Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 30.061862][ T6243] input: syz1 as /devices/virtual/input/input5 [ 30.064853][ T6240] input: syz1 as /devices/virtual/input/input2 [ 30.069047][ T6246] input: syz1 as /devices/virtual/input/input3 [ 30.071968][ T6244] input: syz1 as /devices/virtual/input/input4 [ 30.076165][ T6247] input: syz1 as /devices/virtual/input/input6 executing program [ 30.134893][ T6254] input: syz1 as /devices/virtual/input/input7 executing program [ 30.181285][ T6255] input: syz1 as /devices/virtual/input/input8 executing program [ 30.219681][ T6256] input: syz1 as /devices/virtual/input/input9 executing program [ 30.285490][ T6257] input: syz1 as /devices/virtual/input/input10 executing program [ 30.326211][ T6258] input: syz1 as /devices/virtual/input/input11 executing program [ 30.364646][ T6259] input: syz1 as /devices/virtual/input/input12 executing program [ 30.412894][ T6260] input: syz1 as /devices/virtual/input/input13 executing program [ 30.475135][ T6261] input: syz1 as /devices/virtual/input/input14 executing program [ 30.525490][ T6262] input: syz1 as /devices/virtual/input/input15 executing program [ 30.572369][ T6263] input: syz1 as /devices/virtual/input/input16 executing program [ 30.605873][ T6264] input: syz1 as /devices/virtual/input/input17 executing program [ 30.644939][ T6265] input: syz1 as /devices/virtual/input/input18 executing program [ 30.684901][ T6266] input: syz1 as /devices/virtual/input/input19 [ 30.724572][ T6267] input: syz1 as /devices/virtual/input/input20 executing program executing program [ 30.769011][ T6268] input: syz1 as /devices/virtual/input/input21 [ 30.802575][ T6267] [ 30.803163][ T6267] ====================================================== [ 30.803782][ T6269] input: syz1 as /devices/virtual/input/input22 [ 30.804761][ T6267] WARNING: possible circular locking dependency detected [ 30.804770][ T6267] 6.9.0-rc7-syzkaller-gfda5695d692c #0 Not tainted executing program [ 30.804778][ T6267] ------------------------------------------------------ [ 30.804782][ T6267] syz-executor416/6267 is trying to acquire lock: [ 30.804789][ T6267] ffff0000d8f4b070 (&newdev->mutex){+.+.}-{3:3}, at: uinput_request_submit+0x188/0x654 [ 30.815091][ T6267] [ 30.815091][ T6267] but task is already holding lock: [ 30.816870][ T6267] ffff0000d8f4b8b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x31c/0x834 [ 30.819005][ T6267] [ 30.819005][ T6267] which lock already depends on the new lock. [ 30.819005][ T6267] [ 30.821471][ T6267] [ 30.821471][ T6267] the existing dependency chain (in reverse order) is: [ 30.823538][ T6267] [ 30.823538][ T6267] -> #3 (&ff->mutex){+.+.}-{3:3}: [ 30.825384][ T6267] __mutex_lock_common+0x190/0x21a0 [ 30.826699][ T6267] mutex_lock_nested+0x2c/0x38 [ 30.828041][ T6267] input_ff_upload+0x31c/0x834 [ 30.829334][ T6267] evdev_ioctl_handler+0x1fd0/0x2d58 [ 30.830787][ T6267] evdev_ioctl+0x38/0x4c [ 30.831952][ T6267] __arm64_sys_ioctl+0x14c/0x1c8 [ 30.833335][ T6267] invoke_syscall+0x98/0x2b8 [ 30.834617][ T6267] el0_svc_common+0x130/0x23c [ 30.835888][ T6267] do_el0_svc+0x48/0x58 [ 30.837042][ T6267] el0_svc+0x54/0x168 [ 30.838158][ T6267] el0t_64_sync_handler+0x84/0xfc [ 30.839569][ T6267] el0t_64_sync+0x190/0x194 [ 30.840777][ T6267] [ 30.840777][ T6267] -> #2 (&evdev->mutex){+.+.}-{3:3}: [ 30.842624][ T6267] __mutex_lock_common+0x190/0x21a0 [ 30.844010][ T6267] mutex_lock_nested+0x2c/0x38 [ 30.845345][ T6267] evdev_cleanup+0x38/0x16c [ 30.846657][ T6267] evdev_disconnect+0x58/0xc0 [ 30.847937][ T6267] __input_unregister_device+0x31c/0x5c0 [ 30.849461][ T6267] input_unregister_device+0xb0/0xfc [ 30.850853][ T6267] uinput_destroy_device+0x5a4/0x79c [ 30.852294][ T6267] uinput_release+0x44/0x60 [ 30.853519][ T6267] __fput+0x30c/0x738 [ 30.854614][ T6267] ____fput+0x20/0x30 [ 30.855735][ T6267] task_work_run+0x230/0x2e0 [ 30.857012][ T6267] do_exit+0x4e4/0x1ac8 [ 30.858165][ T6267] do_group_exit+0x194/0x22c [ 30.859486][ T6267] pid_child_should_wake+0x0/0x1dc [ 30.860917][ T6267] invoke_syscall+0x98/0x2b8 [ 30.862207][ T6267] el0_svc_common+0x130/0x23c [ 30.863426][ T6267] do_el0_svc+0x48/0x58 [ 30.864641][ T6267] el0_svc+0x54/0x168 [ 30.865768][ T6267] el0t_64_sync_handler+0x84/0xfc [ 30.867178][ T6267] el0t_64_sync+0x190/0x194 [ 30.868463][ T6267] [ 30.868463][ T6267] -> #1 (input_mutex){+.+.}-{3:3}: [ 30.870284][ T6267] __mutex_lock_common+0x190/0x21a0 [ 30.871680][ T6267] mutex_lock_interruptible_nested+0x2c/0x38 [ 30.873265][ T6267] input_register_device+0x8dc/0xde8 [ 30.874694][ T6267] uinput_create_device+0x360/0x528 [ 30.876206][ T6267] uinput_ioctl_handler+0x8b0/0x16c0 [ 30.877637][ T6267] uinput_ioctl+0x38/0x4c [ 30.878853][ T6267] __arm64_sys_ioctl+0x14c/0x1c8 [ 30.880162][ T6267] invoke_syscall+0x98/0x2b8 [ 30.881455][ T6267] el0_svc_common+0x130/0x23c [ 30.882678][ T6267] do_el0_svc+0x48/0x58 [ 30.883902][ T6267] el0_svc+0x54/0x168 [ 30.884930][ T6267] el0t_64_sync_handler+0x84/0xfc [ 30.886446][ T6267] el0t_64_sync+0x190/0x194 [ 30.887706][ T6267] [ 30.887706][ T6267] -> #0 (&newdev->mutex){+.+.}-{3:3}: [ 30.889686][ T6267] __lock_acquire+0x3384/0x763c [ 30.891148][ T6267] lock_acquire+0x248/0x73c [ 30.892374][ T6267] __mutex_lock_common+0x190/0x21a0 [ 30.893808][ T6267] mutex_lock_interruptible_nested+0x2c/0x38 [ 30.895416][ T6267] uinput_request_submit+0x188/0x654 [ 30.896882][ T6267] uinput_dev_upload_effect+0x170/0x218 [ 30.898543][ T6267] input_ff_upload+0x49c/0x834 [ 30.900011][ T6267] evdev_ioctl_handler+0x1fd0/0x2d58 [ 30.901484][ T6267] evdev_ioctl+0x38/0x4c [ 30.902711][ T6267] __arm64_sys_ioctl+0x14c/0x1c8 [ 30.904064][ T6267] invoke_syscall+0x98/0x2b8 [ 30.905298][ T6267] el0_svc_common+0x130/0x23c [ 30.906563][ T6267] do_el0_svc+0x48/0x58 [ 30.907725][ T6267] el0_svc+0x54/0x168 [ 30.908854][ T6267] el0t_64_sync_handler+0x84/0xfc [ 30.910184][ T6267] el0t_64_sync+0x190/0x194 [ 30.911405][ T6267] [ 30.911405][ T6267] other info that might help us debug this: [ 30.911405][ T6267] [ 30.913916][ T6267] Chain exists of: [ 30.913916][ T6267] &newdev->mutex --> &evdev->mutex --> &ff->mutex [ 30.913916][ T6267] [ 30.916758][ T6267] Possible unsafe locking scenario: [ 30.916758][ T6267] [ 30.918602][ T6267] CPU0 CPU1 [ 30.919900][ T6267] ---- ---- [ 30.921147][ T6267] lock(&ff->mutex); [ 30.922071][ T6267] lock(&evdev->mutex); [ 30.923807][ T6267] lock(&ff->mutex); [ 30.925460][ T6267] lock(&newdev->mutex); [ 30.926469][ T6267] [ 30.926469][ T6267] *** DEADLOCK *** [ 30.926469][ T6267] [ 30.928394][ T6267] 2 locks held by syz-executor416/6267: [ 30.929730][ T6267] #0: ffff0000d85be110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_ioctl_handler+0x11c/0x2d58 [ 30.932157][ T6267] #1: ffff0000d8f4b8b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x31c/0x834 [ 30.934544][ T6267] [ 30.934544][ T6267] stack backtrace: [ 30.935988][ T6267] CPU: 0 PID: 6267 Comm: syz-executor416 Not tainted 6.9.0-rc7-syzkaller-gfda5695d692c #0 [ 30.938542][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 30.941111][ T6267] Call trace: [ 30.941931][ T6267] dump_backtrace+0x1b8/0x1e4 [ 30.943076][ T6267] show_stack+0x2c/0x3c [ 30.944028][ T6267] dump_stack_lvl+0xe4/0x150 [ 30.945179][ T6267] dump_stack+0x1c/0x28 [ 30.946193][ T6267] print_circular_bug+0x150/0x1b8 [ 30.947359][ T6267] check_noncircular+0x310/0x404 [ 30.948609][ T6267] __lock_acquire+0x3384/0x763c [ 30.949862][ T6267] lock_acquire+0x248/0x73c [ 30.950995][ T6267] __mutex_lock_common+0x190/0x21a0 [ 30.952342][ T6267] mutex_lock_interruptible_nested+0x2c/0x38 [ 30.953821][ T6267] uinput_request_submit+0x188/0x654 [ 30.955075][ T6267] uinput_dev_upload_effect+0x170/0x218 [ 30.956354][ T6267] input_ff_upload+0x49c/0x834 [ 30.957606][ T6267] evdev_ioctl_handler+0x1fd0/0x2d58 [ 30.958929][ T6267] evdev_ioctl+0x38/0x4c [ 30.960068][ T6267] __arm64_sys_ioctl+0x14c/0x1c8 [ 30.961353][ T6267] invoke_syscall+0x98/0x2b8 [ 30.962469][ T6267] el0_svc_common+0x130/0x23c [ 30.963574][ T6267] do_el0_svc+0x48/0x58 [ 30.964637][ T6267] el0_svc+0x54/0x168 [ 30.965628][ T6267] el0t_64_sync_handler+0x84/0xfc [ 30.966912][ T6267] el0t_64_sync+0x190/0x194 executing program [ 30.981807][ T6270] input: syz1 as /devices/virtual/input/input23 executing program [ 31.023160][ T6271] input: syz1 as /devices/virtual/input/input24 executing program [ 35.842399][ T6272] input: syz1 as /devices/virtual/input/input25 executing program [ 35.892643][ T6273] input: syz1 as /devices/virtual/input/input26 executing program [ 36.082267][ T6274] input: syz1 as /devices/virtual/input/input27 executing program [ 36.122698][ T6275] input: syz1 as /devices/virtual/input/input28