Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. 2025/05/17 07:38:10 ignoring optional flag "sandboxArg"="0" 2025/05/17 07:38:10 ignoring optional flag "type"="gce" 2025/05/17 07:38:10 parsed 1 programs [ 63.100242][ T3433] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.017747][ T3477] veth0_vlan: entered promiscuous mode [ 65.356990][ T1835] veth0_vlan: left promiscuous mode 2025/05/17 07:38:14 executed programs: 0 [ 66.422828][ T3664] veth0_vlan: entered promiscuous mode [ 66.934561][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.094420][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 67.102633][ T11] usb 1-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 67.111751][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.119737][ T11] usb 1-1: Product: syz [ 67.123949][ T11] usb 1-1: Manufacturer: syz [ 67.128534][ T11] usb 1-1: SerialNumber: syz [ 67.134537][ T11] usb 1-1: config 0 descriptor?? [ 67.342152][ T11] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 67.375411][ T11] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 67.383397][ T11] dib0700: firmware download failed at 7 with -22 [ 67.693613][ T3842] FAULT_INJECTION: forcing a failure. [ 67.693613][ T3842] name failslab, interval 1, probability 0, space 0, times 1 [ 67.706527][ T3842] CPU: 1 UID: 0 PID: 3842 Comm: syz.0.15 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(undef) [ 67.706532][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.706534][ T3842] Call Trace: [ 67.706537][ T3842] [ 67.706538][ T3842] dump_stack_lvl+0xad/0x110 [ 67.706549][ T3842] should_fail_ex+0x1aa/0x1c0 [ 67.706555][ T3842] should_failslab+0x51/0x70 [ 67.706559][ T3842] __kmalloc_cache_noprof+0x5f/0x3e0 [ 67.706564][ T3842] ? async_schedule_node_domain+0x2b/0xb0 [ 67.706570][ T3842] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 67.706577][ T3842] async_schedule_node_domain+0x2b/0xb0 [ 67.706583][ T3842] dev_cache_fw_image+0x15f/0x190 [ 67.706587][ T3842] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 67.706592][ T3842] dpm_for_each_dev+0x45/0x70 [ 67.706598][ T3842] fw_pm_notify+0xed/0x150 [ 67.706601][ T3842] ? __pfx_autoremove_wake_function+0x10/0x10 [ 67.706606][ T3842] notifier_call_chain+0x74/0x100 [ 67.706615][ T3842] blocking_notifier_call_chain_robust+0x61/0xc0 [ 67.706623][ T3842] pm_notifier_call_chain_robust+0x1b/0x40 [ 67.706629][ T3842] snapshot_open+0x109/0x150 [ 67.706632][ T3842] misc_open+0xf5/0x120 [ 67.706637][ T3842] chrdev_open+0xbe/0x240 [ 67.706641][ T3842] ? __pfx_chrdev_open+0x10/0x10 [ 67.706643][ T3842] do_dentry_open+0x396/0x4f0 [ 67.706648][ T3842] vfs_open+0x27/0xe0 [ 67.706651][ T3842] path_openat+0xc6c/0xef0 [ 67.706654][ T3842] ? __lock_acquire+0x4eb/0x20e0 [ 67.706658][ T3842] ? __might_fault+0x3d/0x70 [ 67.706666][ T3842] do_filp_open+0xc6/0x180 [ 67.706676][ T3842] do_sys_openat2+0x7c/0xd0 [ 67.706680][ T3842] __x64_sys_openat+0x7b/0xa0 [ 67.706684][ T3842] do_syscall_64+0xa4/0x180 [ 67.706689][ T3842] ? clear_bhb_loop+0x60/0xb0 [ 67.706693][ T3842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.706695][ T3842] RIP: 0033:0x7fcb66b75b59 [ 67.706699][ T3842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.706701][ T3842] RSP: 002b:00007fcb665ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 67.706704][ T3842] RAX: ffffffffffffffda RBX: 00007fcb66d06038 RCX: 00007fcb66b75b59 [ 67.706705][ T3842] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 67.706707][ T3842] RBP: 00007fcb665ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 67.706708][ T3842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.706709][ T3842] R13: 000000000000006e R14: 00007fcb66d06038 R15: 00007fffdeeaeb38 [ 67.706715][ T3842] [ 67.707507][ T3842] [ 67.960910][ T3842] ============================================ [ 67.967043][ T3842] WARNING: possible recursive locking detected [ 67.973170][ T3842] 6.15.0-rc6-syzkaller #0 Not tainted [ 67.978543][ T3842] -------------------------------------------- [ 67.984655][ T3842] syz.0.15/3842 is trying to acquire lock: [ 67.990423][ T3842] ffffffff84329c70 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x27/0x2b0 [ 67.998293][ T3842] [ 67.998293][ T3842] but task is already holding lock: [ 68.005623][ T3842] ffffffff84329c70 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0xd5/0x150 [ 68.013840][ T3842] [ 68.013840][ T3842] other info that might help us debug this: [ 68.021862][ T3842] Possible unsafe locking scenario: [ 68.021862][ T3842] [ 68.029431][ T3842] CPU0 [ 68.032677][ T3842] ---- [ 68.035925][ T3842] lock(fw_lock); [ 68.039610][ T3842] lock(fw_lock); [ 68.043294][ T3842] [ 68.043294][ T3842] *** DEADLOCK *** [ 68.043294][ T3842] [ 68.051402][ T3842] May be due to missing lock nesting notation [ 68.051402][ T3842] [ 68.059706][ T3842] 5 locks held by syz.0.15/3842: [ 68.064694][ T3842] #0: ffffffff84312bd0 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x2a/0x120 [ 68.073079][ T3842] #1: ffffffff84108c38 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x2a/0x40 [ 68.083425][ T3842] #2: ffffffff84110ab8 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0x41/0xc0 [ 68.095223][ T3842] #3: ffffffff84329c70 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0xd5/0x150 [ 68.103785][ T3842] #4: ffffffff843292d0 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x22/0x70 [ 68.113049][ T3842] [ 68.113049][ T3842] stack backtrace: [ 68.118905][ T3842] CPU: 0 UID: 0 PID: 3842 Comm: syz.0.15 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(undef) [ 68.118909][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.118911][ T3842] Call Trace: [ 68.118915][ T3842] [ 68.118917][ T3842] dump_stack_lvl+0xad/0x110 [ 68.118922][ T3842] print_deadlock_bug+0x210/0x220 [ 68.118926][ T3842] __lock_acquire+0x1084/0x20e0 [ 68.118930][ T3842] ? debug_check_no_obj_freed+0xfd/0x260 [ 68.118936][ T3842] ? assign_fw+0x27/0x2b0 [ 68.118941][ T3842] lock_acquire+0xe9/0x270 [ 68.118943][ T3842] ? assign_fw+0x27/0x2b0 [ 68.118948][ T3842] ? assign_fw+0x27/0x2b0 [ 68.118951][ T3842] __mutex_lock+0xab/0xb20 [ 68.118956][ T3842] ? assign_fw+0x27/0x2b0 [ 68.118959][ T3842] ? kmem_cache_free+0x1bb/0x3d0 [ 68.118965][ T3842] assign_fw+0x27/0x2b0 [ 68.118969][ T3842] _request_firmware+0x3fb/0x480 [ 68.118974][ T3842] __async_dev_cache_fw_image+0x4b/0x140 [ 68.118977][ T3842] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 68.118979][ T3842] async_schedule_node_domain+0x7f/0xb0 [ 68.118985][ T3842] dev_cache_fw_image+0x15f/0x190 [ 68.118987][ T3842] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 68.118990][ T3842] dpm_for_each_dev+0x45/0x70 [ 68.118993][ T3842] fw_pm_notify+0xed/0x150 [ 68.118995][ T3842] ? __pfx_autoremove_wake_function+0x10/0x10 [ 68.118999][ T3842] notifier_call_chain+0x74/0x100 [ 68.119004][ T3842] blocking_notifier_call_chain_robust+0x61/0xc0 [ 68.119009][ T3842] pm_notifier_call_chain_robust+0x1b/0x40 [ 68.119014][ T3842] snapshot_open+0x109/0x150 [ 68.119016][ T3842] misc_open+0xf5/0x120 [ 68.119021][ T3842] chrdev_open+0xbe/0x240 [ 68.119024][ T3842] ? __pfx_chrdev_open+0x10/0x10 [ 68.119027][ T3842] do_dentry_open+0x396/0x4f0 [ 68.119031][ T3842] vfs_open+0x27/0xe0 [ 68.119034][ T3842] path_openat+0xc6c/0xef0 [ 68.119038][ T3842] ? __lock_acquire+0x4eb/0x20e0 [ 68.119041][ T3842] ? __might_fault+0x3d/0x70 [ 68.119047][ T3842] do_filp_open+0xc6/0x180 [ 68.119054][ T3842] do_sys_openat2+0x7c/0xd0 [ 68.119057][ T3842] __x64_sys_openat+0x7b/0xa0 [ 68.119061][ T3842] do_syscall_64+0xa4/0x180 [ 68.119066][ T3842] ? clear_bhb_loop+0x60/0xb0 [ 68.119070][ T3842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.119074][ T3842] RIP: 0033:0x7fcb66b75b59 [ 68.119078][ T3842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.119080][ T3842] RSP: 002b:00007fcb665ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 68.119083][ T3842] RAX: ffffffffffffffda RBX: 00007fcb66d06038 RCX: 00007fcb66b75b59 [ 68.119085][ T3842] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 68.119086][ T3842] RBP: 00007fcb665ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 68.119088][ T3842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.119089][ T3842] R13: 000000000000006e R14: 00007fcb66d06038 R15: 00007fffdeeaeb38 [ 68.119092][ T3842]