Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. executing program executing program executing program [ 30.905257][ T6245] input: syz1 as /devices/virtual/input/input2 [ 30.905381][ T6248] input: syz1 as /devices/virtual/input/input3 [ 30.911979][ T6249] input: syz1 as /devices/virtual/input/input4 executing program executing program [ 30.929592][ T6251] input: syz1 as /devices/virtual/input/input5 [ 30.937073][ T6255] input: syz1 as /devices/virtual/input/input6 executing program [ 30.971787][ T6258] input: syz1 as /devices/virtual/input/input7 executing program [ 31.010890][ T6259] input: syz1 as /devices/virtual/input/input8 executing program [ 31.050193][ T6260] input: syz1 as /devices/virtual/input/input9 executing program [ 31.101960][ T6261] input: syz1 as /devices/virtual/input/input10 executing program [ 31.146025][ T6262] input: syz1 as /devices/virtual/input/input11 executing program [ 31.191506][ T6263] input: syz1 as /devices/virtual/input/input12 executing program [ 31.239991][ T6264] input: syz1 as /devices/virtual/input/input13 executing program [ 31.289359][ T6265] input: syz1 as /devices/virtual/input/input14 executing program [ 31.328886][ T6266] input: syz1 as /devices/virtual/input/input15 executing program [ 31.381800][ T6265] [ 31.382425][ T6265] ====================================================== [ 31.384221][ T6265] WARNING: possible circular locking dependency detected [ 31.386050][ T6265] 6.9.0-rc7-syzkaller-gfda5695d692c #0 Not tainted [ 31.387992][ T6265] ------------------------------------------------------ [ 31.388398][ T6267] input: syz1 as /devices/virtual/input/input16 [ 31.390009][ T6265] syz-executor372/6265 is trying to acquire lock: [ 31.390022][ T6265] ffff0000dacd0870 (&newdev->mutex){+.+.}-{3:3}, at: uinput_request_submit+0x188/0x654 [ 31.395798][ T6265] [ 31.395798][ T6265] but task is already holding lock: [ 31.397716][ T6265] ffff0000dacd10b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x31c/0x834 [ 31.400039][ T6265] [ 31.400039][ T6265] which lock already depends on the new lock. [ 31.400039][ T6265] [ 31.402838][ T6265] [ 31.402838][ T6265] the existing dependency chain (in reverse order) is: [ 31.405267][ T6265] [ 31.405267][ T6265] -> #3 (&ff->mutex){+.+.}-{3:3}: [ 31.407171][ T6265] __mutex_lock_common+0x190/0x21a0 [ 31.408646][ T6265] mutex_lock_nested+0x2c/0x38 [ 31.410020][ T6265] input_ff_upload+0x31c/0x834 [ 31.411443][ T6265] evdev_ioctl_handler+0x1fd0/0x2d58 [ 31.413069][ T6265] evdev_ioctl+0x38/0x4c [ 31.414311][ T6265] __arm64_sys_ioctl+0x14c/0x1c8 [ 31.415752][ T6265] invoke_syscall+0x98/0x2b8 [ 31.417176][ T6265] el0_svc_common+0x130/0x23c [ 31.418590][ T6265] do_el0_svc+0x48/0x58 [ 31.419853][ T6265] el0_svc+0x54/0x168 [ 31.421010][ T6265] el0t_64_sync_handler+0x84/0xfc [ 31.422476][ T6265] el0t_64_sync+0x190/0x194 [ 31.423781][ T6265] [ 31.423781][ T6265] -> #2 (&evdev->mutex){+.+.}-{3:3}: [ 31.425849][ T6265] __mutex_lock_common+0x190/0x21a0 [ 31.427337][ T6265] mutex_lock_nested+0x2c/0x38 [ 31.428724][ T6265] evdev_cleanup+0x38/0x16c [ 31.430054][ T6265] evdev_disconnect+0x58/0xc0 [ 31.431495][ T6265] __input_unregister_device+0x31c/0x5c0 [ 31.433155][ T6265] input_unregister_device+0xb0/0xfc [ 31.434697][ T6265] uinput_destroy_device+0x5a4/0x79c [ 31.436194][ T6265] uinput_release+0x44/0x60 [ 31.437519][ T6265] __fput+0x30c/0x738 [ 31.438787][ T6265] ____fput+0x20/0x30 [ 31.440038][ T6265] task_work_run+0x230/0x2e0 [ 31.441328][ T6265] do_exit+0x4e4/0x1ac8 [ 31.442579][ T6265] do_group_exit+0x194/0x22c [ 31.443970][ T6265] pid_child_should_wake+0x0/0x1dc [ 31.445433][ T6265] invoke_syscall+0x98/0x2b8 [ 31.446829][ T6265] el0_svc_common+0x130/0x23c [ 31.448239][ T6265] do_el0_svc+0x48/0x58 [ 31.449416][ T6265] el0_svc+0x54/0x168 [ 31.450648][ T6265] el0t_64_sync_handler+0x84/0xfc [ 31.452130][ T6265] el0t_64_sync+0x190/0x194 [ 31.453502][ T6265] [ 31.453502][ T6265] -> #1 (input_mutex){+.+.}-{3:3}: [ 31.455426][ T6265] __mutex_lock_common+0x190/0x21a0 [ 31.456959][ T6265] mutex_lock_interruptible_nested+0x2c/0x38 [ 31.458705][ T6265] input_register_device+0x8dc/0xde8 [ 31.460245][ T6265] uinput_create_device+0x360/0x528 [ 31.461829][ T6265] uinput_ioctl_handler+0x8b0/0x16c0 [ 31.463385][ T6265] uinput_ioctl+0x38/0x4c [ 31.464643][ T6265] __arm64_sys_ioctl+0x14c/0x1c8 [ 31.466042][ T6265] invoke_syscall+0x98/0x2b8 [ 31.467492][ T6265] el0_svc_common+0x130/0x23c [ 31.468902][ T6265] do_el0_svc+0x48/0x58 [ 31.470092][ T6265] el0_svc+0x54/0x168 [ 31.471290][ T6265] el0t_64_sync_handler+0x84/0xfc [ 31.472798][ T6265] el0t_64_sync+0x190/0x194 [ 31.474187][ T6265] [ 31.474187][ T6265] -> #0 (&newdev->mutex){+.+.}-{3:3}: [ 31.476264][ T6265] __lock_acquire+0x3384/0x763c [ 31.477719][ T6265] lock_acquire+0x248/0x73c [ 31.479015][ T6265] __mutex_lock_common+0x190/0x21a0 [ 31.480545][ T6265] mutex_lock_interruptible_nested+0x2c/0x38 [ 31.482232][ T6265] uinput_request_submit+0x188/0x654 [ 31.483816][ T6265] uinput_dev_upload_effect+0x170/0x218 [ 31.485426][ T6265] input_ff_upload+0x49c/0x834 [ 31.487039][ T6265] evdev_ioctl_handler+0x1fd0/0x2d58 [ 31.488828][ T6265] evdev_ioctl+0x38/0x4c [ 31.490042][ T6265] __arm64_sys_ioctl+0x14c/0x1c8 [ 31.491436][ T6265] invoke_syscall+0x98/0x2b8 [ 31.492834][ T6265] el0_svc_common+0x130/0x23c [ 31.494196][ T6265] do_el0_svc+0x48/0x58 [ 31.495437][ T6265] el0_svc+0x54/0x168 [ 31.496569][ T6265] el0t_64_sync_handler+0x84/0xfc [ 31.498044][ T6265] el0t_64_sync+0x190/0x194 [ 31.499485][ T6265] [ 31.499485][ T6265] other info that might help us debug this: [ 31.499485][ T6265] [ 31.502264][ T6265] Chain exists of: [ 31.502264][ T6265] &newdev->mutex --> &evdev->mutex --> &ff->mutex [ 31.502264][ T6265] [ 31.505657][ T6265] Possible unsafe locking scenario: [ 31.505657][ T6265] [ 31.507615][ T6265] CPU0 CPU1 [ 31.509047][ T6265] ---- ---- [ 31.510548][ T6265] lock(&ff->mutex); [ 31.511541][ T6265] lock(&evdev->mutex); [ 31.513318][ T6265] lock(&ff->mutex); [ 31.515037][ T6265] lock(&newdev->mutex); [ 31.516213][ T6265] [ 31.516213][ T6265] *** DEADLOCK *** [ 31.516213][ T6265] [ 31.518450][ T6265] 2 locks held by syz-executor372/6265: [ 31.519893][ T6265] #0: ffff0000d8c3d110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_ioctl_handler+0x11c/0x2d58 [ 31.522597][ T6265] #1: ffff0000dacd10b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x31c/0x834 [ 31.525087][ T6265] [ 31.525087][ T6265] stack backtrace: [ 31.526720][ T6265] CPU: 0 PID: 6265 Comm: syz-executor372 Not tainted 6.9.0-rc7-syzkaller-gfda5695d692c #0 [ 31.529393][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 31.532047][ T6265] Call trace: [ 31.532898][ T6265] dump_backtrace+0x1b8/0x1e4 [ 31.534051][ T6265] show_stack+0x2c/0x3c [ 31.535214][ T6265] dump_stack_lvl+0xe4/0x150 [ 31.536444][ T6265] dump_stack+0x1c/0x28 [ 31.537520][ T6265] print_circular_bug+0x150/0x1b8 [ 31.538840][ T6265] check_noncircular+0x310/0x404 [ 31.540134][ T6265] __lock_acquire+0x3384/0x763c [ 31.541478][ T6265] lock_acquire+0x248/0x73c [ 31.542664][ T6265] __mutex_lock_common+0x190/0x21a0 [ 31.544065][ T6265] mutex_lock_interruptible_nested+0x2c/0x38 [ 31.545727][ T6265] uinput_request_submit+0x188/0x654 [ 31.547092][ T6265] uinput_dev_upload_effect+0x170/0x218 [ 31.548659][ T6265] input_ff_upload+0x49c/0x834 [ 31.549986][ T6265] evdev_ioctl_handler+0x1fd0/0x2d58 [ 31.551457][ T6265] evdev_ioctl+0x38/0x4c [ 31.552662][ T6265] __arm64_sys_ioctl+0x14c/0x1c8 [ 31.554052][ T6265] invoke_syscall+0x98/0x2b8 [ 31.555270][ T6265] el0_svc_common+0x130/0x23c [ 31.556561][ T6265] do_el0_svc+0x48/0x58 [ 31.557736][ T6265] el0_svc+0x54/0x168 [ 31.558848][ T6265] el0t_64_sync_handler+0x84/0xfc [ 31.560198][ T6265] el0t_64_sync+0x190/0x194 executing program [ 31.587023][ T6268] input: syz1 as /devices/virtual/input/input17 executing program [ 31.646240][ T6269] input: syz1 as /devices/virtual/input/input18 executing program [ 36.406275][ T6270] input: syz1 as /devices/virtual/input/input19 executing program [ 36.455785][ T6271] input: syz1 as /devices/virtual/input/input20 executing program [ 36.665643][ T6272] input: syz1 as /devices/virtual/input/input21 executing program [ 36.725999][ T6273] input: syz1 as /devices/virtual/input/input22