Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. 2025/10/23 08:18:33 parsed 1 programs [ 89.447285][ T5832] cgroup: Unknown subsys name 'net' [ 89.601854][ T5832] cgroup: Unknown subsys name 'cpuset' [ 89.611442][ T5832] cgroup: Unknown subsys name 'rlimit' [ 91.392749][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.070176][ T24] cfg80211: failed to load regulatory.db [ 94.352944][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.416286][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 96.528327][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.535713][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.543587][ T5878] bridge_slave_0: entered allmulticast mode [ 96.551435][ T5878] bridge_slave_0: entered promiscuous mode [ 96.561674][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.569258][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.576425][ T5878] bridge_slave_1: entered allmulticast mode [ 96.583863][ T5878] bridge_slave_1: entered promiscuous mode [ 96.619661][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.631775][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.664776][ T5878] team0: Port device team_slave_0 added [ 96.672916][ T5878] team0: Port device team_slave_1 added [ 96.700993][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.708649][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.735860][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.748983][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.755960][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.783100][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.828226][ T5878] hsr_slave_0: entered promiscuous mode [ 96.834728][ T5878] hsr_slave_1: entered promiscuous mode [ 96.978805][ T5878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.991721][ T5878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.003050][ T5878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.014256][ T5878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.044764][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.052003][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.059976][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.067112][ T5878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.123640][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.144407][ T5127] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.154331][ T5127] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.171948][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.187601][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.194786][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.209841][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.217012][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.393527][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.440813][ T5878] veth0_vlan: entered promiscuous mode [ 97.453632][ T5878] veth1_vlan: entered promiscuous mode [ 97.484095][ T5878] veth0_macvtap: entered promiscuous mode [ 97.493545][ T5878] veth1_macvtap: entered promiscuous mode [ 97.516164][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.533185][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.549618][ T5127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.559781][ T5127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.571946][ T5127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.581566][ T5127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.709951][ T5900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.722305][ T5900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.730451][ T5900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.740323][ T5900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.741786][ T989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.749195][ T5900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.846440][ T989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.918559][ T989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.009711][ T989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.450694][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.459380][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.493892][ T5127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.502763][ T5127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/10/23 08:18:46 executed programs: 0 [ 99.800602][ T5900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.809006][ T5900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.816940][ T5900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.826994][ T5900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.835468][ T5900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.998652][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 100.086827][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.094380][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.102137][ T5940] bridge_slave_0: entered allmulticast mode [ 100.109916][ T5940] bridge_slave_0: entered promiscuous mode [ 100.118339][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.125579][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.133072][ T5940] bridge_slave_1: entered allmulticast mode [ 100.141859][ T5940] bridge_slave_1: entered promiscuous mode [ 100.174593][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.187648][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.221617][ T5940] team0: Port device team_slave_0 added [ 100.230190][ T5940] team0: Port device team_slave_1 added [ 100.260867][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.268070][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.294534][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.322341][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.329821][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.357626][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.401757][ T5940] hsr_slave_0: entered promiscuous mode [ 100.408637][ T5940] hsr_slave_1: entered promiscuous mode [ 100.415022][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 100.421779][ T5940] Cannot create hsr debugfs directory [ 100.696809][ T989] bridge_slave_1: left allmulticast mode [ 100.708962][ T989] bridge_slave_1: left promiscuous mode [ 100.717356][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.733997][ T989] bridge_slave_0: left allmulticast mode [ 100.741301][ T989] bridge_slave_0: left promiscuous mode [ 100.747245][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.115135][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.130888][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.142687][ T989] bond0 (unregistering): Released all slaves [ 101.252934][ T989] hsr_slave_0: left promiscuous mode [ 101.260120][ T989] hsr_slave_1: left promiscuous mode [ 101.266500][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.279487][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.290192][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.297926][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.317560][ T989] veth1_macvtap: left promiscuous mode [ 101.323890][ T989] veth0_macvtap: left promiscuous mode [ 101.330096][ T989] veth1_vlan: left promiscuous mode [ 101.335674][ T989] veth0_vlan: left promiscuous mode [ 101.657968][ T989] team0 (unregistering): Port device team_slave_1 removed [ 101.693149][ T989] team0 (unregistering): Port device team_slave_0 removed [ 101.913363][ T5148] Bluetooth: hci0: command tx timeout [ 102.310880][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.343149][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.370844][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.405325][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.004213][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.030891][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.065031][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.072848][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.094335][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.101754][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.609087][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.742993][ T5940] veth0_vlan: entered promiscuous mode [ 103.777465][ T5940] veth1_vlan: entered promiscuous mode [ 103.877386][ T5940] veth0_macvtap: entered promiscuous mode [ 103.911437][ T5940] veth1_macvtap: entered promiscuous mode [ 103.944180][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.974304][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.989363][ T5148] Bluetooth: hci0: command tx timeout [ 103.998596][ T5127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.007560][ T5127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.042695][ T5127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.062448][ T5127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.140690][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.172921][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.216112][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.225283][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.302580][ T6011] input: syz0 as /devices/virtual/input/input5 [ 106.068114][ T5148] Bluetooth: hci0: command tx timeout [ 108.148004][ T5148] Bluetooth: hci0: command tx timeout [ 119.330091][ T5900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.340543][ T5900] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.349571][ T5900] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.358812][ T5900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.367124][ T5900] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.527612][ T6030] chnl_net:caif_netlink_parms(): no params data found [ 119.606258][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.613975][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.622671][ T6030] bridge_slave_0: entered allmulticast mode [ 119.632218][ T6030] bridge_slave_0: entered promiscuous mode [ 119.641792][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.650033][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.658016][ T6030] bridge_slave_1: entered allmulticast mode [ 119.665558][ T6030] bridge_slave_1: entered promiscuous mode [ 119.703801][ T6030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.715799][ T6030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.750456][ T6030] team0: Port device team_slave_0 added [ 119.758713][ T6030] team0: Port device team_slave_1 added [ 119.788504][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.795810][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.823152][ T6030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.836099][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.843208][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.869880][ T6030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.919632][ T6030] hsr_slave_0: entered promiscuous mode [ 119.926185][ T6030] hsr_slave_1: entered promiscuous mode [ 120.077209][ T6030] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 120.088215][ T6030] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.098960][ T6030] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.110806][ T6030] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.139873][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.147299][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.155217][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.162640][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.221001][ T6030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.241452][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.253442][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.272991][ T6030] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.288086][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.295680][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.315202][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.324843][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.526981][ T6030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.569965][ T6030] veth0_vlan: entered promiscuous mode [ 120.582178][ T6030] veth1_vlan: entered promiscuous mode [ 120.617071][ T6030] veth0_macvtap: entered promiscuous mode [ 120.629540][ T6030] veth1_macvtap: entered promiscuous mode [ 120.651241][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.669554][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.685335][ T989] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.700853][ T989] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.711635][ T989] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.724073][ T989] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.777224][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.790282][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/10/23 08:19:07 executed programs: 3 [ 120.822888][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.832916][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.892179][ T6048] input: syz0 as /devices/virtual/input/input6 [ 120.926532][ T5949] [ 120.928924][ T5949] ====================================================== [ 120.935945][ T5949] WARNING: possible circular locking dependency detected [ 120.942966][ T5949] syzkaller #0 Not tainted [ 120.947383][ T5949] ------------------------------------------------------ [ 120.954742][ T5949] udevd/5949 is trying to acquire lock: [ 120.960295][ T5949] ffff888026fa88b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_flush+0x5d/0x170 [ 120.969282][ T5949] [ 120.969282][ T5949] but task is already holding lock: [ 120.977103][ T5949] ffff888026bfb2c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_flush_device+0x51/0x110 [ 120.986357][ T5949] [ 120.986357][ T5949] which lock already depends on the new lock. [ 120.986357][ T5949] [ 120.997268][ T5949] [ 120.997268][ T5949] the existing dependency chain (in reverse order) is: [ 121.006461][ T5949] [ 121.006461][ T5949] -> #3 (&dev->mutex#2){+.+.}-{4:4}: [ 121.014390][ T5949] lock_acquire+0x120/0x360 [ 121.019522][ T5949] __mutex_lock+0x187/0x1350 [ 121.024938][ T5949] input_register_handle+0x18f/0x530 [ 121.031223][ T5949] kbd_connect+0xc3/0x140 [ 121.036538][ T5949] input_register_device+0xd00/0x1140 [ 121.042637][ T5949] acpi_button_add+0x6b1/0xb50 [ 121.048021][ T5949] acpi_device_probe+0xa8/0x2d0 [ 121.053878][ T5949] really_probe+0x26d/0x9e0 [ 121.059176][ T5949] __driver_probe_device+0x18c/0x2f0 [ 121.065197][ T5949] driver_probe_device+0x4f/0x430 [ 121.070849][ T5949] __driver_attach+0x452/0x700 [ 121.076508][ T5949] bus_for_each_dev+0x233/0x2b0 [ 121.082231][ T5949] bus_add_driver+0x345/0x640 [ 121.087518][ T5949] driver_register+0x23a/0x320 [ 121.092819][ T5949] do_one_initcall+0x236/0x820 [ 121.098209][ T5949] do_initcall_level+0x104/0x190 [ 121.103775][ T5949] do_initcalls+0x59/0xa0 [ 121.109333][ T5949] kernel_init_freeable+0x334/0x4b0 [ 121.115055][ T5949] kernel_init+0x1d/0x1d0 [ 121.120599][ T5949] ret_from_fork+0x4bc/0x870 [ 121.125812][ T5949] ret_from_fork_asm+0x1a/0x30 [ 121.131123][ T5949] [ 121.131123][ T5949] -> #2 (input_mutex){+.+.}-{4:4}: [ 121.138605][ T5949] lock_acquire+0x120/0x360 [ 121.143648][ T5949] __mutex_lock+0x187/0x1350 [ 121.148873][ T5949] input_register_device+0xa76/0x1140 [ 121.155116][ T5949] uinput_create_device+0x422/0x670 [ 121.160850][ T5949] uinput_ioctl_handler+0x3f0/0x1570 [ 121.166675][ T5949] __se_sys_ioctl+0xfc/0x170 [ 121.171807][ T5949] do_syscall_64+0xfa/0xfa0 [ 121.177119][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.198507][ T5949] [ 121.198507][ T5949] -> #1 (&newdev->mutex){+.+.}-{4:4}: [ 121.206172][ T5949] lock_acquire+0x120/0x360 [ 121.211209][ T5949] __mutex_lock+0x187/0x1350 [ 121.216513][ T5949] uinput_request_submit+0x188/0x6f0 [ 121.222420][ T5949] uinput_dev_upload_effect+0x150/0x1e0 [ 121.228580][ T5949] input_ff_upload+0x5fb/0xb30 [ 121.234154][ T5949] evdev_ioctl_handler+0x1644/0x1f10 [ 121.240456][ T5949] __se_sys_ioctl+0xfc/0x170 [ 121.245682][ T5949] do_syscall_64+0xfa/0xfa0 [ 121.250806][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.257304][ T5949] [ 121.257304][ T5949] -> #0 (&ff->mutex){+.+.}-{4:4}: [ 121.264947][ T5949] validate_chain+0xb9b/0x2140 [ 121.270234][ T5949] __lock_acquire+0xab9/0xd20 [ 121.275598][ T5949] lock_acquire+0x120/0x360 [ 121.280622][ T5949] __mutex_lock+0x187/0x1350 [ 121.285960][ T5949] input_ff_flush+0x5d/0x170 [ 121.291333][ T5949] input_flush_device+0xb4/0x110 [ 121.296964][ T5949] evdev_release+0xe1/0x800 [ 121.302114][ T5949] __fput+0x44c/0xa70 [ 121.306791][ T5949] fput_close_sync+0x119/0x200 [ 121.312098][ T5949] __x64_sys_close+0x7f/0x110 [ 121.317494][ T5949] do_syscall_64+0xfa/0xfa0 [ 121.322712][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.329320][ T5949] [ 121.329320][ T5949] other info that might help us debug this: [ 121.329320][ T5949] [ 121.339930][ T5949] Chain exists of: [ 121.339930][ T5949] &ff->mutex --> input_mutex --> &dev->mutex#2 [ 121.339930][ T5949] [ 121.352028][ T5949] Possible unsafe locking scenario: [ 121.352028][ T5949] [ 121.359493][ T5949] CPU0 CPU1 [ 121.364948][ T5949] ---- ---- [ 121.370344][ T5949] lock(&dev->mutex#2); [ 121.374866][ T5949] lock(input_mutex); [ 121.381454][ T5949] lock(&dev->mutex#2); [ 121.388500][ T5949] lock(&ff->mutex); [ 121.392511][ T5949] [ 121.392511][ T5949] *** DEADLOCK *** [ 121.392511][ T5949] [ 121.400837][ T5949] 2 locks held by udevd/5949: [ 121.405570][ T5949] #0: ffff88823bfe4118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_release+0x73/0x800 [ 121.415063][ T5949] #1: ffff888026bfb2c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_flush_device+0x51/0x110 [ 121.424818][ T5949] [ 121.424818][ T5949] stack backtrace: [ 121.429342][ T5148] Bluetooth: hci1: command tx timeout [ 121.430927][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 121.430948][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.430959][ T5949] Call Trace: [ 121.430966][ T5949] [ 121.430973][ T5949] dump_stack_lvl+0x189/0x250 [ 121.431001][ T5949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.431023][ T5949] ? __pfx__printk+0x10/0x10 [ 121.431041][ T5949] ? print_lock_name+0xde/0x100 [ 121.431058][ T5949] print_circular_bug+0x2ee/0x310 [ 121.431081][ T5949] check_noncircular+0x134/0x160 [ 121.431103][ T5949] validate_chain+0xb9b/0x2140 [ 121.431124][ T5949] ? __lock_acquire+0xab9/0xd20 [ 121.431142][ T5949] ? look_up_lock_class+0x74/0x170 [ 121.431165][ T5949] ? register_lock_class+0x51/0x320 [ 121.431183][ T5949] __lock_acquire+0xab9/0xd20 [ 121.431200][ T5949] ? input_ff_flush+0x5d/0x170 [ 121.431223][ T5949] lock_acquire+0x120/0x360 [ 121.431239][ T5949] ? input_ff_flush+0x5d/0x170 [ 121.431262][ T5949] ? __mutex_trylock_common+0x153/0x260 [ 121.431286][ T5949] __mutex_lock+0x187/0x1350 [ 121.431309][ T5949] ? input_ff_flush+0x5d/0x170 [ 121.431331][ T5949] ? trace_contention_end+0x39/0x120 [ 121.431351][ T5949] ? __mutex_lock+0x335/0x1350 [ 121.431372][ T5949] ? trace_contention_end+0x39/0x120 [ 121.431392][ T5949] ? __mutex_lock+0x335/0x1350 [ 121.431413][ T5949] ? input_ff_flush+0x5d/0x170 [ 121.431436][ T5949] ? __pfx___mutex_lock+0x10/0x10 [ 121.431470][ T5949] ? __pfx_uinput_dev_flush+0x10/0x10 [ 121.431495][ T5949] input_ff_flush+0x5d/0x170 [ 121.431517][ T5949] ? __pfx_uinput_dev_flush+0x10/0x10 [ 121.431541][ T5949] input_flush_device+0xb4/0x110 [ 121.431566][ T5949] evdev_release+0xe1/0x800 [ 121.431586][ T5949] ? evm_file_release+0x108/0x1e0 [ 121.431605][ T5949] ? __pfx_evdev_release+0x10/0x10 [ 121.431624][ T5949] __fput+0x44c/0xa70 [ 121.431646][ T5949] fput_close_sync+0x119/0x200 [ 121.431666][ T5949] ? dnotify_flush+0x1db/0x5e0 [ 121.431685][ T5949] ? __pfx_fput_close_sync+0x10/0x10 [ 121.431704][ T5949] ? do_raw_spin_unlock+0x122/0x240 [ 121.431729][ T5949] __x64_sys_close+0x7f/0x110 [ 121.431749][ T5949] do_syscall_64+0xfa/0xfa0 [ 121.431770][ T5949] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.431789][ T5949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.431806][ T5949] ? clear_bhb_loop+0x60/0xb0 [ 121.431824][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.431841][ T5949] RIP: 0033:0x7fc6f9aa7407 [ 121.431856][ T5949] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 121.431870][ T5949] RSP: 002b:00007fff016cd120 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 121.431890][ T5949] RAX: ffffffffffffffda RBX: 00007fc6fa17d880 RCX: 00007fc6f9aa7407 [ 121.431903][ T5949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 121.431913][ T5949] RBP: 00007fc6fa17d6e8 R08: 0000000000000000 R09: 0000000000000000 [ 121.431924][ T5949] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000016 [ 121.431934][ T5949] R13: 00007fff016cd230 R14: 0000000000000000 R15: 0000000000000000 [ 121.431951][ T5949] [ 123.837886][ T5148] Bluetooth: hci1: command tx timeout [ 123.902232][ T6054] input: syz0 as /devices/virtual/input/input7 [ 125.908734][ T5148] Bluetooth: hci1: command tx timeout 2025/10/23 08:19:13 executed programs: 5 [ 126.934689][ T6056] input: syz0 as /devices/virtual/input/input8 [ 127.987930][ T5148] Bluetooth: hci1: command tx timeout [ 129.960938][ T6057] input: syz0 as /devices/virtual/input/input9