Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 34.786424][ T4299] input: syz1 as /devices/virtual/input/input3 [ 34.793287][ T4300] input: syz1 as /devices/virtual/input/input4 [ 34.793957][ T4294] input: syz1 as /devices/virtual/input/input2 [ 34.795087][ T4301] input: syz1 as /devices/virtual/input/input5 [ 34.805243][ T4298] input: syz1 as /devices/virtual/input/input6 executing program [ 34.858699][ T4305] input: syz1 as /devices/virtual/input/input7 executing program [ 34.897250][ T4306] input: syz1 as /devices/virtual/input/input8 executing program [ 34.947253][ T4307] input: syz1 as /devices/virtual/input/input9 executing program [ 34.982784][ T4308] input: syz1 as /devices/virtual/input/input10 executing program [ 35.023930][ T4309] input: syz1 as /devices/virtual/input/input11 executing program [ 35.068237][ T4310] input: syz1 as /devices/virtual/input/input12 executing program [ 35.099904][ T4311] input: syz1 as /devices/virtual/input/input13 executing program [ 35.129704][ T4312] input: syz1 as /devices/virtual/input/input14 executing program [ 35.171466][ T4313] input: syz1 as /devices/virtual/input/input15 executing program [ 35.222778][ T4314] input: syz1 as /devices/virtual/input/input16 executing program [ 35.273931][ T4315] input: syz1 as /devices/virtual/input/input17 executing program [ 35.315164][ T4316] input: syz1 as /devices/virtual/input/input18 executing program [ 35.363390][ T4317] input: syz1 as /devices/virtual/input/input19 executing program [ 35.406909][ T4318] input: syz1 as /devices/virtual/input/input20 executing program [ 35.451940][ T4319] input: syz1 as /devices/virtual/input/input21 executing program [ 35.480142][ T4320] input: syz1 as /devices/virtual/input/input22 executing program [ 35.556542][ T4321] input: syz1 as /devices/virtual/input/input23 executing program [ 35.589417][ T4322] input: syz1 as /devices/virtual/input/input24 executing program [ 35.631559][ T4323] input: syz1 as /devices/virtual/input/input25 executing program [ 35.679138][ T4324] input: syz1 as /devices/virtual/input/input26 [ 35.715588][ T4323] [ 35.716257][ T4323] ====================================================== [ 35.718154][ T4323] WARNING: possible circular locking dependency detected [ 35.719967][ T4323] 6.1.134-syzkaller #0 Not tainted [ 35.721202][ T4323] ------------------------------------------------------ [ 35.721911][ T4325] input: syz1 as /devices/virtual/input/input27 [ 35.723080][ T4323] syz-executor432/4323 is trying to acquire lock: [ 35.723093][ T4323] ffff0000d4a4a870 (&newdev->mutex){+.+.}-{3:3}, at: uinput_request_submit+0x188/0x654 [ 35.723132][ T4323] [ 35.723132][ T4323] but task is already holding lock: [ 35.723135][ T4323] ffff0000d4a4b0b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x31c/0x834 [ 35.723162][ T4323] [ 35.723162][ T4323] which lock already depends on the new lock. [ 35.723162][ T4323] [ 35.723165][ T4323] [ 35.723165][ T4323] the existing dependency chain (in reverse order) is: [ 35.723169][ T4323] executing program [ 35.723169][ T4323] -> #3 (&ff->mutex){+.+.}-{3:3}: [ 35.723185][ T4323] __mutex_lock_common+0x190/0x21a0 [ 35.723197][ T4323] mutex_lock_nested+0x38/0x44 [ 35.723206][ T4323] input_ff_upload+0x31c/0x834 [ 35.723215][ T4323] evdev_ioctl_handler+0x1fd8/0x2d60 [ 35.723227][ T4323] evdev_ioctl+0x38/0x4c [ 35.723237][ T4323] __arm64_sys_ioctl+0x14c/0x1c8 [ 35.748519][ T4323] invoke_syscall+0x98/0x2bc [ 35.750025][ T4323] el0_svc_common+0x138/0x258 [ 35.751446][ T4323] do_el0_svc+0x58/0x13c [ 35.752717][ T4323] el0_svc+0x58/0x168 [ 35.753923][ T4323] el0t_64_sync_handler+0x84/0xf0 [ 35.755347][ T4323] el0t_64_sync+0x18c/0x190 [ 35.756648][ T4323] [ 35.756648][ T4323] -> #2 (&evdev->mutex){+.+.}-{3:3}: [ 35.758644][ T4323] __mutex_lock_common+0x190/0x21a0 [ 35.760170][ T4323] mutex_lock_nested+0x38/0x44 [ 35.761589][ T4323] evdev_cleanup+0x38/0x16c [ 35.762896][ T4323] evdev_disconnect+0x58/0xc0 [ 35.764176][ T4323] __input_unregister_device+0x31c/0x5c0 [ 35.765281][ T4323] input_unregister_device+0xb0/0xfc [ 35.766844][ T4323] uinput_destroy_device+0x5a4/0x79c [ 35.768337][ T4323] uinput_release+0x44/0x60 [ 35.769660][ T4323] __fput+0x1c8/0x7c8 [ 35.770870][ T4323] ____fput+0x20/0x30 [ 35.772053][ T4323] task_work_run+0x240/0x2f0 [ 35.773395][ T4323] do_exit+0x550/0x1a84 [ 35.774572][ T4323] do_group_exit+0x194/0x22c [ 35.775940][ T4323] __wake_up_parent+0x0/0x60 [ 35.777284][ T4323] invoke_syscall+0x98/0x2bc [ 35.778734][ T4323] el0_svc_common+0x138/0x258 [ 35.780067][ T4323] do_el0_svc+0x58/0x13c [ 35.781325][ T4323] el0_svc+0x58/0x168 [ 35.782479][ T4323] el0t_64_sync_handler+0x84/0xf0 [ 35.783953][ T4323] el0t_64_sync+0x18c/0x190 [ 35.785344][ T4323] [ 35.785344][ T4323] -> #1 (input_mutex){+.+.}-{3:3}: [ 35.787381][ T4323] __mutex_lock_common+0x190/0x21a0 [ 35.788881][ T4323] mutex_lock_interruptible_nested+0x38/0x44 [ 35.790639][ T4323] input_register_device+0x914/0xf8c [ 35.792264][ T4323] uinput_create_device+0x360/0x528 [ 35.793793][ T4323] uinput_ioctl_handler+0x8b0/0x16c0 [ 35.795343][ T4323] uinput_ioctl+0x38/0x4c [ 35.796720][ T4323] __arm64_sys_ioctl+0x14c/0x1c8 [ 35.798190][ T4323] invoke_syscall+0x98/0x2bc [ 35.799580][ T4323] el0_svc_common+0x138/0x258 [ 35.800960][ T4323] do_el0_svc+0x58/0x13c [ 35.802413][ T4323] el0_svc+0x58/0x168 [ 35.803701][ T4323] el0t_64_sync_handler+0x84/0xf0 [ 35.805212][ T4323] el0t_64_sync+0x18c/0x190 [ 35.806568][ T4323] [ 35.806568][ T4323] -> #0 (&newdev->mutex){+.+.}-{3:3}: [ 35.808590][ T4323] __lock_acquire+0x3338/0x7680 [ 35.809953][ T4323] lock_acquire+0x26c/0x7cc [ 35.811275][ T4323] __mutex_lock_common+0x190/0x21a0 [ 35.812806][ T4323] mutex_lock_interruptible_nested+0x38/0x44 [ 35.814598][ T4323] uinput_request_submit+0x188/0x654 [ 35.816059][ T4323] uinput_dev_upload_effect+0x170/0x218 [ 35.817712][ T4323] input_ff_upload+0x49c/0x834 [ 35.819202][ T4323] evdev_ioctl_handler+0x1fd8/0x2d60 [ 35.820634][ T4323] evdev_ioctl+0x38/0x4c [ 35.821885][ T4323] __arm64_sys_ioctl+0x14c/0x1c8 [ 35.823212][ T4323] invoke_syscall+0x98/0x2bc [ 35.824615][ T4323] el0_svc_common+0x138/0x258 [ 35.826000][ T4323] do_el0_svc+0x58/0x13c [ 35.827366][ T4323] el0_svc+0x58/0x168 [ 35.828565][ T4323] el0t_64_sync_handler+0x84/0xf0 [ 35.830071][ T4323] el0t_64_sync+0x18c/0x190 [ 35.831420][ T4323] [ 35.831420][ T4323] other info that might help us debug this: [ 35.831420][ T4323] [ 35.834288][ T4323] Chain exists of: [ 35.834288][ T4323] &newdev->mutex --> &evdev->mutex --> &ff->mutex [ 35.834288][ T4323] [ 35.837727][ T4323] Possible unsafe locking scenario: [ 35.837727][ T4323] [ 35.839731][ T4323] CPU0 CPU1 [ 35.841103][ T4323] ---- ---- [ 35.842533][ T4323] lock(&ff->mutex); [ 35.843800][ T4323] lock(&evdev->mutex); [ 35.845599][ T4323] lock(&ff->mutex); [ 35.847335][ T4323] lock(&newdev->mutex); [ 35.848479][ T4323] [ 35.848479][ T4323] *** DEADLOCK *** [ 35.848479][ T4323] [ 35.850544][ T4323] 2 locks held by syz-executor432/4323: [ 35.851978][ T4323] #0: ffff0000d88ef110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_ioctl_handler+0x11c/0x2d60 [ 35.854619][ T4323] #1: ffff0000d4a4b0b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x31c/0x834 [ 35.857070][ T4323] [ 35.857070][ T4323] stack backtrace: [ 35.858764][ T4323] CPU: 0 PID: 4323 Comm: syz-executor432 Not tainted 6.1.134-syzkaller #0 [ 35.860957][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 35.863641][ T4323] Call trace: [ 35.864466][ T4323] dump_backtrace+0x1c8/0x1f4 [ 35.865781][ T4323] show_stack+0x2c/0x3c [ 35.866936][ T4323] dump_stack_lvl+0x108/0x170 [ 35.868139][ T4323] dump_stack+0x1c/0x105c [ 35.869414][ T4323] print_circular_bug+0x150/0x1b8 [ 35.870822][ T4323] check_noncircular+0x2cc/0x378 [ 35.872422][ T4323] __lock_acquire+0x3338/0x7680 [ 35.873771][ T4323] lock_acquire+0x26c/0x7cc [ 35.875038][ T4323] __mutex_lock_common+0x190/0x21a0 [ 35.876476][ T4323] mutex_lock_interruptible_nested+0x38/0x44 [ 35.878196][ T4323] uinput_request_submit+0x188/0x654 [ 35.879662][ T4323] uinput_dev_upload_effect+0x170/0x218 [ 35.881513][ T4323] input_ff_upload+0x49c/0x834 [ 35.882959][ T4323] evdev_ioctl_handler+0x1fd8/0x2d60 [ 35.884523][ T4323] evdev_ioctl+0x38/0x4c [ 35.885714][ T4323] __arm64_sys_ioctl+0x14c/0x1c8 [ 35.887109][ T4323] invoke_syscall+0x98/0x2bc [ 35.888468][ T4323] el0_svc_common+0x138/0x258 [ 35.889847][ T4323] do_el0_svc+0x58/0x13c [ 35.891144][ T4323] el0_svc+0x58/0x168 [ 35.892464][ T4323] el0t_64_sync_handler+0x84/0xf0 [ 35.893855][ T4323] el0t_64_sync+0x18c/0x190 executing program [ 35.936035][ T4326] input: syz1 as /devices/virtual/input/input28 executing program [ 35.975916][ T4328] input: syz1 as /devices/virtual/input/input29 executing program [ 40.756545][ T4330] input: syz1 as /devices/virtual/input/input30 executing program [ 40.796914][ T4331] input: syz1 as /devices/virtual/input/input31 executing program [ 41.015914][ T4332] input: syz1 as /devices/virtual/input/input32 executing program [ 41.058936][ T4333] input: syz1 as /devices/virtual/input/input33