Warning: Permanently added '10.128.10.27' (ED25519) to the list of known hosts. 2025/09/11 04:33:20 parsed 1 programs [ 66.621486][ T30] audit: type=1400 audit(1757565201.880:111): avc: denied { unlink } for pid=4130 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.685906][ T4130] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.353458][ T30] audit: type=1400 audit(1757565203.590:112): avc: denied { read } for pid=4138 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.374870][ T30] audit: type=1400 audit(1757565203.590:113): avc: denied { open } for pid=4138 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.669583][ T30] audit: type=1401 audit(1757565203.920:114): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 70.253194][ T4172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.265686][ T4172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.273458][ T4172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.281372][ T4172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.411452][ T41] cfg80211: failed to load regulatory.db [ 74.104794][ T2106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.112668][ T2106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.122669][ T2425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.130826][ T2425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/11 04:33:29 executed programs: 0 [ 75.740420][ T4770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.748574][ T4770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.756539][ T4770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.767121][ T4770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.643943][ T2269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.651929][ T2269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.662063][ T2269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.669879][ T2269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.705963][ T30] audit: type=1400 audit(1757565213.960:115): avc: denied { read } for pid=5258 comm="syz.2.16" name="uinput" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.707535][ T5259] input: syz1 as /devices/virtual/input/input5 [ 78.729011][ T30] audit: type=1400 audit(1757565213.960:116): avc: denied { open } for pid=5258 comm="syz.2.16" path="/dev/uinput" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.729035][ T30] audit: type=1400 audit(1757565213.960:117): avc: denied { ioctl } for pid=5258 comm="syz.2.16" path="/dev/uinput" dev="devtmpfs" ino=672 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.784911][ T30] audit: type=1400 audit(1757565214.040:118): avc: denied { read } for pid=2620 comm="acpid" name="event4" dev="devtmpfs" ino=1432 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.807423][ T30] audit: type=1400 audit(1757565214.040:119): avc: denied { open } for pid=2620 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=1432 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.830844][ T30] audit: type=1400 audit(1757565214.040:120): avc: denied { ioctl } for pid=2620 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=1432 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.863651][ T5262] input: syz1 as /devices/virtual/input/input6 [ 78.871763][ T5262] [ 78.874089][ T5262] ====================================================== [ 78.880613][ T30] audit: type=1400 audit(1757565214.130:121): avc: denied { read } for pid=5261 comm="syz.2.17" name="event4" dev="devtmpfs" ino=1433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.881072][ T5262] WARNING: possible circular locking dependency detected [ 78.881078][ T5262] syzkaller #0 Not tainted [ 78.881085][ T5262] ------------------------------------------------------ [ 78.903664][ T30] audit: type=1400 audit(1757565214.130:122): avc: denied { open } for pid=5261 comm="syz.2.17" path="/dev/input/event4" dev="devtmpfs" ino=1433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.910622][ T5262] syz.2.17/5262 is trying to acquire lock: [ 78.910630][ T5262] ffff88810a784c70 (&newdev->mutex){+.+.}-{4:4}, at: uinput_request_submit.part.0+0x1f/0x130 [ 78.915065][ T30] audit: type=1400 audit(1757565214.130:123): avc: denied { ioctl } for pid=5261 comm="syz.2.17" path="/dev/input/event4" dev="devtmpfs" ino=1433 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.922240][ T5262] [ 78.922240][ T5262] but task is already holding lock: [ 78.922245][ T5262] ffff88810a7874b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0xdf/0x500 [ 79.002573][ T5262] [ 79.002573][ T5262] which lock already depends on the new lock. [ 79.002573][ T5262] [ 79.012945][ T5262] [ 79.012945][ T5262] the existing dependency chain (in reverse order) is: [ 79.021927][ T5262] [ 79.021927][ T5262] -> #3 (&ff->mutex){+.+.}-{4:4}: [ 79.029093][ T5262] __mutex_lock+0xc7/0xd10 [ 79.034017][ T5262] input_ff_flush+0x39/0xf0 [ 79.039115][ T5262] uinput_dev_flush+0x2a/0x40 [ 79.044298][ T5262] input_flush_device+0x81/0xe0 [ 79.049653][ T5262] evdev_release+0x19c/0x1b0 [ 79.054745][ T5262] __fput+0x1c3/0x500 [ 79.059245][ T5262] fput_close_sync+0x69/0x110 [ 79.064419][ T5262] __x64_sys_close+0x4a/0xc0 [ 79.069522][ T5262] do_syscall_64+0x80/0x3b0 [ 79.074530][ T5262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.080932][ T5262] [ 79.080932][ T5262] -> #2 (&dev->mutex#2){+.+.}-{4:4}: [ 79.088381][ T5262] __mutex_lock+0xc7/0xd10 [ 79.093293][ T5262] input_register_handle+0x4e/0x230 [ 79.098989][ T5262] kbd_connect+0x4e/0xb0 [ 79.103722][ T5262] input_attach_handler.isra.0+0xc4/0x120 [ 79.109932][ T5262] input_register_device+0x5de/0x8d0 [ 79.115707][ T5262] acpi_button_add+0x2bf/0x6e0 [ 79.121033][ T5262] acpi_device_probe+0x67/0x1c0 [ 79.126398][ T5262] really_probe+0x136/0x500 [ 79.131427][ T5262] __driver_probe_device+0xcd/0x1e0 [ 79.137133][ T5262] driver_probe_device+0x2a/0x120 [ 79.142651][ T5262] __driver_attach+0x17e/0x2b0 [ 79.147909][ T5262] bus_for_each_dev+0xb5/0x120 [ 79.153170][ T5262] bus_add_driver+0x159/0x320 [ 79.158340][ T5262] driver_register+0x85/0x180 [ 79.163522][ T5262] __acpi_bus_register_driver+0x53/0x70 [ 79.169565][ T5262] acpi_button_driver_init+0x54/0xb0 [ 79.175354][ T5262] do_one_initcall+0xa3/0x4b0 [ 79.180553][ T5262] kernel_init_freeable+0x32b/0x5d0 [ 79.186265][ T5262] kernel_init+0x1b/0x2a0 [ 79.191103][ T5262] ret_from_fork+0x351/0x380 [ 79.196185][ T5262] ret_from_fork_asm+0x1a/0x30 [ 79.201442][ T5262] [ 79.201442][ T5262] -> #1 (input_mutex){+.+.}-{4:4}: [ 79.208708][ T5262] __mutex_lock+0xc7/0xd10 [ 79.213619][ T5262] input_register_device+0x527/0x8d0 [ 79.219509][ T5262] uinput_ioctl_handler.isra.0+0xc92/0x10b0 [ 79.225915][ T5262] __x64_sys_ioctl+0xf4/0x140 [ 79.231114][ T5262] do_syscall_64+0x80/0x3b0 [ 79.236114][ T5262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.242495][ T5262] [ 79.242495][ T5262] -> #0 (&newdev->mutex){+.+.}-{4:4}: [ 79.250042][ T5262] __lock_acquire+0x12e5/0x1b20 [ 79.255383][ T5262] lock_acquire+0xc9/0x2c0 [ 79.260301][ T5262] __mutex_lock+0xc7/0xd10 [ 79.265223][ T5262] uinput_request_submit.part.0+0x1f/0x130 [ 79.271632][ T5262] uinput_dev_upload_effect+0xbb/0xf0 [ 79.277506][ T5262] input_ff_upload+0x36f/0x500 [ 79.282758][ T5262] evdev_do_ioctl+0xaac/0x1150 [ 79.288126][ T5262] evdev_ioctl+0xd3/0xe0 [ 79.292951][ T5262] __x64_sys_ioctl+0xf4/0x140 [ 79.298133][ T5262] do_syscall_64+0x80/0x3b0 [ 79.303157][ T5262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.309543][ T5262] [ 79.309543][ T5262] other info that might help us debug this: [ 79.309543][ T5262] [ 79.319741][ T5262] Chain exists of: [ 79.319741][ T5262] &newdev->mutex --> &dev->mutex#2 --> &ff->mutex [ 79.319741][ T5262] [ 79.332041][ T5262] Possible unsafe locking scenario: [ 79.332041][ T5262] [ 79.339484][ T5262] CPU0 CPU1 [ 79.344827][ T5262] ---- ---- [ 79.350154][ T5262] lock(&ff->mutex); [ 79.354100][ T5262] lock(&dev->mutex#2); [ 79.360838][ T5262] lock(&ff->mutex); [ 79.367301][ T5262] lock(&newdev->mutex); [ 79.371595][ T5262] [ 79.371595][ T5262] *** DEADLOCK *** [ 79.371595][ T5262] [ 79.379713][ T5262] 2 locks held by syz.2.17/5262: [ 79.384617][ T5262] #0: ffff88817e0cc118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_ioctl+0x3d/0xe0 [ 79.393541][ T5262] #1: ffff88810a7874b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0xdf/0x500 [ 79.402730][ T5262] [ 79.402730][ T5262] stack backtrace: [ 79.408596][ T5262] CPU: 1 UID: 0 PID: 5262 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT(none) [ 79.408608][ T5262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.408614][ T5262] Call Trace: [ 79.408618][ T5262] [ 79.408622][ T5262] dump_stack_lvl+0x116/0x1f0 [ 79.408643][ T5262] print_circular_bug+0x26e/0x2f0 [ 79.408661][ T5262] check_noncircular+0x11b/0x130 [ 79.408678][ T5262] __lock_acquire+0x12e5/0x1b20 [ 79.408688][ T5262] lock_acquire+0xc9/0x2c0 [ 79.408696][ T5262] ? uinput_request_submit.part.0+0x1f/0x130 [ 79.408707][ T5262] __mutex_lock+0xc7/0xd10 [ 79.408721][ T5262] ? uinput_request_submit.part.0+0x1f/0x130 [ 79.408730][ T5262] ? uinput_request_submit.part.0+0x1f/0x130 [ 79.408740][ T5262] ? uinput_request_submit.part.0+0x1f/0x130 [ 79.408749][ T5262] uinput_request_submit.part.0+0x1f/0x130 [ 79.408767][ T5262] uinput_dev_upload_effect+0xbb/0xf0 [ 79.408778][ T5262] input_ff_upload+0x36f/0x500 [ 79.408787][ T5262] evdev_do_ioctl+0xaac/0x1150 [ 79.408802][ T5262] evdev_ioctl+0xd3/0xe0 [ 79.408815][ T5262] ? __pfx_evdev_ioctl+0x10/0x10 [ 79.408829][ T5262] __x64_sys_ioctl+0xf4/0x140 [ 79.408844][ T5262] do_syscall_64+0x80/0x3b0 [ 79.408859][ T5262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.408870][ T5262] RIP: 0033:0x7fbe8af8e9a9 [ 79.408877][ T5262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.408886][ T5262] RSP: 002b:00007fbe8bd29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2025/09/11 04:33:34 executed programs: 3 [ 79.408895][ T5262] RAX: ffffffffffffffda RBX: 00007fbe8b1b5fa0 RCX: 00007fbe8af8e9a9 [ 79.408901][ T5262] RDX: 0000200000000300 RSI: 0000000040304580 RDI: 0000000000000004 [ 79.408907][ T5262] RBP: 00007fbe8b010d69 R08: 0000000000000000 R09: 0000000000000000 [ 79.408913][ T5262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.408918][ T5262] R13: 0000000000000000 R14: 00007fbe8b1b5fa0 R15: 00007ffe1cf292a8 [ 79.408925][ T5262] [ 79.713175][ T5264] input: syz1 as /devices/virtual/input/input7 [ 80.550830][ T5266] input: syz1 as /devices/virtual/input/input8 [ 81.387372][ T5268] input: syz1 as /devices/virtual/input/input9 [ 82.225239][ T5270] input: syz1 as /devices/virtual/input/input10 [ 83.062679][ T5272] input: syz1 as /devices/virtual/input/input11 [ 83.900331][ T5274] input: syz1 as /devices/virtual/input/input12 2025/09/11 04:33:40 executed programs: 10 [ 84.737439][ T5276] input: syz1 as /devices/virtual/input/input13 [ 85.574588][ T5278] input: syz1 as /devices/virtual/input/input14 [ 86.412568][ T5280] input: syz1 as /devices/virtual/input/input15 [ 87.250180][ T5282] input: syz1 as /devices/virtual/input/input16 [ 88.087677][ T5284] input: syz1 as /devices/virtual/input/input17