Warning: Permanently added '10.128.1.242' (ED25519) to the list of known hosts. 2025/07/27 02:39:07 ignoring optional flag "sandboxArg"="0" 2025/07/27 02:39:08 parsed 1 programs [ 65.479563][ T25] audit: type=1400 audit(1753583949.535:123): avc: denied { unlink } for pid=4276 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.723260][ T4276] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.245971][ T25] audit: type=1400 audit(1753583951.295:124): avc: denied { execmem } for pid=4279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 67.265338][ T25] audit: type=1400 audit(1753583951.295:125): avc: denied { read } for pid=4280 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.286581][ T25] audit: type=1400 audit(1753583951.295:126): avc: denied { open } for pid=4280 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.618027][ T4287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.625974][ T4287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.633393][ T4287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.640777][ T4287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.379541][ T30] cfg80211: failed to load regulatory.db [ 72.976370][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.984418][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.995382][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.010242][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.018197][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.026432][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.778400][ T25] audit: type=1401 audit(1753583957.825:127): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/07/27 02:39:18 executed programs: 0 [ 76.215220][ T4778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.222733][ T4778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.230767][ T4778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.246168][ T4778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.258520][ T2414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.266465][ T2414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.275102][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.284049][ T2414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.291998][ T2414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.300178][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/07/27 02:39:26 executed programs: 2 [ 82.346958][ T25] audit: type=1400 audit(1753583966.395:128): avc: denied { read } for pid=5545 comm="syz.2.16" name="uinput" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.370086][ T5546] input: syz1 as /devices/virtual/input/input5 [ 82.370198][ T25] audit: type=1400 audit(1753583966.395:129): avc: denied { open } for pid=5545 comm="syz.2.16" path="/dev/uinput" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.399586][ T25] audit: type=1400 audit(1753583966.425:130): avc: denied { ioctl } for pid=5545 comm="syz.2.16" path="/dev/uinput" dev="devtmpfs" ino=671 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.424346][ T25] audit: type=1400 audit(1753583966.425:131): avc: denied { read } for pid=5545 comm="syz.2.16" name="event4" dev="devtmpfs" ino=1434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.446840][ T25] audit: type=1400 audit(1753583966.425:132): avc: denied { open } for pid=5545 comm="syz.2.16" path="/dev/input/event4" dev="devtmpfs" ino=1434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.470216][ T25] audit: type=1400 audit(1753583966.425:133): avc: denied { ioctl } for pid=5545 comm="syz.2.16" path="/dev/input/event4" dev="devtmpfs" ino=1434 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.495052][ T25] audit: type=1400 audit(1753583966.445:134): avc: denied { read } for pid=2510 comm="acpid" name="event4" dev="devtmpfs" ino=1434 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.517467][ T25] audit: type=1400 audit(1753583966.445:135): avc: denied { open } for pid=2510 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=1434 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.179528][ T5546] [ 83.181870][ T5546] ====================================================== [ 83.188876][ T5546] WARNING: possible circular locking dependency detected [ 83.195866][ T5546] 6.4.0-syzkaller #0 Not tainted [ 83.200776][ T5546] ------------------------------------------------------ [ 83.207779][ T5546] syz.2.16/5546 is trying to acquire lock: [ 83.213556][ T5546] ffff8881093dc8b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_flush+0x36/0xc0 [ 83.222059][ T5546] [ 83.222059][ T5546] but task is already holding lock: [ 83.229393][ T5546] ffff8881686ccac0 (&dev->mutex#2){+.+.}-{4:4}, at: input_flush_device+0x2c/0x80 [ 83.238514][ T5546] [ 83.238514][ T5546] which lock already depends on the new lock. [ 83.238514][ T5546] [ 83.248985][ T5546] [ 83.248985][ T5546] the existing dependency chain (in reverse order) is: [ 83.257975][ T5546] [ 83.257975][ T5546] -> #3 (&dev->mutex#2){+.+.}-{4:4}: [ 83.265423][ T5546] __mutex_lock+0xab/0x9a0 [ 83.270374][ T5546] input_register_handle+0x33/0x1b0 [ 83.276082][ T5546] kbd_connect+0x4e/0xb0 [ 83.280828][ T5546] input_attach_handler.isra.0+0xd4/0x130 [ 83.287063][ T5546] input_register_device+0x62d/0x820 [ 83.292852][ T5546] acpi_button_add+0x2c1/0x6c0 [ 83.298142][ T5546] acpi_device_probe+0x64/0x190 [ 83.303499][ T5546] really_probe+0x136/0x590 [ 83.308506][ T5546] __driver_probe_device+0xcd/0x1f0 [ 83.314207][ T5546] driver_probe_device+0x2a/0x120 [ 83.319754][ T5546] __driver_attach+0x17e/0x2b0 [ 83.325018][ T5546] bus_for_each_dev+0xb6/0x120 [ 83.330290][ T5546] bus_add_driver+0x162/0x2e0 [ 83.335474][ T5546] driver_register+0x85/0x180 [ 83.340674][ T5546] acpi_bus_register_driver+0x52/0x70 [ 83.346566][ T5546] acpi_button_driver_init+0x52/0xb0 [ 83.352375][ T5546] do_one_initcall+0xa0/0x360 [ 83.357687][ T5546] kernel_init_freeable+0x33b/0x5d0 [ 83.363410][ T5546] kernel_init+0x1b/0x290 [ 83.368245][ T5546] ret_from_fork+0x29/0x50 [ 83.373175][ T5546] [ 83.373175][ T5546] -> #2 (input_mutex){+.+.}-{4:4}: [ 83.380481][ T5546] __mutex_lock+0xab/0x9a0 [ 83.385416][ T5546] input_register_device+0x59a/0x820 [ 83.391221][ T5546] uinput_ioctl_handler.isra.0+0xc4f/0xfd0 [ 83.397807][ T5546] __x64_sys_ioctl+0xf6/0x150 [ 83.403000][ T5546] do_syscall_64+0x3c/0xc0 [ 83.407923][ T5546] entry_SYSCALL_64_after_hwframe+0x6f/0xd9 [ 83.414328][ T5546] [ 83.414328][ T5546] -> #1 (&newdev->mutex){+.+.}-{4:4}: [ 83.421881][ T5546] __mutex_lock+0xab/0x9a0 [ 83.426822][ T5546] uinput_request_submit.part.0+0x1f/0x130 [ 83.433139][ T5546] uinput_dev_upload_effect+0xbc/0x100 [ 83.439101][ T5546] input_ff_upload+0x34b/0x4c0 [ 83.444390][ T5546] evdev_do_ioctl+0xac2/0x11c0 [ 83.449672][ T5546] evdev_ioctl+0xd6/0xe0 [ 83.454424][ T5546] __x64_sys_ioctl+0xf6/0x150 [ 83.460124][ T5546] do_syscall_64+0x3c/0xc0 [ 83.465054][ T5546] entry_SYSCALL_64_after_hwframe+0x6f/0xd9 [ 83.471456][ T5546] [ 83.471456][ T5546] -> #0 (&ff->mutex){+.+.}-{4:4}: [ 83.478640][ T5546] __lock_acquire+0x13fd/0x1c00 [ 83.484006][ T5546] lock_acquire+0xcd/0x2c0 [ 83.488930][ T5546] __mutex_lock+0xab/0x9a0 [ 83.493853][ T5546] input_ff_flush+0x36/0xc0 [ 83.498867][ T5546] uinput_dev_flush+0x2a/0x40 [ 83.504049][ T5546] input_flush_device+0x5a/0x80 [ 83.509401][ T5546] evdev_release+0x19f/0x1b0 [ 83.514501][ T5546] __fput+0x1d3/0x4c0 [ 83.518983][ T5546] task_work_run+0x8f/0xe0 [ 83.523898][ T5546] exit_to_user_mode_prepare+0x1f3/0x200 [ 83.530031][ T5546] syscall_exit_to_user_mode+0x1e/0x60 [ 83.535997][ T5546] do_syscall_64+0x4c/0xc0 [ 83.540910][ T5546] entry_SYSCALL_64_after_hwframe+0x6f/0xd9 [ 83.547309][ T5546] [ 83.547309][ T5546] other info that might help us debug this: [ 83.547309][ T5546] [ 83.557514][ T5546] Chain exists of: [ 83.557514][ T5546] &ff->mutex --> input_mutex --> &dev->mutex#2 [ 83.557514][ T5546] [ 83.569756][ T5546] Possible unsafe locking scenario: [ 83.569756][ T5546] [ 83.577181][ T5546] CPU0 CPU1 [ 83.582519][ T5546] ---- ---- [ 83.587860][ T5546] lock(&dev->mutex#2); [ 83.592083][ T5546] lock(input_mutex); [ 83.598647][ T5546] lock(&dev->mutex#2); [ 83.605395][ T5546] lock(&ff->mutex); [ 83.609349][ T5546] [ 83.609349][ T5546] *** DEADLOCK *** [ 83.609349][ T5546] [ 83.617466][ T5546] 2 locks held by syz.2.16/5546: [ 83.622374][ T5546] #0: ffff8881686cf910 (&evdev->mutex){+.+.}-{4:4}, at: evdev_release+0x34/0x1b0 [ 83.631581][ T5546] #1: ffff8881686ccac0 (&dev->mutex#2){+.+.}-{4:4}, at: input_flush_device+0x2c/0x80 [ 83.641137][ T5546] [ 83.641137][ T5546] stack backtrace: [ 83.646998][ T5546] CPU: 0 PID: 5546 Comm: syz.2.16 Not tainted 6.4.0-syzkaller #0 [ 83.654692][ T5546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.664724][ T5546] Call Trace: [ 83.667978][ T5546] [ 83.670890][ T5546] dump_stack_lvl+0xd9/0x1b0 [ 83.675470][ T5546] check_noncircular+0xf8/0x110 [ 83.680310][ T5546] __lock_acquire+0x13fd/0x1c00 [ 83.685149][ T5546] lock_acquire+0xcd/0x2c0 [ 83.689554][ T5546] ? input_ff_flush+0x36/0xc0 [ 83.694211][ T5546] ? lock_acquire+0xcd/0x2c0 [ 83.698789][ T5546] __mutex_lock+0xab/0x9a0 [ 83.703191][ T5546] ? input_ff_flush+0x36/0xc0 [ 83.707851][ T5546] ? input_ff_flush+0x36/0xc0 [ 83.712518][ T5546] ? input_ff_flush+0x36/0xc0 [ 83.717190][ T5546] input_ff_flush+0x36/0xc0 [ 83.721689][ T5546] ? __pfx_uinput_dev_flush+0x10/0x10 [ 83.727041][ T5546] uinput_dev_flush+0x2a/0x40 [ 83.731703][ T5546] input_flush_device+0x5a/0x80 [ 83.736563][ T5546] evdev_release+0x19f/0x1b0 [ 83.741144][ T5546] ? __pfx_evdev_release+0x10/0x10 [ 83.746242][ T5546] __fput+0x1d3/0x4c0 [ 83.750211][ T5546] task_work_run+0x8f/0xe0 [ 83.754613][ T5546] exit_to_user_mode_prepare+0x1f3/0x200 [ 83.760317][ T5546] syscall_exit_to_user_mode+0x1e/0x60 [ 83.765768][ T5546] do_syscall_64+0x4c/0xc0 [ 83.770167][ T5546] entry_SYSCALL_64_after_hwframe+0x6f/0xd9 [ 83.776048][ T5546] RIP: 0033:0x7f3d8618e9a9 [ 83.780537][ T5546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.800133][ T5546] RSP: 002b:00007f3d86f39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.808594][ T5546] RAX: ffffffffffffffed RBX: 00007f3d863b5fa0 RCX: 00007f3d8618e9a9 [ 83.816547][ T5546] RDX: 0000200000000300 RSI: 0000000040304580 RDI: 0000000000000004 [ 83.824512][ T5546] RBP: 00007f3d86210d69 R08: 0000000000000000 R09: 0000000000000000 [ 83.832462][ T5546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.840412][ T5546] R13: 0000000000000000 R14: 00007f3d863b5fa0 R15: 00007ffdd59fe5b8 [ 83.848365][ T5546] [ 83.852125][ T25] audit: type=1400 audit(1753583967.905:136): avc: denied { ioctl } for pid=2510 comm="acpid" path=2F6465762F696E7075742F6576656E7434202864656C6574656429 dev="devtmpfs" ino=1434 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.886095][ T5551] input: syz1 as /devices/virtual/input/input6 [ 84.725041][ T5553] input: syz1 as /devices/virtual/input/input7 [ 85.563648][ T5555] input: syz1 as /devices/virtual/input/input8 [ 86.402496][ T5585] input: syz1 as /devices/virtual/input/input9 [ 87.240975][ T5629] input: syz1 as /devices/virtual/input/input10 2025/07/27 02:39:32 executed programs: 8 [ 88.080107][ T5659] input: syz1 as /devices/virtual/input/input11 [ 88.918255][ T5677] input: syz1 as /devices/virtual/input/input12 [ 89.757716][ T5681] input: syz1 as /devices/virtual/input/input13 [ 90.596358][ T5683] input: syz1 as /devices/virtual/input/input14 [ 91.435278][ T5685] input: syz1 as /devices/virtual/input/input15 [ 92.272809][ T5687] input: syz1 as /devices/virtual/input/input16 2025/07/27 02:39:37 executed programs: 14 [ 93.112096][ T5689] input: syz1 as /devices/virtual/input/input17