Warning: Permanently added '[localhost]:4755' (ED25519) to the list of known hosts. [ 71.156361][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.158529][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 2025/08/10 05:48:46 ignoring optional flag "sandboxArg"="0" 2025/08/10 05:48:46 parsed 1 programs [ 73.933456][ T40] audit: type=1400 audit(1754804928.730:118): avc: denied { unlink } for pid=6242 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 74.923559][ T6242] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.963932][ T6311] chnl_net:caif_netlink_parms(): no params data found [ 77.024509][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.026801][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.029049][ T6311] bridge_slave_0: entered allmulticast mode [ 77.031599][ T6311] bridge_slave_0: entered promiscuous mode [ 77.037941][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.040218][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.042455][ T6311] bridge_slave_1: entered allmulticast mode [ 77.045303][ T6311] bridge_slave_1: entered promiscuous mode [ 77.073295][ T6311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.077620][ T6311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.107368][ T6311] team0: Port device team_slave_0 added [ 77.110477][ T6311] team0: Port device team_slave_1 added [ 77.138738][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.140939][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.151410][ T6311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.157038][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.159197][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.167375][ T6311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.203109][ T6311] hsr_slave_0: entered promiscuous mode [ 77.205310][ T6311] hsr_slave_1: entered promiscuous mode [ 77.678814][ T6311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.682804][ T6311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.690322][ T6311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.694527][ T6311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.710540][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.712827][ T6311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.715232][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.717456][ T6311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.745062][ T6311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.752307][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.756148][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.764512][ T6311] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.770217][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.772556][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.779248][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.781566][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.883349][ T6311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.904584][ T6311] veth0_vlan: entered promiscuous mode [ 77.909841][ T6311] veth1_vlan: entered promiscuous mode [ 77.923774][ T6311] veth0_macvtap: entered promiscuous mode [ 77.927434][ T6311] veth1_macvtap: entered promiscuous mode [ 77.938582][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.944981][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.950689][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.954286][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.957408][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.960122][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.056341][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.139736][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.198821][ T5327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.201705][ T5327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.207743][ T5327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.210570][ T5327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.215929][ T5327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.230172][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.307374][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.795963][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.798422][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.811864][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.815376][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.888929][ T40] audit: type=1401 audit(1754804933.690:119): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/08/10 05:48:54 executed programs: 0 [ 79.388970][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.391819][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.395482][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.398398][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.400826][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.487601][ T6494] chnl_net:caif_netlink_parms(): no params data found [ 79.548990][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.551300][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.554535][ T6494] bridge_slave_0: entered allmulticast mode [ 79.557090][ T6494] bridge_slave_0: entered promiscuous mode [ 79.560360][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.562618][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.565187][ T6494] bridge_slave_1: entered allmulticast mode [ 79.567806][ T6494] bridge_slave_1: entered promiscuous mode [ 79.604569][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.609332][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.647544][ T6494] team0: Port device team_slave_0 added [ 79.652026][ T6494] team0: Port device team_slave_1 added [ 79.681159][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.683532][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.691458][ T6494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.695769][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.697971][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.706928][ T6494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.745912][ T6494] hsr_slave_0: entered promiscuous mode [ 79.748262][ T6494] hsr_slave_1: entered promiscuous mode [ 79.750524][ T6494] debugfs: 'hsr0' already exists in 'hsr' [ 79.752396][ T6494] Cannot create hsr debugfs directory [ 81.202836][ T46] bridge_slave_1: left allmulticast mode [ 81.204825][ T46] bridge_slave_1: left promiscuous mode [ 81.206650][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.210500][ T46] bridge_slave_0: left allmulticast mode [ 81.212306][ T46] bridge_slave_0: left promiscuous mode [ 81.214653][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.360110][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.364089][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.367494][ T46] bond0 (unregistering): Released all slaves [ 81.404212][ T1333] cfg80211: failed to load regulatory.db [ 81.484251][ T63] Bluetooth: hci0: command tx timeout [ 81.557786][ T46] hsr_slave_0: left promiscuous mode [ 81.559875][ T46] hsr_slave_1: left promiscuous mode [ 81.561814][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.564361][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.567368][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.569685][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.582746][ T46] veth1_macvtap: left promiscuous mode [ 81.584674][ T46] veth0_macvtap: left promiscuous mode [ 81.586759][ T46] veth1_vlan: left promiscuous mode [ 81.588540][ T46] veth0_vlan: left promiscuous mode [ 81.923001][ T46] team0 (unregistering): Port device team_slave_1 removed [ 81.959944][ T46] team0 (unregistering): Port device team_slave_0 removed [ 82.377053][ T6494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.381560][ T6494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.390640][ T6494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.396981][ T6494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.436941][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.446860][ T6494] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.452503][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.454856][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.461779][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.464152][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.572432][ T6494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.593943][ T6494] veth0_vlan: entered promiscuous mode [ 82.599185][ T6494] veth1_vlan: entered promiscuous mode [ 82.614498][ T6494] veth0_macvtap: entered promiscuous mode [ 82.618507][ T6494] veth1_macvtap: entered promiscuous mode [ 82.626587][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.632308][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.639999][ T103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.642827][ T103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.646236][ T103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.648971][ T103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.881997][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.885368][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.896956][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.899515][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.921728][ T40] audit: type=1400 audit(1754804937.720:120): avc: denied { read } for pid=6552 comm="syz.0.16" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.927352][ T6553] input: syz1 as /devices/virtual/input/input5 [ 82.929387][ T40] audit: type=1400 audit(1754804937.720:121): avc: denied { open } for pid=6552 comm="syz.0.16" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.935083][ T6553] [ 82.938931][ T40] audit: type=1400 audit(1754804937.720:122): avc: denied { ioctl } for pid=6552 comm="syz.0.16" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.939507][ T6553] ====================================================== [ 82.939513][ T6553] WARNING: possible circular locking dependency detected [ 82.939517][ T6553] 6.16.0-syzkaller-12256-g561c80369df0 #0 Not tainted [ 82.939523][ T6553] ------------------------------------------------------ [ 82.947326][ T40] audit: type=1400 audit(1754804937.750:123): avc: denied { read } for pid=5361 comm="acpid" name="event4" dev="devtmpfs" ino=2842 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.949557][ T6553] syz.0.16/6553 is trying to acquire lock: [ 82.951770][ T40] audit: type=1400 audit(1754804937.750:124): avc: denied { open } for pid=5361 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2842 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.954335][ T6553] ffff888043d58870 (&newdev->mutex){+.+.}-{4:4}, at: uinput_request_submit.part.0+0x25/0x2e0 [ 82.954373][ T6553] [ 82.954373][ T6553] but task is already holding lock: [ 82.954377][ T6553] ffff88805207a8b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x1dd/0xc40 [ 82.958053][ T40] audit: type=1400 audit(1754804937.750:125): avc: denied { ioctl } for pid=5361 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2842 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.964924][ T6553] [ 82.964924][ T6553] which lock already depends on the new lock. [ 82.964924][ T6553] [ 82.964930][ T6553] [ 82.964930][ T6553] the existing dependency chain (in reverse order) is: [ 82.964934][ T6553] [ 82.964934][ T6553] -> #3 (&ff->mutex){+.+.}-{4:4}: [ 82.964949][ T6553] __mutex_lock+0x193/0x10b0 [ 82.967494][ T40] audit: type=1400 audit(1754804937.750:126): avc: denied { read } for pid=6552 comm="syz.0.16" name="event4" dev="devtmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.974691][ T6553] input_ff_flush+0x63/0x1a0 [ 82.974713][ T6553] uinput_dev_flush+0x2a/0x40 [ 82.974729][ T6553] input_flush_device+0xc6/0x140 [ 82.978042][ T40] audit: type=1400 audit(1754804937.750:127): avc: denied { open } for pid=6552 comm="syz.0.16" path="/dev/input/event4" dev="devtmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.981017][ T6553] evdev_release+0x344/0x420 [ 82.984028][ T40] audit: type=1400 audit(1754804937.750:128): avc: denied { ioctl } for pid=6552 comm="syz.0.16" path="/dev/input/event4" dev="devtmpfs" ino=2842 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.993164][ T6553] __fput+0x3ff/0xb70 [ 82.993182][ T6553] fput_close_sync+0x118/0x210 [ 82.993195][ T6553] __x64_sys_close+0x8b/0x120 [ 83.036465][ T6553] do_syscall_64+0xcd/0x4c0 [ 83.038071][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.040102][ T6553] [ 83.040102][ T6553] -> #2 (&dev->mutex#2){+.+.}-{4:4}: [ 83.042481][ T6553] __mutex_lock+0x193/0x10b0 [ 83.044092][ T6553] input_register_handle+0xca/0x630 [ 83.045864][ T6553] kbd_connect+0xca/0x160 [ 83.047631][ T6553] input_attach_handler.isra.0+0x176/0x250 [ 83.049783][ T6553] input_register_device+0xab9/0x1180 [ 83.051670][ T6553] acpi_button_add+0x582/0xb70 [ 83.053380][ T6553] acpi_device_probe+0xc6/0x330 [ 83.055053][ T6553] really_probe+0x241/0xa90 [ 83.056634][ T6553] __driver_probe_device+0x1de/0x440 [ 83.058463][ T6553] driver_probe_device+0x4c/0x1b0 [ 83.060233][ T6553] __driver_attach+0x283/0x580 [ 83.061879][ T6553] bus_for_each_dev+0x13b/0x1d0 [ 83.063588][ T6553] bus_add_driver+0x2e9/0x690 [ 83.065229][ T6553] driver_register+0x15c/0x4b0 [ 83.066887][ T6553] __acpi_bus_register_driver+0xdf/0x130 [ 83.068814][ T6553] acpi_button_driver_init+0x82/0x110 [ 83.070901][ T6553] do_one_initcall+0x120/0x6e0 [ 83.072609][ T6553] kernel_init_freeable+0x5c2/0x910 [ 83.074396][ T6553] kernel_init+0x1c/0x2b0 [ 83.075931][ T6553] ret_from_fork+0x5d4/0x6f0 [ 83.077543][ T6553] ret_from_fork_asm+0x1a/0x30 [ 83.079221][ T6553] [ 83.079221][ T6553] -> #1 (input_mutex){+.+.}-{4:4}: [ 83.081963][ T6553] __mutex_lock+0x193/0x10b0 [ 83.083592][ T6553] input_register_device+0x992/0x1180 [ 83.085437][ T6553] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 83.087446][ T6553] __x64_sys_ioctl+0x18b/0x210 [ 83.089110][ T6553] do_syscall_64+0xcd/0x4c0 [ 83.090699][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.092727][ T6553] [ 83.092727][ T6553] -> #0 (&newdev->mutex){+.+.}-{4:4}: [ 83.095061][ T6553] __lock_acquire+0x12a6/0x1ce0 [ 83.096758][ T6553] lock_acquire+0x179/0x350 [ 83.098343][ T6553] __mutex_lock+0x193/0x10b0 [ 83.100082][ T6553] uinput_request_submit.part.0+0x25/0x2e0 [ 83.102223][ T6553] uinput_dev_upload_effect+0x174/0x1f0 [ 83.104235][ T6553] input_ff_upload+0x582/0xc40 [ 83.105889][ T6553] evdev_do_ioctl+0xf40/0x1b30 [ 83.107531][ T6553] evdev_ioctl+0x16f/0x1a0 [ 83.109085][ T6553] __x64_sys_ioctl+0x18b/0x210 [ 83.110825][ T6553] do_syscall_64+0xcd/0x4c0 [ 83.112432][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.114443][ T6553] [ 83.114443][ T6553] other info that might help us debug this: [ 83.114443][ T6553] [ 83.117593][ T6553] Chain exists of: [ 83.117593][ T6553] &newdev->mutex --> &dev->mutex#2 --> &ff->mutex [ 83.117593][ T6553] [ 83.121394][ T6553] Possible unsafe locking scenario: [ 83.121394][ T6553] [ 83.123764][ T6553] CPU0 CPU1 [ 83.125433][ T6553] ---- ---- [ 83.127398][ T6553] lock(&ff->mutex); [ 83.129035][ T6553] lock(&dev->mutex#2); [ 83.131719][ T6553] lock(&ff->mutex); [ 83.134298][ T6553] lock(&newdev->mutex); [ 83.136035][ T6553] [ 83.136035][ T6553] *** DEADLOCK *** [ 83.136035][ T6553] [ 83.139260][ T6553] 2 locks held by syz.0.16/6553: [ 83.141272][ T6553] #0: ffff88804f418118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_ioctl+0x7f/0x1a0 [ 83.144887][ T6553] #1: ffff88805207a8b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x1dd/0xc40 [ 83.148570][ T6553] [ 83.148570][ T6553] stack backtrace: [ 83.150942][ T6553] CPU: 3 UID: 0 PID: 6553 Comm: syz.0.16 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 83.150963][ T6553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.150972][ T6553] Call Trace: [ 83.150979][ T6553] [ 83.150986][ T6553] dump_stack_lvl+0x116/0x1f0 [ 83.151003][ T6553] print_circular_bug+0x275/0x350 [ 83.151027][ T6553] check_noncircular+0x14c/0x170 [ 83.151051][ T6553] __lock_acquire+0x12a6/0x1ce0 [ 83.151076][ T6553] lock_acquire+0x179/0x350 [ 83.151097][ T6553] ? uinput_request_submit.part.0+0x25/0x2e0 [ 83.151123][ T6553] ? __pfx___might_resched+0x10/0x10 [ 83.151143][ T6553] ? uinput_request_submit.part.0+0x25/0x2e0 [ 83.151165][ T6553] __mutex_lock+0x193/0x10b0 [ 83.151181][ T6553] ? uinput_request_submit.part.0+0x25/0x2e0 [ 83.151203][ T6553] ? find_held_lock+0x2b/0x80 [ 83.151221][ T6553] ? uinput_request_reserve_slot+0x3ca/0x4d0 [ 83.151237][ T6553] ? __pfx___mutex_lock+0x10/0x10 [ 83.151251][ T6553] ? _raw_spin_unlock+0x28/0x50 [ 83.151273][ T6553] ? __pfx_uinput_request_reserve_slot+0x10/0x10 [ 83.151288][ T6553] ? __pfx___might_resched+0x10/0x10 [ 83.151306][ T6553] ? rcu_is_watching+0x12/0xc0 [ 83.151326][ T6553] ? uinput_request_submit.part.0+0x25/0x2e0 [ 83.151348][ T6553] uinput_request_submit.part.0+0x25/0x2e0 [ 83.151373][ T6553] uinput_dev_upload_effect+0x174/0x1f0 [ 83.151387][ T6553] ? __pfx_uinput_dev_upload_effect+0x10/0x10 [ 83.151405][ T6553] ? __might_fault+0x13b/0x190 [ 83.151422][ T6553] input_ff_upload+0x582/0xc40 [ 83.151447][ T6553] evdev_do_ioctl+0xf40/0x1b30 [ 83.151468][ T6553] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 83.151494][ T6553] evdev_ioctl+0x16f/0x1a0 [ 83.151513][ T6553] ? __pfx_evdev_ioctl+0x10/0x10 [ 83.151533][ T6553] __x64_sys_ioctl+0x18b/0x210 [ 83.151555][ T6553] do_syscall_64+0xcd/0x4c0 [ 83.151571][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.151586][ T6553] RIP: 0033:0x7f8037985d29 [ 83.151599][ T6553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.151613][ T6553] RSP: 002b:00007f803879c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.151628][ T6553] RAX: ffffffffffffffda RBX: 00007f8037b75fa0 RCX: 00007f8037985d29 [ 83.151659][ T6553] RDX: 0000000020000300 RSI: 0000000040304580 RDI: 0000000000000004 [ 83.151669][ T6553] RBP: 00007f8037a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 83.151678][ T6553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.151687][ T6553] R13: 0000000000000000 R14: 00007f8037b75fa0 R15: 00007ffe8221f448 [ 83.151702][ T6553] [ 83.553156][ T63] Bluetooth: hci0: command tx timeout [ 83.761933][ T6555] input: syz1 as /devices/virtual/input/input6 [ 84.600297][ T6557] input: syz1 as /devices/virtual/input/input7 2025/08/10 05:48:59 executed programs: 4 [ 85.444837][ T6559] input: syz1 as /devices/virtual/input/input8 [ 85.633200][ T63] Bluetooth: hci0: command tx timeout [ 86.286842][ T6561] input: syz1 as /devices/virtual/input/input9 [ 87.128814][ T6563] input: syz1 as /devices/virtual/input/input10 [ 87.713237][ T63] Bluetooth: hci0: command tx timeout [ 87.973143][ T6565] input: syz1 as /devices/virtual/input/input11 [ 88.813365][ T6568] input: syz1 as /devices/virtual/input/input12 [ 89.656376][ T6570] input: syz1 as /devices/virtual/input/input13 2025/08/10 05:49:04 executed programs: 10 [ 90.499112][ T6572] input: syz1 as /devices/virtual/input/input14 [ 91.338266][ T6577] input: syz1 as /devices/virtual/input/input15 [ 92.182224][ T6581] input: syz1 as /devices/virtual/input/input16