Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. 2025/07/05 19:26:42 ignoring optional flag "sandboxArg"="0" 2025/07/05 19:26:42 ignoring optional flag "type"="gce" 2025/07/05 19:26:43 parsed 1 programs 2025/07/05 19:26:44 executed programs: 0 [ 56.599110][ T2447] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.434753][ T2453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.442344][ T2453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.449872][ T2453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.457422][ T2453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.966702][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.974670][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.981338][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.982507][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.989837][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.004709][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.025623][ T3136] input: syz1 as /devices/virtual/input/input5 [ 60.034347][ T3136] [ 60.036668][ T3136] ====================================================== [ 60.043657][ T3136] WARNING: possible circular locking dependency detected [ 60.050647][ T3136] 5.15.186-syzkaller #0 Not tainted [ 60.055896][ T3136] ------------------------------------------------------ [ 60.062885][ T3136] syz-executor.0/3136 is trying to acquire lock: [ 60.069182][ T3136] ffff8881760e6070 (&newdev->mutex){+.+.}-{3:3}, at: uinput_request_submit.part.0+0x1f/0x130 [ 60.079331][ T3136] [ 60.079331][ T3136] but task is already holding lock: [ 60.086661][ T3136] ffff8881760e64b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x12a/0x4b0 [ 60.095404][ T3136] [ 60.095404][ T3136] which lock already depends on the new lock. [ 60.095404][ T3136] [ 60.105771][ T3136] [ 60.105771][ T3136] the existing dependency chain (in reverse order) is: [ 60.114749][ T3136] [ 60.114749][ T3136] -> #3 (&ff->mutex){+.+.}-{3:3}: [ 60.121915][ T3136] __mutex_lock+0x60/0x660 [ 60.126821][ T3136] input_ff_flush+0x37/0xc0 [ 60.131819][ T3136] uinput_dev_flush+0x28/0x40 [ 60.137018][ T3136] input_flush_device+0x58/0x80 [ 60.142370][ T3136] evdev_release+0x192/0x1a0 [ 60.147452][ T3136] __fput+0x101/0x430 [ 60.151934][ T3136] task_work_run+0x73/0xb0 [ 60.156843][ T3136] exit_to_user_mode_prepare+0x20b/0x210 [ 60.162979][ T3136] syscall_exit_to_user_mode+0x19/0x60 [ 60.168930][ T3136] do_syscall_64+0x40/0xb0 [ 60.173837][ T3136] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.180236][ T3136] [ 60.180236][ T3136] -> #2 (&dev->mutex#2){+.+.}-{3:3}: [ 60.187667][ T3136] __mutex_lock+0x60/0x660 [ 60.192587][ T3136] input_register_handle+0x2f/0x1b0 [ 60.198279][ T3136] kbd_connect+0x4a/0xb0 [ 60.203135][ T3136] input_attach_handler+0xd5/0x120 [ 60.208747][ T3136] input_register_device.cold+0xdf/0x1c5 [ 60.214875][ T3136] acpi_button_add+0x2f7/0x600 [ 60.220143][ T3136] acpi_device_probe+0x63/0x220 [ 60.225484][ T3136] really_probe+0x138/0x520 [ 60.230483][ T3136] __driver_probe_device+0x149/0x1c0 [ 60.236268][ T3136] driver_probe_device+0x2a/0x120 [ 60.241799][ T3136] __driver_attach+0x178/0x290 [ 60.247072][ T3136] bus_for_each_dev+0xac/0x100 [ 60.252329][ T3136] bus_add_driver+0x195/0x2c0 [ 60.257500][ T3136] driver_register+0xc4/0x150 [ 60.262669][ T3136] acpi_bus_register_driver+0x52/0x70 [ 60.268534][ T3136] acpi_button_driver_init+0x8b/0x9a [ 60.274314][ T3136] do_one_initcall+0x8b/0x2f0 [ 60.279485][ T3136] kernel_init_freeable+0x322/0x397 [ 60.285178][ T3136] kernel_init+0x1a/0x1c0 [ 60.290008][ T3136] ret_from_fork+0x1f/0x30 [ 60.294917][ T3136] [ 60.294917][ T3136] -> #1 (input_mutex){+.+.}-{3:3}: [ 60.302180][ T3136] __mutex_lock+0x60/0x660 [ 60.307095][ T3136] input_register_device.cold+0x57/0x1c5 [ 60.313221][ T3136] uinput_ioctl_handler.isra.0+0x4f0/0xe80 [ 60.319523][ T3136] __x64_sys_ioctl+0xfc/0x140 [ 60.324701][ T3136] do_syscall_64+0x33/0xb0 [ 60.329606][ T3136] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.335996][ T3136] [ 60.335996][ T3136] -> #0 (&newdev->mutex){+.+.}-{3:3}: [ 60.343513][ T3136] __lock_acquire+0x10b6/0x1a40 [ 60.348855][ T3136] lock_acquire+0xbb/0x290 [ 60.353760][ T3136] __mutex_lock+0x60/0x660 [ 60.358693][ T3136] uinput_request_submit.part.0+0x1f/0x130 [ 60.364993][ T3136] uinput_dev_upload_effect+0xa6/0xe0 [ 60.370859][ T3136] input_ff_upload+0x314/0x4b0 [ 60.376112][ T3136] evdev_do_ioctl+0xdc8/0x1040 [ 60.381374][ T3136] evdev_ioctl+0xa2/0xe0 [ 60.386125][ T3136] __x64_sys_ioctl+0xfc/0x140 [ 60.391300][ T3136] do_syscall_64+0x33/0xb0 [ 60.396217][ T3136] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.402609][ T3136] [ 60.402609][ T3136] other info that might help us debug this: [ 60.402609][ T3136] [ 60.412831][ T3136] Chain exists of: [ 60.412831][ T3136] &newdev->mutex --> &dev->mutex#2 --> &ff->mutex [ 60.412831][ T3136] [ 60.425138][ T3136] Possible unsafe locking scenario: [ 60.425138][ T3136] [ 60.432558][ T3136] CPU0 CPU1 [ 60.437891][ T3136] ---- ---- [ 60.443235][ T3136] lock(&ff->mutex); [ 60.447183][ T3136] lock(&dev->mutex#2); [ 60.453912][ T3136] lock(&ff->mutex); [ 60.460379][ T3136] lock(&newdev->mutex); [ 60.464671][ T3136] [ 60.464671][ T3136] *** DEADLOCK *** [ 60.464671][ T3136] [ 60.472784][ T3136] 2 locks held by syz-executor.0/3136: [ 60.478221][ T3136] #0: ffff888178cd9910 (&evdev->mutex){+.+.}-{3:3}, at: evdev_ioctl+0x3c/0xe0 [ 60.487152][ T3136] #1: ffff8881760e64b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x12a/0x4b0 [ 60.496351][ T3136] [ 60.496351][ T3136] stack backtrace: [ 60.502220][ T3136] CPU: 1 PID: 3136 Comm: syz-executor.0 Not tainted 5.15.186-syzkaller #0 [ 60.510693][ T3136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.520724][ T3136] Call Trace: [ 60.523977][ T3136] [ 60.526881][ T3136] dump_stack_lvl+0xcd/0x134 [ 60.531446][ T3136] check_noncircular+0xcc/0xe0 [ 60.536183][ T3136] __lock_acquire+0x10b6/0x1a40 [ 60.541011][ T3136] ? __lock_acquire+0xe65/0x1a40 [ 60.545921][ T3136] lock_acquire+0xbb/0x290 [ 60.550308][ T3136] ? uinput_request_submit.part.0+0x1f/0x130 [ 60.556260][ T3136] ? lock_acquire+0xbb/0x290 [ 60.560818][ T3136] ? uinput_request_reserve_slot+0x3c/0x1a0 [ 60.566685][ T3136] __mutex_lock+0x60/0x660 [ 60.571087][ T3136] ? uinput_request_submit.part.0+0x1f/0x130 [ 60.577045][ T3136] ? uinput_request_submit.part.0+0x1f/0x130 [ 60.582998][ T3136] ? do_raw_spin_unlock+0x50/0xa0 [ 60.588002][ T3136] ? _raw_spin_unlock+0x1a/0x30 [ 60.592824][ T3136] ? uinput_request_reserve_slot+0x14a/0x1a0 [ 60.598775][ T3136] uinput_request_submit.part.0+0x1f/0x130 [ 60.604557][ T3136] uinput_dev_upload_effect+0xa6/0xe0 [ 60.609902][ T3136] ? input_ff_upload+0x12a/0x4b0 [ 60.614893][ T3136] ? tomoyo_path_number_perm+0x127/0x2b0 [ 60.620520][ T3136] input_ff_upload+0x314/0x4b0 [ 60.625266][ T3136] evdev_do_ioctl+0xdc8/0x1040 [ 60.630005][ T3136] ? evdev_ioctl+0x3c/0xe0 [ 60.634397][ T3136] evdev_ioctl+0xa2/0xe0 [ 60.638612][ T3136] ? evdev_ioctl_compat+0xe0/0xe0 [ 60.643645][ T3136] __x64_sys_ioctl+0xfc/0x140 [ 60.648299][ T3136] do_syscall_64+0x33/0xb0 [ 60.652695][ T3136] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.658663][ T3136] RIP: 0033:0x7f78de472ca9 [ 60.663049][ T3136] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 60.682721][ T3136] RSP: 002b:00007f78ddff40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.691120][ T3136] RAX: ffffffffffffffda RBX: 00007f78de5a0f80 RCX: 00007f78de472ca9 [ 60.699065][ T3136] RDX: 0000000020000300 RSI: 0000000040304580 RDI: 0000000000000004 [ 60.707014][ T3136] RBP: 00007f78de4be47e R08: 0000000000000000 R09: 0000000000000000 [ 60.714968][ T3136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.722918][ T3136] R13: 0000000000000006 R14: 00007f78de5a0f80 R15: 00007ffe037729e8 [ 60.730862][ T3136] [ 60.866178][ T3138] input: syz1 as /devices/virtual/input/input6 2025/07/05 19:26:49 executed programs: 2 [ 61.704891][ T3140] input: syz1 as /devices/virtual/input/input7 [ 62.543723][ T3142] input: syz1 as /devices/virtual/input/input8 [ 63.383044][ T3144] input: syz1 as /devices/virtual/input/input9 [ 64.221725][ T3146] input: syz1 as /devices/virtual/input/input10 [ 65.060025][ T3148] input: syz1 as /devices/virtual/input/input11 [ 65.900394][ T3150] input: syz1 as /devices/virtual/input/input12 2025/07/05 19:26:54 executed programs: 8 [ 66.740428][ T3152] input: syz1 as /devices/virtual/input/input13 [ 67.580399][ T3154] input: syz1 as /devices/virtual/input/input14 [ 68.418372][ T3156] input: syz1 as /devices/virtual/input/input15 [ 69.256368][ T3158] input: syz1 as /devices/virtual/input/input16