Warning: Permanently added '10.128.1.247' (ED25519) to the list of known hosts. 2024/06/05 21:13:17 ignoring optional flag "sandboxArg"="0" 2024/06/05 21:13:17 parsed 1 programs 2024/06/05 21:13:18 executed programs: 0 [ 44.008276][ T2325] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.046669][ T2331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.054671][ T2331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.062300][ T2331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.070632][ T2331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.354175][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.362100][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.368694][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.370226][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.377281][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.392929][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.420306][ T2918] input: syz1 as /devices/virtual/input/input5 [ 48.428413][ T2918] [ 48.430844][ T2918] ====================================================== [ 48.438016][ T2918] WARNING: possible circular locking dependency detected [ 48.445002][ T2918] 6.1.92-syzkaller #0 Not tainted [ 48.449995][ T2918] ------------------------------------------------------ [ 48.456990][ T2918] syz-executor.0/2918 is trying to acquire lock: [ 48.463286][ T2918] ffff888101f9dc70 (&newdev->mutex){+.+.}-{3:3}, at: uinput_request_submit+0x12e/0x300 [ 48.473043][ T2918] [ 48.473043][ T2918] but task is already holding lock: [ 48.480401][ T2918] ffff888101f9e0b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x21b/0x500 [ 48.489230][ T2918] [ 48.489230][ T2918] which lock already depends on the new lock. [ 48.489230][ T2918] [ 48.499686][ T2918] [ 48.499686][ T2918] the existing dependency chain (in reverse order) is: [ 48.508852][ T2918] [ 48.508852][ T2918] -> #3 (&ff->mutex){+.+.}-{3:3}: [ 48.516090][ T2918] __mutex_lock+0x99/0x970 [ 48.521182][ T2918] input_ff_flush+0x31/0xb0 [ 48.526275][ T2918] input_flush_device+0x55/0x80 [ 48.531652][ T2918] evdev_release+0x78/0x2e0 [ 48.536668][ T2918] __fput+0x1b8/0x450 [ 48.541241][ T2918] task_work_run+0xfa/0x130 [ 48.546419][ T2918] exit_to_user_mode_loop+0xde/0x100 [ 48.552311][ T2918] exit_to_user_mode_prepare+0xa2/0x100 [ 48.558346][ T2918] syscall_exit_to_user_mode+0x5e/0x210 [ 48.564399][ T2918] do_syscall_64+0x47/0xb0 [ 48.569307][ T2918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.575706][ T2918] [ 48.575706][ T2918] -> #2 (&dev->mutex#2){+.+.}-{3:3}: [ 48.583246][ T2918] __mutex_lock+0x99/0x970 [ 48.588154][ T2918] input_register_handle+0x31/0x160 [ 48.593927][ T2918] kbd_connect+0x45/0xb0 [ 48.598682][ T2918] input_register_device+0x754/0x8a0 [ 48.604457][ T2918] acpi_button_add+0x401/0x5d0 [ 48.609710][ T2918] acpi_device_probe+0x49/0x1c0 [ 48.615074][ T2918] really_probe+0x1c5/0x690 [ 48.620246][ T2918] __driver_probe_device+0xdf/0x1e0 [ 48.625934][ T2918] driver_probe_device+0x2e/0x240 [ 48.631446][ T2918] __driver_attach+0x252/0x390 [ 48.636703][ T2918] bus_for_each_dev+0xb0/0x100 [ 48.642006][ T2918] bus_add_driver+0x15f/0x2e0 [ 48.647787][ T2918] driver_register+0x102/0x190 [ 48.653236][ T2918] do_one_initcall+0x17b/0x480 [ 48.658773][ T2918] do_initcall_level+0xd7/0x1aa [ 48.664198][ T2918] do_initcalls+0x49/0x81 [ 48.669026][ T2918] kernel_init_freeable+0x212/0x2a9 [ 48.674743][ T2918] kernel_init+0x17/0x290 [ 48.679600][ T2918] ret_from_fork+0x1f/0x30 [ 48.684520][ T2918] [ 48.684520][ T2918] -> #1 (input_mutex){+.+.}-{3:3}: [ 48.691782][ T2918] __mutex_lock+0x99/0x970 [ 48.696928][ T2918] input_register_device+0x633/0x8a0 [ 48.702749][ T2918] uinput_create_device+0x1c4/0x290 [ 48.708456][ T2918] uinput_ioctl_handler+0x582/0xae0 [ 48.714148][ T2918] __se_sys_ioctl+0xb4/0x120 [ 48.719242][ T2918] do_syscall_64+0x3b/0xb0 [ 48.724161][ T2918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.730569][ T2918] [ 48.730569][ T2918] -> #0 (&newdev->mutex){+.+.}-{3:3}: [ 48.738084][ T2918] __lock_acquire+0x146d/0x2830 [ 48.743458][ T2918] lock_acquire+0xe3/0x270 [ 48.748359][ T2918] __mutex_lock+0x99/0x970 [ 48.753444][ T2918] uinput_request_submit+0x12e/0x300 [ 48.759231][ T2918] uinput_dev_upload_effect+0x107/0x130 [ 48.765267][ T2918] input_ff_upload+0x307/0x500 [ 48.770542][ T2918] evdev_ioctl_handler+0x1120/0x1560 [ 48.776326][ T2918] __se_sys_ioctl+0xb4/0x120 [ 48.781418][ T2918] do_syscall_64+0x3b/0xb0 [ 48.786425][ T2918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.792818][ T2918] [ 48.792818][ T2918] other info that might help us debug this: [ 48.792818][ T2918] [ 48.803030][ T2918] Chain exists of: [ 48.803030][ T2918] &newdev->mutex --> &dev->mutex#2 --> &ff->mutex [ 48.803030][ T2918] [ 48.815352][ T2918] Possible unsafe locking scenario: [ 48.815352][ T2918] [ 48.822828][ T2918] CPU0 CPU1 [ 48.828169][ T2918] ---- ---- [ 48.833523][ T2918] lock(&ff->mutex); [ 48.837515][ T2918] lock(&dev->mutex#2); [ 48.844261][ T2918] lock(&ff->mutex); [ 48.850740][ T2918] lock(&newdev->mutex); [ 48.855147][ T2918] [ 48.855147][ T2918] *** DEADLOCK *** [ 48.855147][ T2918] [ 48.863263][ T2918] 2 locks held by syz-executor.0/2918: [ 48.868733][ T2918] #0: ffff888101bdd910 (&evdev->mutex){+.+.}-{3:3}, at: evdev_ioctl_handler+0x55/0x1560 [ 48.878555][ T2918] #1: ffff888101f9e0b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x21b/0x500 [ 48.887872][ T2918] [ 48.887872][ T2918] stack backtrace: [ 48.893739][ T2918] CPU: 1 PID: 2918 Comm: syz-executor.0 Not tainted 6.1.92-syzkaller #0 [ 48.902047][ T2918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 48.912078][ T2918] Call Trace: [ 48.915346][ T2918] [ 48.918248][ T2918] dump_stack_lvl+0xfa/0x181 [ 48.922812][ T2918] print_circular_bug+0x2c5/0x300 [ 48.927805][ T2918] check_noncircular+0x106/0x110 [ 48.932825][ T2918] __lock_acquire+0x146d/0x2830 [ 48.937771][ T2918] ? __lock_acquire+0x1eca/0x2830 [ 48.942774][ T2918] ? uinput_request_submit+0x12e/0x300 [ 48.948201][ T2918] lock_acquire+0xe3/0x270 [ 48.952591][ T2918] ? uinput_request_submit+0x12e/0x300 [ 48.958459][ T2918] ? uinput_request_submit+0x12e/0x300 [ 48.964167][ T2918] __mutex_lock+0x99/0x970 [ 48.968585][ T2918] ? uinput_request_submit+0x12e/0x300 [ 48.974033][ T2918] ? uinput_request_alloc_id+0x1ec/0x200 [ 48.979731][ T2918] uinput_request_submit+0x12e/0x300 [ 48.984990][ T2918] uinput_dev_upload_effect+0x107/0x130 [ 48.990520][ T2918] input_ff_upload+0x307/0x500 [ 48.995534][ T2918] evdev_ioctl_handler+0x1120/0x1560 [ 49.000896][ T2918] ? evdev_poll+0xd0/0xd0 [ 49.005203][ T2918] __se_sys_ioctl+0xb4/0x120 [ 49.009867][ T2918] do_syscall_64+0x3b/0xb0 [ 49.014258][ T2918] ? clear_bhb_loop+0x45/0xa0 [ 49.018933][ T2918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.024819][ T2918] RIP: 0033:0x7f335287dca9 [ 49.029341][ T2918] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.049388][ T2918] RSP: 002b:00007f33535140c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.057974][ T2918] RAX: ffffffffffffffda RBX: 00007f33529abf80 RCX: 00007f335287dca9 [ 49.066017][ T2918] RDX: 0000000020000300 RSI: 0000000040304580 RDI: 0000000000000004 [ 49.073962][ T2918] RBP: 00007f33528c947e R08: 0000000000000000 R09: 0000000000000000 [ 49.081993][ T2918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.090111][ T2918] R13: 0000000000000006 R14: 00007f33529abf80 R15: 00007ffc1ed9fd88 [ 49.098242][ T2918] 2024/06/05 21:13:24 executed programs: 1 [ 49.258924][ T2920] input: syz1 as /devices/virtual/input/input6 [ 50.097413][ T2922] input: syz1 as /devices/virtual/input/input7 [ 50.936335][ T2924] input: syz1 as /devices/virtual/input/input8 [ 51.775788][ T2926] input: syz1 as /devices/virtual/input/input9 [ 52.613559][ T2928] input: syz1 as /devices/virtual/input/input10 [ 53.462311][ T2930] input: syz1 as /devices/virtual/input/input11 2024/06/05 21:13:29 executed programs: 7 [ 54.301680][ T2932] input: syz1 as /devices/virtual/input/input12 [ 55.140008][ T2934] input: syz1 as /devices/virtual/input/input13 [ 55.979274][ T2936] input: syz1 as /devices/virtual/input/input14 [ 56.818776][ T2938] input: syz1 as /devices/virtual/input/input15 [ 57.657347][ T2940] input: syz1 as /devices/virtual/input/input16