Warning: Permanently added '10.128.1.211' (ED25519) to the list of known hosts. 2025/11/25 00:35:10 parsed 1 programs [ 70.561257][ T4095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.570169][ T41] cfg80211: failed to load regulatory.db [ 73.827271][ T4155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.835306][ T4155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.843388][ T4155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.851177][ T4155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.187167][ T1839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.195204][ T1839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.205269][ T1839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.213359][ T1839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/25 00:35:19 executed programs: 0 [ 79.023666][ T4710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.031689][ T4710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.039734][ T4710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.047619][ T4710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.781708][ T1839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.789682][ T1839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.800624][ T1839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.808661][ T1839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.847654][ T5215] input: syz0 as /devices/virtual/input/input5 [ 81.855497][ T5215] [ 81.857940][ T5215] ====================================================== [ 81.865109][ T5215] WARNING: possible circular locking dependency detected [ 81.872547][ T5215] syzkaller #0 Not tainted [ 81.877385][ T5215] ------------------------------------------------------ [ 81.884405][ T5215] syz.2.17/5215 is trying to acquire lock: [ 81.890192][ T5215] ffff888108337470 (&newdev->mutex){+.+.}-{4:4}, at: uinput_request_submit+0x117/0x2f0 [ 81.899842][ T5215] [ 81.899842][ T5215] but task is already holding lock: [ 81.907353][ T5215] ffff8881083364b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x20f/0x550 [ 81.916191][ T5215] [ 81.916191][ T5215] which lock already depends on the new lock. [ 81.916191][ T5215] [ 81.926568][ T5215] [ 81.926568][ T5215] the existing dependency chain (in reverse order) is: [ 81.935594][ T5215] [ 81.935594][ T5215] -> #3 (&ff->mutex){+.+.}-{4:4}: [ 81.942951][ T5215] __mutex_lock+0xab/0xce0 [ 81.947866][ T5215] input_ff_flush+0x39/0xf0 [ 81.952872][ T5215] input_flush_device+0x80/0xd0 [ 81.958323][ T5215] evdev_release+0x63/0x2c0 [ 81.963328][ T5215] __fput+0x1cc/0x530 [ 81.967929][ T5215] __se_sys_close+0xcd/0x160 [ 81.973013][ T5215] do_syscall_64+0xa6/0x2c0 [ 81.978022][ T5215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.984434][ T5215] [ 81.984434][ T5215] -> #2 (&dev->mutex#2){+.+.}-{4:4}: [ 81.991872][ T5215] __mutex_lock+0xab/0xce0 [ 81.996789][ T5215] input_register_handle+0x81/0x210 [ 82.002477][ T5215] kbd_connect+0x4b/0xc0 [ 82.007211][ T5215] input_register_device+0x7aa/0x940 [ 82.013080][ T5215] acpi_button_add+0x42a/0x690 [ 82.018424][ T5215] acpi_device_probe+0x51/0x1a0 [ 82.023766][ T5215] really_probe+0x1a4/0x5f0 [ 82.028850][ T5215] __driver_probe_device+0xd2/0x160 [ 82.034595][ T5215] driver_probe_device+0x2b/0x240 [ 82.040125][ T5215] __driver_attach+0x244/0x380 [ 82.045386][ T5215] bus_for_each_dev+0x146/0x1b0 [ 82.050915][ T5215] bus_add_driver+0x1bd/0x370 [ 82.056286][ T5215] driver_register+0xde/0x170 [ 82.061458][ T5215] do_one_initcall+0x100/0x550 [ 82.066806][ T5215] do_initcall_level+0x8f/0x100 [ 82.072250][ T5215] do_initcalls+0x54/0x90 [ 82.077250][ T5215] kernel_init_freeable+0x17d/0x200 [ 82.082973][ T5215] kernel_init+0x1b/0x1c0 [ 82.087799][ T5215] ret_from_fork+0x2a7/0x3d0 [ 82.092883][ T5215] ret_from_fork_asm+0x1a/0x30 [ 82.098137][ T5215] [ 82.098137][ T5215] -> #1 (input_mutex){+.+.}-{4:4}: [ 82.105406][ T5215] __mutex_lock+0xab/0xce0 [ 82.110325][ T5215] input_register_device+0x64b/0x940 [ 82.116110][ T5215] uinput_create_device+0x1c4/0x2a0 [ 82.121802][ T5215] uinput_ioctl_handler+0x310/0xbe0 [ 82.127687][ T5215] __se_sys_ioctl+0xbc/0x130 [ 82.132772][ T5215] do_syscall_64+0xa6/0x2c0 [ 82.137940][ T5215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.144588][ T5215] [ 82.144588][ T5215] -> #0 (&newdev->mutex){+.+.}-{4:4}: [ 82.152105][ T5215] __lock_acquire+0x12e6/0x2100 [ 82.157447][ T5215] lock_acquire+0xe9/0x270 [ 82.162354][ T5215] __mutex_lock+0xab/0xce0 [ 82.167610][ T5215] uinput_request_submit+0x117/0x2f0 [ 82.173572][ T5215] uinput_dev_upload_effect+0x10a/0x140 [ 82.179732][ T5215] input_ff_upload+0x303/0x550 [ 82.185270][ T5215] evdev_ioctl_handler+0x108e/0x1590 [ 82.191309][ T5215] __se_sys_ioctl+0xbc/0x130 [ 82.196493][ T5215] do_syscall_64+0xa6/0x2c0 [ 82.201715][ T5215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.208451][ T5215] [ 82.208451][ T5215] other info that might help us debug this: [ 82.208451][ T5215] [ 82.218740][ T5215] Chain exists of: [ 82.218740][ T5215] &newdev->mutex --> &dev->mutex#2 --> &ff->mutex [ 82.218740][ T5215] [ 82.231130][ T5215] Possible unsafe locking scenario: [ 82.231130][ T5215] [ 82.238729][ T5215] CPU0 CPU1 [ 82.244113][ T5215] ---- ---- [ 82.249480][ T5215] lock(&ff->mutex); [ 82.253442][ T5215] lock(&dev->mutex#2); [ 82.260279][ T5215] lock(&ff->mutex); [ 82.266872][ T5215] lock(&newdev->mutex); [ 82.271181][ T5215] [ 82.271181][ T5215] *** DEADLOCK *** [ 82.271181][ T5215] [ 82.279305][ T5215] 2 locks held by syz.2.17/5215: [ 82.284220][ T5215] #0: ffff888171abd118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_ioctl_handler+0x51/0x1590 [ 82.294014][ T5215] #1: ffff8881083364b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x20f/0x550 [ 82.303202][ T5215] [ 82.303202][ T5215] stack backtrace: [ 82.309178][ T5215] CPU: 0 UID: 0 PID: 5215 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT(none) [ 82.309193][ T5215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.309198][ T5215] Call Trace: [ 82.309204][ T5215] [ 82.309207][ T5215] dump_stack_lvl+0x128/0x1c0 [ 82.309217][ T5215] print_circular_bug+0x29b/0x2b0 [ 82.309227][ T5215] check_noncircular+0x10e/0x130 [ 82.309237][ T5215] __lock_acquire+0x12e6/0x2100 [ 82.309244][ T5215] ? __lock_acquire+0x113b/0x2100 [ 82.309250][ T5215] ? uinput_request_submit+0x117/0x2f0 [ 82.309261][ T5215] lock_acquire+0xe9/0x270 [ 82.309267][ T5215] ? uinput_request_submit+0x117/0x2f0 [ 82.309277][ T5215] ? uinput_request_submit+0x117/0x2f0 [ 82.309286][ T5215] __mutex_lock+0xab/0xce0 [ 82.309294][ T5215] ? uinput_request_submit+0x117/0x2f0 [ 82.309303][ T5215] ? uinput_request_alloc_id+0x1ec/0x200 [ 82.309314][ T5215] uinput_request_submit+0x117/0x2f0 [ 82.309323][ T5215] ? evdev_ioctl_handler+0x51/0x1590 [ 82.309333][ T5215] uinput_dev_upload_effect+0x10a/0x140 [ 82.309344][ T5215] input_ff_upload+0x303/0x550 [ 82.309354][ T5215] ? _copy_from_user+0x8a/0xb0 [ 82.309362][ T5215] evdev_ioctl_handler+0x108e/0x1590 [ 82.309372][ T5215] ? __pfx_evdev_ioctl+0x10/0x10 [ 82.309380][ T5215] __se_sys_ioctl+0xbc/0x130 [ 82.309387][ T5215] do_syscall_64+0xa6/0x2c0 [ 82.309395][ T5215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.309401][ T5215] ? clear_bhb_loop+0x60/0xb0 [ 82.309409][ T5215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.309416][ T5215] RIP: 0033:0x7fec1d98efc9 [ 82.309425][ T5215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.309431][ T5215] RSP: 002b:00007fec1e8ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.309438][ T5215] RAX: ffffffffffffffda RBX: 00007fec1dbe5fa0 RCX: 00007fec1d98efc9 [ 82.309442][ T5215] RDX: 0000200000000040 RSI: 0000000040304580 RDI: 0000000000000004 [ 82.309447][ T5215] RBP: 00007fec1da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 82.309451][ T5215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.309454][ T5215] R13: 00007fec1dbe6038 R14: 00007fec1dbe5fa0 R15: 00007ffc81625348 [ 82.309460][ T5215] 2025/11/25 00:35:24 executed programs: 3 [ 82.686292][ T5217] input: syz0 as /devices/virtual/input/input6 [ 83.523908][ T5219] input: syz0 as /devices/virtual/input/input7 [ 84.362816][ T5221] input: syz0 as /devices/virtual/input/input8 [ 85.202214][ T5223] input: syz0 as /devices/virtual/input/input9 [ 86.040707][ T5225] input: syz0 as /devices/virtual/input/input10 [ 86.879511][ T5227] input: syz0 as /devices/virtual/input/input11 2025/11/25 00:35:29 executed programs: 9 [ 87.719543][ T5229] input: syz0 as /devices/virtual/input/input12 [ 88.557005][ T5231] input: syz0 as /devices/virtual/input/input13 [ 89.395427][ T5233] input: syz0 as /devices/virtual/input/input14 [ 90.234020][ T5235] input: syz0 as /devices/virtual/input/input15 [ 91.073654][ T5237] input: syz0 as /devices/virtual/input/input16