Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 38.800836][ T6243] input: syz1 as /devices/virtual/input/input4 [ 38.801041][ T6246] input: syz1 as /devices/virtual/input/input5 [ 38.804670][ T6240] input: syz1 as /devices/virtual/input/input3 [ 38.815425][ T6244] input: syz1 as /devices/virtual/input/input2 [ 38.817092][ T6247] input: syz1 as /devices/virtual/input/input6 executing program [ 38.858820][ T6251] input: syz1 as /devices/virtual/input/input7 executing program [ 38.887863][ T6252] input: syz1 as /devices/virtual/input/input8 executing program [ 38.936793][ T6253] input: syz1 as /devices/virtual/input/input9 executing program [ 38.986508][ T6254] input: syz1 as /devices/virtual/input/input10 executing program [ 39.034234][ T6255] input: syz1 as /devices/virtual/input/input11 executing program [ 39.087309][ T6256] input: syz1 as /devices/virtual/input/input12 executing program [ 39.127579][ T6257] input: syz1 as /devices/virtual/input/input13 executing program [ 39.164869][ T6258] input: syz1 as /devices/virtual/input/input14 executing program [ 39.224593][ T6259] input: syz1 as /devices/virtual/input/input15 executing program [ 39.268355][ T6260] input: syz1 as /devices/virtual/input/input16 executing program [ 39.305667][ T6261] input: syz1 as /devices/virtual/input/input17 executing program [ 39.367518][ T6262] input: syz1 as /devices/virtual/input/input18 executing program [ 39.405453][ T6263] input: syz1 as /devices/virtual/input/input19 executing program [ 39.445260][ T6264] input: syz1 as /devices/virtual/input/input20 executing program [ 39.488199][ T6265] input: syz1 as /devices/virtual/input/input21 executing program [ 39.546082][ T6266] input: syz1 as /devices/virtual/input/input22 executing program [ 39.604548][ T6267] input: syz1 as /devices/virtual/input/input23 executing program [ 39.645805][ T6268] input: syz1 as /devices/virtual/input/input24 [ 39.694434][ T6267] [ 39.695052][ T6267] ====================================================== executing program [ 39.696767][ T6267] WARNING: possible circular locking dependency detected [ 39.698541][ T6267] 6.9.0-rc7-syzkaller-gfda5695d692c #0 Not tainted [ 39.698779][ T6269] input: syz1 as /devices/virtual/input/input25 [ 39.700168][ T6267] ------------------------------------------------------ [ 39.700175][ T6267] syz-executor351/6267 is trying to acquire lock: [ 39.700183][ T6267] ffff0000dcfa4070 (&newdev->mutex){+.+.}-{3:3}, at: uinput_request_submit+0x188/0x654 [ 39.700220][ T6267] [ 39.700220][ T6267] but task is already holding lock: [ 39.700224][ T6267] ffff0000dcfa48b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x31c/0x834 [ 39.700250][ T6267] [ 39.700250][ T6267] which lock already depends on the new lock. [ 39.700250][ T6267] [ 39.700254][ T6267] [ 39.700254][ T6267] the existing dependency chain (in reverse order) is: [ 39.717121][ T6267] [ 39.717121][ T6267] -> #3 (&ff->mutex){+.+.}-{3:3}: [ 39.719002][ T6267] __mutex_lock_common+0x190/0x21a0 [ 39.720502][ T6267] mutex_lock_nested+0x2c/0x38 [ 39.721888][ T6267] input_ff_upload+0x31c/0x834 [ 39.723420][ T6267] evdev_ioctl_handler+0x1fd0/0x2d58 [ 39.725031][ T6267] evdev_ioctl+0x38/0x4c [ 39.726271][ T6267] __arm64_sys_ioctl+0x14c/0x1c8 [ 39.727699][ T6267] invoke_syscall+0x98/0x2b8 [ 39.729006][ T6267] el0_svc_common+0x130/0x23c [ 39.730348][ T6267] do_el0_svc+0x48/0x58 [ 39.731588][ T6267] el0_svc+0x54/0x168 [ 39.732931][ T6267] el0t_64_sync_handler+0x84/0xfc [ 39.734456][ T6267] el0t_64_sync+0x190/0x194 [ 39.735551][ T6267] [ 39.735551][ T6267] -> #2 (&evdev->mutex){+.+.}-{3:3}: [ 39.737421][ T6267] __mutex_lock_common+0x190/0x21a0 [ 39.738929][ T6267] mutex_lock_nested+0x2c/0x38 [ 39.740313][ T6267] evdev_cleanup+0x38/0x16c [ 39.741747][ T6267] evdev_disconnect+0x58/0xc0 [ 39.743371][ T6267] __input_unregister_device+0x31c/0x5c0 [ 39.744982][ T6267] input_unregister_device+0xb0/0xfc [ 39.746527][ T6267] uinput_destroy_device+0x5a4/0x79c [ 39.748075][ T6267] uinput_release+0x44/0x60 [ 39.749411][ T6267] __fput+0x30c/0x738 [ 39.750649][ T6267] ____fput+0x20/0x30 [ 39.751889][ T6267] task_work_run+0x230/0x2e0 [ 39.753295][ T6267] do_exit+0x4e4/0x1ac8 [ 39.754552][ T6267] do_group_exit+0x194/0x22c [ 39.755938][ T6267] pid_child_should_wake+0x0/0x1dc [ 39.757414][ T6267] invoke_syscall+0x98/0x2b8 [ 39.758745][ T6267] el0_svc_common+0x130/0x23c [ 39.760062][ T6267] do_el0_svc+0x48/0x58 [ 39.761441][ T6267] el0_svc+0x54/0x168 [ 39.762518][ T6267] el0t_64_sync_handler+0x84/0xfc [ 39.763948][ T6267] el0t_64_sync+0x190/0x194 [ 39.765263][ T6267] [ 39.765263][ T6267] -> #1 (input_mutex){+.+.}-{3:3}: [ 39.767172][ T6267] __mutex_lock_common+0x190/0x21a0 [ 39.768663][ T6267] mutex_lock_interruptible_nested+0x2c/0x38 [ 39.770406][ T6267] input_register_device+0x8dc/0xde8 [ 39.771942][ T6267] uinput_create_device+0x360/0x528 [ 39.773456][ T6267] uinput_ioctl_handler+0x8b0/0x16c0 [ 39.775002][ T6267] uinput_ioctl+0x38/0x4c [ 39.776274][ T6267] __arm64_sys_ioctl+0x14c/0x1c8 [ 39.777720][ T6267] invoke_syscall+0x98/0x2b8 [ 39.779156][ T6267] el0_svc_common+0x130/0x23c [ 39.780651][ T6267] do_el0_svc+0x48/0x58 [ 39.781956][ T6267] el0_svc+0x54/0x168 [ 39.783135][ T6267] el0t_64_sync_handler+0x84/0xfc [ 39.784574][ T6267] el0t_64_sync+0x190/0x194 [ 39.785866][ T6267] [ 39.785866][ T6267] -> #0 (&newdev->mutex){+.+.}-{3:3}: [ 39.787839][ T6267] __lock_acquire+0x3384/0x763c [ 39.789290][ T6267] lock_acquire+0x248/0x73c [ 39.790699][ T6267] __mutex_lock_common+0x190/0x21a0 [ 39.792279][ T6267] mutex_lock_interruptible_nested+0x2c/0x38 [ 39.793984][ T6267] uinput_request_submit+0x188/0x654 [ 39.795536][ T6267] uinput_dev_upload_effect+0x170/0x218 [ 39.797127][ T6267] input_ff_upload+0x49c/0x834 [ 39.798751][ T6267] evdev_ioctl_handler+0x1fd0/0x2d58 [ 39.800500][ T6267] evdev_ioctl+0x38/0x4c [ 39.801770][ T6267] __arm64_sys_ioctl+0x14c/0x1c8 [ 39.803186][ T6267] invoke_syscall+0x98/0x2b8 [ 39.804547][ T6267] el0_svc_common+0x130/0x23c [ 39.805925][ T6267] do_el0_svc+0x48/0x58 [ 39.807237][ T6267] el0_svc+0x54/0x168 [ 39.808505][ T6267] el0t_64_sync_handler+0x84/0xfc [ 39.810207][ T6267] el0t_64_sync+0x190/0x194 [ 39.811548][ T6267] [ 39.811548][ T6267] other info that might help us debug this: [ 39.811548][ T6267] [ 39.814257][ T6267] Chain exists of: [ 39.814257][ T6267] &newdev->mutex --> &evdev->mutex --> &ff->mutex [ 39.814257][ T6267] [ 39.817539][ T6267] Possible unsafe locking scenario: [ 39.817539][ T6267] [ 39.819565][ T6267] CPU0 CPU1 [ 39.820969][ T6267] ---- ---- [ 39.822330][ T6267] lock(&ff->mutex); [ 39.823382][ T6267] lock(&evdev->mutex); [ 39.825163][ T6267] lock(&ff->mutex); [ 39.826968][ T6267] lock(&newdev->mutex); [ 39.828132][ T6267] [ 39.828132][ T6267] *** DEADLOCK *** [ 39.828132][ T6267] [ 39.830224][ T6267] 2 locks held by syz-executor351/6267: [ 39.831684][ T6267] #0: ffff0000c2d11110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_ioctl_handler+0x11c/0x2d58 [ 39.834368][ T6267] #1: ffff0000dcfa48b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x31c/0x834 [ 39.836867][ T6267] [ 39.836867][ T6267] stack backtrace: [ 39.838448][ T6267] CPU: 1 PID: 6267 Comm: syz-executor351 Not tainted 6.9.0-rc7-syzkaller-gfda5695d692c #0 [ 39.841020][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 39.843677][ T6267] Call trace: [ 39.844522][ T6267] dump_backtrace+0x1b8/0x1e4 [ 39.845782][ T6267] show_stack+0x2c/0x3c [ 39.846934][ T6267] dump_stack_lvl+0xe4/0x150 [ 39.848131][ T6267] dump_stack+0x1c/0x28 [ 39.849219][ T6267] print_circular_bug+0x150/0x1b8 [ 39.850522][ T6267] check_noncircular+0x310/0x404 [ 39.851847][ T6267] __lock_acquire+0x3384/0x763c [ 39.853104][ T6267] lock_acquire+0x248/0x73c [ 39.854316][ T6267] __mutex_lock_common+0x190/0x21a0 [ 39.855766][ T6267] mutex_lock_interruptible_nested+0x2c/0x38 [ 39.857370][ T6267] uinput_request_submit+0x188/0x654 [ 39.858764][ T6267] uinput_dev_upload_effect+0x170/0x218 [ 39.860264][ T6267] input_ff_upload+0x49c/0x834 [ 39.861564][ T6267] evdev_ioctl_handler+0x1fd0/0x2d58 [ 39.863006][ T6267] evdev_ioctl+0x38/0x4c [ 39.864146][ T6267] __arm64_sys_ioctl+0x14c/0x1c8 [ 39.865665][ T6267] invoke_syscall+0x98/0x2b8 [ 39.866887][ T6267] el0_svc_common+0x130/0x23c [ 39.868095][ T6267] do_el0_svc+0x48/0x58 [ 39.869177][ T6267] el0_svc+0x54/0x168 [ 39.870237][ T6267] el0t_64_sync_handler+0x84/0xfc [ 39.871663][ T6267] el0t_64_sync+0x190/0x194 executing program [ 39.894943][ T6272] input: syz1 as /devices/virtual/input/input26 executing program [ 39.915769][ T6273] input: syz1 as /devices/virtual/input/input27 executing program [ 44.742570][ T6274] input: syz1 as /devices/virtual/input/input28 executing program [ 44.793526][ T6275] input: syz1 as /devices/virtual/input/input29 executing program [ 44.973305][ T6276] input: syz1 as /devices/virtual/input/input30 executing program [ 45.014280][ T6277] input: syz1 as /devices/virtual/input/input31