Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. 2024/08/28 21:11:42 ignoring optional flag "sandboxArg"="0" 2024/08/28 21:11:42 parsed 1 programs 2024/08/28 21:11:43 executed programs: 0 [ 58.502302][ T2442] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.649277][ T2448] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.658131][ T2448] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.667089][ T2448] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.674956][ T2448] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.510888][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.519465][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.531060][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.540269][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.549170][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.557657][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.586842][ T3140] input: syz1 as /devices/virtual/input/input5 [ 63.595507][ T3140] [ 63.597941][ T3140] ====================================================== [ 63.605753][ T3140] WARNING: possible circular locking dependency detected [ 63.613547][ T3140] 6.1.106-syzkaller #0 Not tainted [ 63.618878][ T3140] ------------------------------------------------------ [ 63.627624][ T3140] syz-executor.0/3140 is trying to acquire lock: [ 63.633935][ T3140] ffff888107ec2870 (&newdev->mutex){+.+.}-{3:3}, at: uinput_request_submit+0x12e/0x300 [ 63.643823][ T3140] [ 63.643823][ T3140] but task is already holding lock: [ 63.651172][ T3140] ffff88810ef6bcb0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x21b/0x500 [ 63.660255][ T3140] [ 63.660255][ T3140] which lock already depends on the new lock. [ 63.660255][ T3140] [ 63.671125][ T3140] [ 63.671125][ T3140] the existing dependency chain (in reverse order) is: [ 63.682849][ T3140] [ 63.682849][ T3140] -> #3 (&ff->mutex){+.+.}-{3:3}: [ 63.691676][ T3140] __mutex_lock+0x99/0x970 [ 63.696969][ T3140] input_ff_flush+0x31/0xb0 [ 63.702513][ T3140] input_flush_device+0x55/0x80 [ 63.709200][ T3140] evdev_release+0x78/0x2e0 [ 63.714478][ T3140] __fput+0xfb/0x440 [ 63.719341][ T3140] task_work_run+0xfa/0x130 [ 63.724923][ T3140] exit_to_user_mode_loop+0xde/0x100 [ 63.731219][ T3140] exit_to_user_mode_prepare+0xa2/0x100 [ 63.737412][ T3140] syscall_exit_to_user_mode+0x5e/0x210 [ 63.743574][ T3140] do_syscall_64+0x47/0xb0 [ 63.749027][ T3140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.755534][ T3140] [ 63.755534][ T3140] -> #2 (&dev->mutex#2){+.+.}-{3:3}: [ 63.763687][ T3140] __mutex_lock+0x99/0x970 [ 63.769487][ T3140] input_register_handle+0x31/0x160 [ 63.775558][ T3140] kbd_connect+0x45/0xb0 [ 63.780576][ T3140] input_register_device+0x754/0x8a0 [ 63.787110][ T3140] acpi_button_add+0x401/0x5d0 [ 63.793244][ T3140] acpi_device_probe+0x49/0x1c0 [ 63.799236][ T3140] really_probe+0x1c5/0x690 [ 63.804694][ T3140] __driver_probe_device+0xdf/0x1e0 [ 63.811183][ T3140] driver_probe_device+0x2e/0x240 [ 63.816734][ T3140] __driver_attach+0x252/0x390 [ 63.822498][ T3140] bus_for_each_dev+0xb0/0x100 [ 63.827965][ T3140] bus_add_driver+0x15f/0x2e0 [ 63.833432][ T3140] driver_register+0x102/0x190 [ 63.839608][ T3140] do_one_initcall+0x17b/0x480 [ 63.845234][ T3140] do_initcall_level+0xd7/0x1aa [ 63.850930][ T3140] do_initcalls+0x49/0x81 [ 63.856218][ T3140] kernel_init_freeable+0x212/0x2a9 [ 63.862314][ T3140] kernel_init+0x17/0x290 [ 63.867608][ T3140] ret_from_fork+0x1f/0x30 [ 63.873059][ T3140] [ 63.873059][ T3140] -> #1 (input_mutex){+.+.}-{3:3}: [ 63.880630][ T3140] __mutex_lock+0x99/0x970 [ 63.885896][ T3140] input_register_device+0x633/0x8a0 [ 63.891808][ T3140] uinput_create_device+0x1c4/0x290 [ 63.897617][ T3140] uinput_ioctl_handler+0x582/0xae0 [ 63.903405][ T3140] __se_sys_ioctl+0xb4/0x120 [ 63.908963][ T3140] do_syscall_64+0x3b/0xb0 [ 63.913970][ T3140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.920450][ T3140] [ 63.920450][ T3140] -> #0 (&newdev->mutex){+.+.}-{3:3}: [ 63.928148][ T3140] __lock_acquire+0x146d/0x2830 [ 63.933671][ T3140] lock_acquire+0xe3/0x270 [ 63.939191][ T3140] __mutex_lock+0x99/0x970 [ 63.944147][ T3140] uinput_request_submit+0x12e/0x300 [ 63.950292][ T3140] uinput_dev_upload_effect+0x107/0x130 [ 63.957118][ T3140] input_ff_upload+0x307/0x500 [ 63.962554][ T3140] evdev_ioctl_handler+0x1120/0x1560 [ 63.968340][ T3140] __se_sys_ioctl+0xb4/0x120 [ 63.973517][ T3140] do_syscall_64+0x3b/0xb0 [ 63.978531][ T3140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.985296][ T3140] [ 63.985296][ T3140] other info that might help us debug this: [ 63.985296][ T3140] [ 63.995772][ T3140] Chain exists of: [ 63.995772][ T3140] &newdev->mutex --> &dev->mutex#2 --> &ff->mutex [ 63.995772][ T3140] [ 64.009490][ T3140] Possible unsafe locking scenario: [ 64.009490][ T3140] [ 64.017178][ T3140] CPU0 CPU1 [ 64.023303][ T3140] ---- ---- [ 64.028743][ T3140] lock(&ff->mutex); [ 64.033393][ T3140] lock(&dev->mutex#2); [ 64.040226][ T3140] lock(&ff->mutex); [ 64.049421][ T3140] lock(&newdev->mutex); [ 64.054458][ T3140] [ 64.054458][ T3140] *** DEADLOCK *** [ 64.054458][ T3140] [ 64.062969][ T3140] 2 locks held by syz-executor.0/3140: [ 64.068991][ T3140] #0: ffff8881083b0910 (&evdev->mutex){+.+.}-{3:3}, at: evdev_ioctl_handler+0x55/0x1560 [ 64.079732][ T3140] #1: ffff88810ef6bcb0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x21b/0x500 [ 64.090104][ T3140] [ 64.090104][ T3140] stack backtrace: [ 64.097044][ T3140] CPU: 0 PID: 3140 Comm: syz-executor.0 Not tainted 6.1.106-syzkaller #0 [ 64.107293][ T3140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 64.117973][ T3140] Call Trace: [ 64.122232][ T3140] [ 64.126216][ T3140] dump_stack_lvl+0xfa/0x181 [ 64.131334][ T3140] print_circular_bug+0x2c5/0x300 [ 64.137009][ T3140] check_noncircular+0x106/0x110 [ 64.142212][ T3140] __lock_acquire+0x146d/0x2830 [ 64.147396][ T3140] ? __lock_acquire+0x1eca/0x2830 [ 64.152488][ T3140] ? uinput_request_submit+0x12e/0x300 [ 64.159691][ T3140] lock_acquire+0xe3/0x270 [ 64.165197][ T3140] ? uinput_request_submit+0x12e/0x300 [ 64.172660][ T3140] ? uinput_request_submit+0x12e/0x300 [ 64.178479][ T3140] __mutex_lock+0x99/0x970 [ 64.183312][ T3140] ? uinput_request_submit+0x12e/0x300 [ 64.189749][ T3140] ? uinput_request_alloc_id+0x1ec/0x200 [ 64.196483][ T3140] uinput_request_submit+0x12e/0x300 [ 64.202719][ T3140] uinput_dev_upload_effect+0x107/0x130 [ 64.208267][ T3140] input_ff_upload+0x307/0x500 [ 64.213209][ T3140] evdev_ioctl_handler+0x1120/0x1560 [ 64.218744][ T3140] ? evdev_poll+0xd0/0xd0 [ 64.223578][ T3140] __se_sys_ioctl+0xb4/0x120 [ 64.228931][ T3140] do_syscall_64+0x3b/0xb0 [ 64.233762][ T3140] ? clear_bhb_loop+0x45/0xa0 [ 64.238681][ T3140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.245173][ T3140] RIP: 0033:0x7faa3407dca9 [ 64.249575][ T3140] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 64.274678][ T3140] RSP: 002b:00007faa33bff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.284127][ T3140] RAX: ffffffffffffffda RBX: 00007faa341abf80 RCX: 00007faa3407dca9 [ 64.293229][ T3140] RDX: 0000000020000300 RSI: 0000000040304580 RDI: 0000000000000004 [ 64.301634][ T3140] RBP: 00007faa340c947e R08: 0000000000000000 R09: 0000000000000000 [ 64.310278][ T3140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.319027][ T3140] R13: 0000000000000006 R14: 00007faa341abf80 R15: 00007ffc990d9668 [ 64.327523][ T3140] 2024/08/28 21:11:49 executed programs: 1 [ 64.441255][ T3142] input: syz1 as /devices/virtual/input/input6 [ 65.279556][ T3144] input: syz1 as /devices/virtual/input/input7 [ 66.118891][ T3146] input: syz1 as /devices/virtual/input/input8 [ 66.957256][ T3148] input: syz1 as /devices/virtual/input/input9 [ 67.796465][ T3150] input: syz1 as /devices/virtual/input/input10 [ 68.660360][ T3152] input: syz1 as /devices/virtual/input/input11 2024/08/28 21:11:54 executed programs: 7 [ 69.500454][ T3154] input: syz1 as /devices/virtual/input/input12 [ 70.339386][ T3156] input: syz1 as /devices/virtual/input/input13 [ 70.520823][ T21] cfg80211: failed to load regulatory.db [ 71.178805][ T3160] input: syz1 as /devices/virtual/input/input14 [ 72.018853][ T3164] input: syz1 as /devices/virtual/input/input15 [ 72.857900][ T3167] input: syz1 as /devices/virtual/input/input16