[ 71.168381][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.170907][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:36253' (ED25519) to the list of known hosts. 2025/08/10 06:09:08 ignoring optional flag "sandboxArg"="0" 2025/08/10 06:09:08 parsed 1 programs [ 75.774791][ T40] audit: type=1400 audit(1754806150.820:118): avc: denied { unlink } for pid=6249 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 76.709831][ T6249] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.147707][ T6315] chnl_net:caif_netlink_parms(): no params data found [ 79.303203][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.314465][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.317510][ T6315] bridge_slave_0: entered allmulticast mode [ 79.322686][ T6315] bridge_slave_0: entered promiscuous mode [ 79.328027][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.331199][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.334312][ T6315] bridge_slave_1: entered allmulticast mode [ 79.338230][ T6315] bridge_slave_1: entered promiscuous mode [ 79.369366][ T6315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.375249][ T6315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.408322][ T6315] team0: Port device team_slave_0 added [ 79.411958][ T6315] team0: Port device team_slave_1 added [ 79.439859][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.442639][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.453285][ T6315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.459739][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.462477][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.472670][ T6315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.511376][ T6315] hsr_slave_0: entered promiscuous mode [ 79.513623][ T6315] hsr_slave_1: entered promiscuous mode [ 80.059524][ T6315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.067086][ T6315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.073827][ T6315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.085569][ T6315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.105242][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.108078][ T6315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.111016][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.113570][ T6315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.128056][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.132304][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.173006][ T6315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.185658][ T6315] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.194674][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.198010][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.212736][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.215858][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.337129][ T6315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.357757][ T6315] veth0_vlan: entered promiscuous mode [ 80.362762][ T6315] veth1_vlan: entered promiscuous mode [ 80.379033][ T6315] veth0_macvtap: entered promiscuous mode [ 80.383355][ T6315] veth1_macvtap: entered promiscuous mode [ 80.392792][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.398947][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.406514][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.409975][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.413343][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.417152][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.516507][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.534022][ T40] audit: type=1401 audit(1754806155.580:119): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 80.587345][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.663877][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.716929][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.719440][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.734436][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.737064][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.781596][ T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.407976][ T60] cfg80211: failed to load regulatory.db [ 81.463492][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.466777][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.469467][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.472310][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.475311][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/08/10 06:09:16 executed programs: 0 [ 81.908243][ T5331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.911245][ T5331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.913883][ T5331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.917762][ T5331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.920374][ T5331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.015008][ T6474] chnl_net:caif_netlink_parms(): no params data found [ 82.086816][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.089063][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.091349][ T6474] bridge_slave_0: entered allmulticast mode [ 82.093953][ T6474] bridge_slave_0: entered promiscuous mode [ 82.097087][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.099341][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.101636][ T6474] bridge_slave_1: entered allmulticast mode [ 82.104187][ T6474] bridge_slave_1: entered promiscuous mode [ 82.136902][ T6474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.141392][ T6474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.178015][ T6474] team0: Port device team_slave_0 added [ 82.182014][ T6474] team0: Port device team_slave_1 added [ 82.228036][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.230844][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.240666][ T6474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.246149][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.248336][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.256587][ T6474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.295421][ T6474] hsr_slave_0: entered promiscuous mode [ 82.297614][ T6474] hsr_slave_1: entered promiscuous mode [ 82.299703][ T6474] debugfs: 'hsr0' already exists in 'hsr' [ 82.301635][ T6474] Cannot create hsr debugfs directory [ 83.965139][ T5331] Bluetooth: hci0: command tx timeout [ 84.030395][ T79] bridge_slave_1: left allmulticast mode [ 84.032240][ T79] bridge_slave_1: left promiscuous mode [ 84.034507][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.040053][ T79] bridge_slave_0: left allmulticast mode [ 84.042496][ T79] bridge_slave_0: left promiscuous mode [ 84.045415][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.257841][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.262597][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.266317][ T79] bond0 (unregistering): Released all slaves [ 84.400274][ T79] hsr_slave_0: left promiscuous mode [ 84.403046][ T79] hsr_slave_1: left promiscuous mode [ 84.405363][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.407795][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.410604][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.412990][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.432368][ T79] veth1_macvtap: left promiscuous mode [ 84.434510][ T79] veth0_macvtap: left promiscuous mode [ 84.436409][ T79] veth1_vlan: left promiscuous mode [ 84.438699][ T79] veth0_vlan: left promiscuous mode [ 84.852624][ T79] team0 (unregistering): Port device team_slave_1 removed [ 84.901150][ T79] team0 (unregistering): Port device team_slave_0 removed [ 85.676793][ T6474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.681228][ T6474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.688981][ T6474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.695670][ T6474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.749855][ T6474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.766000][ T6474] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.773330][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.776205][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.784135][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.786756][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.044533][ T5331] Bluetooth: hci0: command tx timeout [ 86.062889][ T6474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.086961][ T6474] veth0_vlan: entered promiscuous mode [ 86.091706][ T6474] veth1_vlan: entered promiscuous mode [ 86.126996][ T6474] veth0_macvtap: entered promiscuous mode [ 86.132221][ T6474] veth1_macvtap: entered promiscuous mode [ 86.176963][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.184827][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.192585][ T1145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.195852][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.199771][ T1145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.203025][ T1145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.260285][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.262866][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.285815][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.288694][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.324870][ T40] audit: type=1400 audit(1754806161.380:120): avc: denied { read } for pid=6562 comm="syz.0.16" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.328261][ T6563] input: syz1 as /devices/virtual/input/input5 [ 86.333245][ T40] audit: type=1400 audit(1754806161.380:121): avc: denied { open } for pid=6562 comm="syz.0.16" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.342016][ T6563] [ 86.344551][ T40] audit: type=1400 audit(1754806161.380:122): avc: denied { ioctl } for pid=6562 comm="syz.0.16" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.345472][ T6563] ====================================================== [ 86.345480][ T6563] WARNING: possible circular locking dependency detected [ 86.345487][ T6563] 6.16.0-syzkaller-12273-gb96ddbc5c887 #0 Not tainted [ 86.354987][ T40] audit: type=1400 audit(1754806161.390:123): avc: denied { read } for pid=5365 comm="acpid" name="event4" dev="devtmpfs" ino=2842 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.357629][ T6563] ------------------------------------------------------ [ 86.360250][ T40] audit: type=1400 audit(1754806161.390:124): avc: denied { open } for pid=5365 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2842 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.365108][ T6563] syz.0.16/6563 is trying to acquire lock: [ 86.365123][ T6563] ffff8880392dd870 (&newdev->mutex){+.+.}-{4:4}, at: uinput_request_submit.part.0+0x25/0x2e0 [ 86.373692][ T40] audit: type=1400 audit(1754806161.390:125): avc: denied { ioctl } for pid=5365 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2842 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.376303][ T6563] [ 86.376303][ T6563] but task is already holding lock: [ 86.376312][ T6563] ffff888036bc20b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x1dd/0xc40 [ 86.387981][ T40] audit: type=1400 audit(1754806161.390:126): avc: denied { read } for pid=6562 comm="syz.0.16" name="event4" dev="devtmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.391537][ T6563] [ 86.391537][ T6563] which lock already depends on the new lock. [ 86.391537][ T6563] [ 86.401014][ T40] audit: type=1400 audit(1754806161.390:127): avc: denied { open } for pid=6562 comm="syz.0.16" path="/dev/input/event4" dev="devtmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.403677][ T6563] [ 86.403677][ T6563] the existing dependency chain (in reverse order) is: [ 86.407177][ T40] audit: type=1400 audit(1754806161.390:128): avc: denied { ioctl } for pid=6562 comm="syz.0.16" path="/dev/input/event4" dev="devtmpfs" ino=2842 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.416147][ T6563] [ 86.416147][ T6563] -> #3 (&ff->mutex){+.+.}-{4:4}: [ 86.416180][ T6563] __mutex_lock+0x193/0x10b0 [ 86.416201][ T6563] input_ff_flush+0x63/0x1a0 [ 86.450839][ T6563] uinput_dev_flush+0x2a/0x40 [ 86.453024][ T6563] input_flush_device+0xc6/0x140 [ 86.455352][ T6563] evdev_release+0x344/0x420 [ 86.457510][ T6563] __fput+0x3ff/0xb70 [ 86.459543][ T6563] fput_close_sync+0x118/0x210 [ 86.461749][ T6563] __x64_sys_close+0x8b/0x120 [ 86.463884][ T6563] do_syscall_64+0xcd/0x4c0 [ 86.466053][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.468076][ T6563] [ 86.468076][ T6563] -> #2 (&dev->mutex#2){+.+.}-{4:4}: [ 86.470434][ T6563] __mutex_lock+0x193/0x10b0 [ 86.472067][ T6563] input_register_handle+0xca/0x630 [ 86.473896][ T6563] kbd_connect+0xca/0x160 [ 86.475463][ T6563] input_attach_handler.isra.0+0x176/0x250 [ 86.477450][ T6563] input_register_device+0xab9/0x1180 [ 86.479452][ T6563] acpi_button_add+0x582/0xb70 [ 86.481142][ T6563] acpi_device_probe+0xc6/0x330 [ 86.482844][ T6563] really_probe+0x241/0xa90 [ 86.484431][ T6563] __driver_probe_device+0x1de/0x440 [ 86.486273][ T6563] driver_probe_device+0x4c/0x1b0 [ 86.488004][ T6563] __driver_attach+0x283/0x580 [ 86.489668][ T6563] bus_for_each_dev+0x13b/0x1d0 [ 86.491387][ T6563] bus_add_driver+0x2e9/0x690 [ 86.493034][ T6563] driver_register+0x15c/0x4b0 [ 86.494717][ T6563] __acpi_bus_register_driver+0xdf/0x130 [ 86.496663][ T6563] acpi_button_driver_init+0x82/0x110 [ 86.498525][ T6563] do_one_initcall+0x120/0x6e0 [ 86.500199][ T6563] kernel_init_freeable+0x5c2/0x910 [ 86.502003][ T6563] kernel_init+0x1c/0x2b0 [ 86.503548][ T6563] ret_from_fork+0x5d7/0x6f0 [ 86.505166][ T6563] ret_from_fork_asm+0x1a/0x30 [ 86.506838][ T6563] [ 86.506838][ T6563] -> #1 (input_mutex){+.+.}-{4:4}: [ 86.509242][ T6563] __mutex_lock+0x193/0x10b0 [ 86.510931][ T6563] input_register_device+0x992/0x1180 [ 86.512815][ T6563] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 86.514870][ T6563] __x64_sys_ioctl+0x18b/0x210 [ 86.516572][ T6563] do_syscall_64+0xcd/0x4c0 [ 86.518164][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.520173][ T6563] [ 86.520173][ T6563] -> #0 (&newdev->mutex){+.+.}-{4:4}: [ 86.522685][ T6563] __lock_acquire+0x12a6/0x1ce0 [ 86.524543][ T6563] lock_acquire+0x179/0x350 [ 86.526302][ T6563] __mutex_lock+0x193/0x10b0 [ 86.527922][ T6563] uinput_request_submit.part.0+0x25/0x2e0 [ 86.529914][ T6563] uinput_dev_upload_effect+0x174/0x1f0 [ 86.531857][ T6563] input_ff_upload+0x582/0xc40 [ 86.533532][ T6563] evdev_do_ioctl+0xf40/0x1b30 [ 86.535213][ T6563] evdev_ioctl+0x16f/0x1a0 [ 86.536827][ T6563] __x64_sys_ioctl+0x18b/0x210 [ 86.538491][ T6563] do_syscall_64+0xcd/0x4c0 [ 86.540072][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.542100][ T6563] [ 86.542100][ T6563] other info that might help us debug this: [ 86.542100][ T6563] [ 86.545141][ T6563] Chain exists of: [ 86.545141][ T6563] &newdev->mutex --> &dev->mutex#2 --> &ff->mutex [ 86.545141][ T6563] [ 86.549026][ T6563] Possible unsafe locking scenario: [ 86.549026][ T6563] [ 86.551372][ T6563] CPU0 CPU1 [ 86.553038][ T6563] ---- ---- [ 86.554714][ T6563] lock(&ff->mutex); [ 86.555983][ T6563] lock(&dev->mutex#2); [ 86.558080][ T6563] lock(&ff->mutex); [ 86.560089][ T6563] lock(&newdev->mutex); [ 86.561480][ T6563] [ 86.561480][ T6563] *** DEADLOCK *** [ 86.561480][ T6563] [ 86.563985][ T6563] 2 locks held by syz.0.16/6563: [ 86.565423][ T6563] #0: ffff88804ffe2118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_ioctl+0x7f/0x1a0 [ 86.568164][ T6563] #1: ffff888036bc20b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x1dd/0xc40 [ 86.571029][ T6563] [ 86.571029][ T6563] stack backtrace: [ 86.572873][ T6563] CPU: 1 UID: 0 PID: 6563 Comm: syz.0.16 Not tainted 6.16.0-syzkaller-12273-gb96ddbc5c887 #0 PREEMPT(full) [ 86.572887][ T6563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.572893][ T6563] Call Trace: [ 86.572898][ T6563] [ 86.572902][ T6563] dump_stack_lvl+0x116/0x1f0 [ 86.572914][ T6563] print_circular_bug+0x275/0x350 [ 86.572930][ T6563] check_noncircular+0x14c/0x170 [ 86.572946][ T6563] __lock_acquire+0x12a6/0x1ce0 [ 86.572963][ T6563] lock_acquire+0x179/0x350 [ 86.572978][ T6563] ? uinput_request_submit.part.0+0x25/0x2e0 [ 86.572996][ T6563] ? __pfx___might_resched+0x10/0x10 [ 86.573009][ T6563] ? uinput_request_submit.part.0+0x25/0x2e0 [ 86.573025][ T6563] __mutex_lock+0x193/0x10b0 [ 86.573036][ T6563] ? uinput_request_submit.part.0+0x25/0x2e0 [ 86.573052][ T6563] ? find_held_lock+0x2b/0x80 [ 86.573064][ T6563] ? uinput_request_reserve_slot+0x3ca/0x4d0 [ 86.573074][ T6563] ? __pfx___mutex_lock+0x10/0x10 [ 86.573084][ T6563] ? _raw_spin_unlock+0x28/0x50 [ 86.573099][ T6563] ? __pfx_uinput_request_reserve_slot+0x10/0x10 [ 86.573109][ T6563] ? __pfx___might_resched+0x10/0x10 [ 86.573121][ T6563] ? rcu_is_watching+0x12/0xc0 [ 86.573134][ T6563] ? uinput_request_submit.part.0+0x25/0x2e0 [ 86.573150][ T6563] uinput_request_submit.part.0+0x25/0x2e0 [ 86.573167][ T6563] uinput_dev_upload_effect+0x174/0x1f0 [ 86.573177][ T6563] ? __pfx_uinput_dev_upload_effect+0x10/0x10 [ 86.573188][ T6563] ? __might_fault+0x13b/0x190 [ 86.573200][ T6563] input_ff_upload+0x582/0xc40 [ 86.573216][ T6563] evdev_do_ioctl+0xf40/0x1b30 [ 86.573230][ T6563] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 86.573247][ T6563] evdev_ioctl+0x16f/0x1a0 [ 86.573259][ T6563] ? __pfx_evdev_ioctl+0x10/0x10 [ 86.573273][ T6563] __x64_sys_ioctl+0x18b/0x210 [ 86.573289][ T6563] do_syscall_64+0xcd/0x4c0 [ 86.573299][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.573314][ T6563] RIP: 0033:0x7f5825385d29 [ 86.573323][ T6563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.573332][ T6563] RSP: 002b:00007f58245fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.573342][ T6563] RAX: ffffffffffffffda RBX: 00007f5825575fa0 RCX: 00007f5825385d29 [ 86.573348][ T6563] RDX: 0000000020000300 RSI: 0000000040304580 RDI: 0000000000000004 [ 86.573354][ T6563] RBP: 00007f5825401b08 R08: 0000000000000000 R09: 0000000000000000 [ 86.573360][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.573365][ T6563] R13: 0000000000000000 R14: 00007f5825575fa0 R15: 00007fffb7b1bb88 [ 86.573374][ T6563] [ 87.167304][ T6565] input: syz1 as /devices/virtual/input/input6 2025/08/10 06:09:22 executed programs: 3 [ 88.008848][ T6567] input: syz1 as /devices/virtual/input/input7 [ 88.124477][ T5331] Bluetooth: hci0: command tx timeout [ 88.857267][ T6570] input: syz1 as /devices/virtual/input/input8 [ 89.705056][ T6572] input: syz1 as /devices/virtual/input/input9 [ 90.204597][ T5331] Bluetooth: hci0: command tx timeout [ 90.548933][ T6574] input: syz1 as /devices/virtual/input/input10 [ 91.392022][ T6576] input: syz1 as /devices/virtual/input/input11 [ 92.232394][ T6580] input: syz1 as /devices/virtual/input/input12 2025/08/10 06:09:27 executed programs: 9 [ 93.078405][ T6583] input: syz1 as /devices/virtual/input/input13 [ 93.927507][ T6587] input: syz1 as /devices/virtual/input/input14 [ 94.778945][ T6591] input: syz1 as /devices/virtual/input/input15 [ 95.622681][ T6593] input: syz1 as /devices/virtual/input/input16