sandboxArg"="0" 2024/08/19 07:59:47 parsed 1 programs [ 52.675827][ T3389] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.257264][ T3417] veth0_vlan: entered promiscuous mode [ 54.516963][ T1701] veth0_vlan: left promiscuous mode 2024/08/19 07:59:51 executed programs: 0 [ 55.453029][ T3619] veth0_vlan: entered promiscuous mode [ 55.934526][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.114447][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 56.122224][ T36] usb 1-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 56.131509][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.139799][ T36] usb 1-1: Product: syz [ 56.143954][ T36] usb 1-1: Manufacturer: syz [ 56.148557][ T36] usb 1-1: SerialNumber: syz [ 56.154247][ T36] usb 1-1: config 0 descriptor?? [ 56.360901][ T36] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 56.392480][ T36] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 56.400584][ T36] dib0700: firmware download failed at 7 with -22 [ 56.712554][ T3797] FAULT_INJECTION: forcing a failure. [ 56.712554][ T3797] name failslab, interval 1, probability 0, space 0, times 1 [ 56.725547][ T3797] CPU: 0 UID: 0 PID: 3797 Comm: syz.0.15 Not tainted 6.11.0-rc4-syzkaller #0 [ 56.734562][ T3797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 56.744946][ T3797] Call Trace: [ 56.748285][ T3797] [ 56.751205][ T3797] dump_stack_lvl+0xa3/0x100 [ 56.755771][ T3797] should_fail_ex+0x13b/0x140 [ 56.760534][ T3797] should_failslab+0x53/0x70 [ 56.765131][ T3797] __kmalloc_cache_noprof+0x5b/0x320 [ 56.770473][ T3797] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 56.776684][ T3797] async_schedule_node_domain+0x2b/0xb0 [ 56.782233][ T3797] dev_cache_fw_image+0x165/0x1a0 [ 56.787427][ T3797] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 56.792946][ T3797] dpm_for_each_dev+0x47/0x70 [ 56.797591][ T3797] fw_pm_notify+0xee/0x150 [ 56.801973][ T3797] ? __pfx_autoremove_wake_function+0x10/0x10 [ 56.808004][ T3797] notifier_call_chain+0x6d/0x100 [ 56.812994][ T3797] blocking_notifier_call_chain_robust+0x60/0xc0 [ 56.819416][ T3797] pm_notifier_call_chain_robust+0x1b/0x40 [ 56.825184][ T3797] snapshot_open+0x111/0x150 [ 56.829759][ T3797] misc_open+0x112/0x140 [ 56.833967][ T3797] chrdev_open+0x1e6/0x230 [ 56.838348][ T3797] ? __pfx_chrdev_open+0x10/0x10 [ 56.843250][ T3797] do_dentry_open+0x2a4/0x420 [ 56.847891][ T3797] vfs_open+0x28/0xd0 [ 56.851845][ T3797] path_openat+0xbfb/0xe10 [ 56.856242][ T3797] ? __virt_addr_valid+0xad/0x240 [ 56.861262][ T3797] ? __virt_addr_valid+0xad/0x240 [ 56.866254][ T3797] do_filp_open+0xad/0x150 [ 56.870654][ T3797] do_sys_openat2+0x7e/0xe0 [ 56.875222][ T3797] __x64_sys_openat+0x7c/0xa0 [ 56.879876][ T3797] do_syscall_64+0xa0/0x1b0 [ 56.884489][ T3797] ? clear_bhb_loop+0x35/0x90 [ 56.889162][ T3797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.895092][ T3797] RIP: 0033:0x7efca7975b59 [ 56.899536][ T3797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.919292][ T3797] RSP: 002b:00007efca8725048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.927747][ T3797] RAX: ffffffffffffffda RBX: 00007efca7b06038 RCX: 00007efca7975b59 [ 56.935805][ T3797] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 56.943746][ T3797] RBP: 00007efca87250a0 R08: 0000000000000000 R09: 0000000000000000 [ 56.951782][ T3797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.959989][ T3797] R13: 000000000000006e R14: 00007efca7b06038 R15: 00007fff4d0c9df8 [ 56.968018][ T3797] [ 56.973866][ T3797] [ 56.976364][ T3797] ============================================ [ 56.982859][ T3797] WARNING: possible recursive locking detected [ 56.989147][ T3797] 6.11.0-rc4-syzkaller #0 Not tainted [ 56.994496][ T3797] -------------------------------------------- [ 57.000619][ T3797] syz.0.15/3797 is trying to acquire lock: [ 57.006390][ T3797] ffffffff843112f8 (fw_lock){+.+.}-{3:3}, at: assign_fw+0x27/0x2a0 [ 57.014369][ T3797] [ 57.014369][ T3797] but task is already holding lock: [ 57.021698][ T3797] ffffffff843112f8 (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0xd6/0x150 [ 57.029839][ T3797] [ 57.029839][ T3797] other info that might help us debug this: [ 57.038151][ T3797] Possible unsafe locking scenario: [ 57.038151][ T3797] [ 57.045745][ T3797] CPU0 [ 57.049003][ T3797] ---- [ 57.052251][ T3797] lock(fw_lock); [ 57.056029][ T3797] lock(fw_lock); [ 57.059841][ T3797] [ 57.059841][ T3797] *** DEADLOCK *** [ 57.059841][ T3797] [ 57.067962][ T3797] May be due to missing lock nesting notation [ 57.067962][ T3797] [ 57.076516][ T3797] 5 locks held by syz.0.15/3797: [ 57.081416][ T3797] #0: ffffffff842faf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x2c/0x140 [ 57.089794][ T3797] #1: ffffffff841079a8 (system_transition_mutex){+.+.}-{3:3}, at: lock_system_sleep+0x2a/0x40 [ 57.100165][ T3797] #2: ffffffff8410d810 ((pm_chain_head).rwsem){++++}-{3:3}, at: blocking_notifier_call_chain_robust+0x40/0xc0 [ 57.111937][ T3797] #3: ffffffff843112f8 (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0xd6/0x150 [ 57.120550][ T3797] #4: ffffffff843108b0 (dpm_list_mtx){+.+.}-{3:3}, at: dpm_for_each_dev+0x24/0x70 [ 57.129887][ T3797] [ 57.129887][ T3797] stack backtrace: [ 57.135965][ T3797] CPU: 1 UID: 0 PID: 3797 Comm: syz.0.15 Not tainted 6.11.0-rc4-syzkaller #0 [ 57.144751][ T3797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 57.154859][ T3797] Call Trace: [ 57.158112][ T3797] [ 57.161117][ T3797] dump_stack_lvl+0xa3/0x100 [ 57.165679][ T3797] __lock_acquire+0x10b9/0x2530 [ 57.170512][ T3797] ? debug_check_no_obj_freed+0xd8/0x250 [ 57.176137][ T3797] ? debug_check_no_obj_freed+0xd8/0x250 [ 57.181772][ T3797] ? assign_fw+0x27/0x2a0 [ 57.186156][ T3797] lock_acquire+0xeb/0x270 [ 57.190713][ T3797] ? assign_fw+0x27/0x2a0 [ 57.195204][ T3797] ? assign_fw+0x27/0x2a0 [ 57.199496][ T3797] __mutex_lock+0x99/0x9a0 [ 57.203877][ T3797] ? assign_fw+0x27/0x2a0 [ 57.208202][ T3797] ? kmem_cache_free+0x1b7/0x390 [ 57.213193][ T3797] assign_fw+0x27/0x2a0 [ 57.217493][ T3797] _request_firmware+0x2e4/0x3f0 [ 57.222424][ T3797] __async_dev_cache_fw_image+0x4c/0x140 [ 57.228027][ T3797] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 57.234241][ T3797] async_schedule_node_domain+0x7f/0xb0 [ 57.239763][ T3797] dev_cache_fw_image+0x165/0x1a0 [ 57.244762][ T3797] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 57.250300][ T3797] dpm_for_each_dev+0x47/0x70 [ 57.254942][ T3797] fw_pm_notify+0xee/0x150 [ 57.259325][ T3797] ? __pfx_autoremove_wake_function+0x10/0x10 [ 57.265356][ T3797] notifier_call_chain+0x6d/0x100 [ 57.270370][ T3797] blocking_notifier_call_chain_robust+0x60/0xc0 [ 57.276680][ T3797] pm_notifier_call_chain_robust+0x1b/0x40 [ 57.282441][ T3797] snapshot_open+0x111/0x150 [ 57.286989][ T3797] misc_open+0x112/0x140 [ 57.291204][ T3797] chrdev_open+0x1e6/0x230 [ 57.295578][ T3797] ? __pfx_chrdev_open+0x10/0x10 [ 57.300473][ T3797] do_dentry_open+0x2a4/0x420 [ 57.305105][ T3797] vfs_open+0x28/0xd0 [ 57.309041][ T3797] path_openat+0xbfb/0xe10 [ 57.313433][ T3797] ? __virt_addr_valid+0xad/0x240 [ 57.318433][ T3797] ? __virt_addr_valid+0xad/0x240 [ 57.323415][ T3797] do_filp_open+0xad/0x150 [ 57.327805][ T3797] do_sys_openat2+0x7e/0xe0 [ 57.332448][ T3797] __x64_sys_openat+0x7c/0xa0 [ 57.337103][ T3797] do_syscall_64+0xa0/0x1b0 [ 57.341580][ T3797] ? clear_bhb_loop+0x35/0x90 [ 57.346216][ T3797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.352068][ T3797] RIP: 0033:0x7efca7975b59 [ 57.356446][ T3797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.376209][ T3797] RSP: 002b:00007efca8725048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.384588][ T3797] RAX: ffffffffffffffda RBX: 00007efca7b06038 RCX: 00007efca7975b59 [ 57.392537][ T3797] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 57.400734][ T3797] RBP: 00007efca87250a0 R08: 0000000000000000 R09: 0000000000000000 [ 57.408684][ T3797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.416705][ T3797] R13: 000000000000006e R14: 00007efca7b06038 R15: 00007fff4d0c9df8 [ 57.424745][ T3797]