Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. executing program [ 42.272330][ T4224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 42.502916][ T4232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 42.731826][ T4238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 42.960439][ T4245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 43.187536][ T4253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 43.416277][ T4259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 43.645380][ T4265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 43.712266][ T4275] [ 43.712821][ T4275] ====================================================== [ 43.714243][ T4275] WARNING: possible circular locking dependency detected [ 43.715693][ T4275] 6.1.72-syzkaller #0 Not tainted [ 43.716772][ T4275] ------------------------------------------------------ [ 43.718254][ T4275] syz-executor208/4275 is trying to acquire lock: [ 43.719651][ T4275] ffff0000c46f4350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x498/0x1204 [ 43.721734][ T4275] [ 43.721734][ T4275] but task is already holding lock: [ 43.723391][ T4275] ffff0000c46f2520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 43.725606][ T4275] [ 43.725606][ T4275] which lock already depends on the new lock. [ 43.725606][ T4275] [ 43.728029][ T4275] [ 43.728029][ T4275] the existing dependency chain (in reverse order) is: [ 43.729972][ T4275] [ 43.729972][ T4275] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 43.731927][ T4275] __mutex_lock_common+0x190/0x21a0 [ 43.733132][ T4275] mutex_lock_nested+0x38/0x44 [ 43.734255][ T4275] nfc_urelease_event_work+0xfc/0x2a8 [ 43.735631][ T4275] process_one_work+0x7ac/0x1404 [ 43.736761][ T4275] worker_thread+0x8e4/0xfec [ 43.737845][ T4275] kthread+0x250/0x2d8 [ 43.738805][ T4275] ret_from_fork+0x10/0x20 [ 43.739872][ T4275] [ 43.739872][ T4275] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 43.741536][ T4275] __mutex_lock_common+0x190/0x21a0 [ 43.742737][ T4275] mutex_lock_nested+0x38/0x44 [ 43.743837][ T4275] nfc_register_device+0x4c/0x310 [ 43.744906][ T4275] nci_register_device+0x6ac/0x7c4 [ 43.746128][ T4275] virtual_ncidev_open+0x6c/0xd8 [ 43.747283][ T4275] misc_open+0x2f0/0x368 [ 43.748241][ T4275] chrdev_open+0x3e8/0x4fc [ 43.749393][ T4275] do_dentry_open+0x734/0xfa0 [ 43.750568][ T4275] vfs_open+0x7c/0x90 [ 43.751606][ T4275] path_openat+0x1e14/0x2548 [ 43.752710][ T4275] do_filp_open+0x1bc/0x3cc [ 43.753798][ T4275] do_sys_openat2+0x128/0x3d8 [ 43.754928][ T4275] __arm64_sys_openat+0x1f0/0x240 [ 43.756217][ T4275] invoke_syscall+0x98/0x2c0 [ 43.757417][ T4275] el0_svc_common+0x138/0x258 [ 43.758678][ T4275] do_el0_svc+0x64/0x218 [ 43.759696][ T4275] el0_svc+0x58/0x168 [ 43.760670][ T4275] el0t_64_sync_handler+0x84/0xf0 [ 43.761844][ T4275] el0t_64_sync+0x18c/0x190 [ 43.762995][ T4275] [ 43.762995][ T4275] -> #1 (nci_mutex){+.+.}-{3:3}: [ 43.764595][ T4275] __mutex_lock_common+0x190/0x21a0 [ 43.765909][ T4275] mutex_lock_nested+0x38/0x44 [ 43.767114][ T4275] virtual_nci_close+0x28/0x58 [ 43.768249][ T4275] nci_dev_up+0x754/0xb10 [ 43.769308][ T4275] nfc_dev_up+0x154/0x300 [ 43.770369][ T4275] nfc_genl_dev_up+0x98/0xdc [ 43.771622][ T4275] genl_rcv_msg+0x948/0xc2c [ 43.772742][ T4275] netlink_rcv_skb+0x20c/0x3b8 [ 43.773928][ T4275] genl_rcv+0x38/0x50 [ 43.774911][ T4275] netlink_unicast+0x65c/0x898 [ 43.776120][ T4275] netlink_sendmsg+0x834/0xb18 [ 43.777270][ T4275] ____sys_sendmsg+0x55c/0x848 [ 43.778461][ T4275] __sys_sendmsg+0x26c/0x33c [ 43.779575][ T4275] __arm64_sys_sendmsg+0x80/0x94 [ 43.780730][ T4275] invoke_syscall+0x98/0x2c0 [ 43.781954][ T4275] el0_svc_common+0x138/0x258 [ 43.783058][ T4275] do_el0_svc+0x64/0x218 [ 43.784112][ T4275] el0_svc+0x58/0x168 [ 43.785165][ T4275] el0t_64_sync_handler+0x84/0xf0 [ 43.786468][ T4275] el0t_64_sync+0x18c/0x190 [ 43.787593][ T4275] [ 43.787593][ T4275] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 43.789282][ T4275] __lock_acquire+0x3338/0x7680 [ 43.790402][ T4275] lock_acquire+0x26c/0x7cc [ 43.791533][ T4275] __mutex_lock_common+0x190/0x21a0 [ 43.792891][ T4275] mutex_lock_nested+0x38/0x44 [ 43.794142][ T4275] nci_start_poll+0x498/0x1204 [ 43.795240][ T4275] nfc_start_poll+0x164/0x2a4 [ 43.796383][ T4275] nfc_genl_start_poll+0x1b8/0x308 [ 43.797497][ T4275] genl_rcv_msg+0x948/0xc2c [ 43.798691][ T4275] netlink_rcv_skb+0x20c/0x3b8 [ 43.799783][ T4275] genl_rcv+0x38/0x50 [ 43.800825][ T4275] netlink_unicast+0x65c/0x898 [ 43.802060][ T4275] netlink_sendmsg+0x834/0xb18 [ 43.803224][ T4275] ____sys_sendmsg+0x55c/0x848 [ 43.804384][ T4275] __sys_sendmsg+0x26c/0x33c [ 43.805434][ T4275] __arm64_sys_sendmsg+0x80/0x94 [ 43.806761][ T4275] invoke_syscall+0x98/0x2c0 [ 43.807831][ T4275] el0_svc_common+0x138/0x258 [ 43.809008][ T4275] do_el0_svc+0x64/0x218 [ 43.810105][ T4275] el0_svc+0x58/0x168 [ 43.811073][ T4275] el0t_64_sync_handler+0x84/0xf0 [ 43.812259][ T4275] el0t_64_sync+0x18c/0x190 [ 43.813256][ T4275] [ 43.813256][ T4275] other info that might help us debug this: [ 43.813256][ T4275] [ 43.815173][ T4275] Chain exists of: [ 43.815173][ T4275] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 43.815173][ T4275] [ 43.818446][ T4275] Possible unsafe locking scenario: [ 43.818446][ T4275] [ 43.820030][ T4275] CPU0 CPU1 [ 43.821214][ T4275] ---- ---- [ 43.822320][ T4275] lock(&genl_data->genl_data_mutex); [ 43.823457][ T4275] lock(nfc_devlist_mutex); [ 43.825104][ T4275] lock(&genl_data->genl_data_mutex); [ 43.826763][ T4275] lock(&ndev->req_lock); [ 43.827641][ T4275] [ 43.827641][ T4275] *** DEADLOCK *** [ 43.827641][ T4275] [ 43.829329][ T4275] 4 locks held by syz-executor208/4275: [ 43.830504][ T4275] #0: ffff800017e66330 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 43.832395][ T4275] #1: ffff800017e661e8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 43.834395][ T4275] #2: ffff0000c46f2520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 43.836846][ T4275] #3: ffff0000c46f2100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x60/0x2a4 [ 43.838838][ T4275] [ 43.838838][ T4275] stack backtrace: [ 43.840162][ T4275] CPU: 0 PID: 4275 Comm: syz-executor208 Not tainted 6.1.72-syzkaller #0 [ 43.841973][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 43.844118][ T4275] Call trace: [ 43.844813][ T4275] dump_backtrace+0x1c8/0x1f4 [ 43.845890][ T4275] show_stack+0x2c/0x3c [ 43.846866][ T4275] dump_stack_lvl+0x108/0x170 [ 43.847967][ T4275] dump_stack+0x1c/0x58 [ 43.848854][ T4275] print_circular_bug+0x150/0x1b8 [ 43.849954][ T4275] check_noncircular+0x2cc/0x378 [ 43.850996][ T4275] __lock_acquire+0x3338/0x7680 [ 43.852014][ T4275] lock_acquire+0x26c/0x7cc [ 43.852962][ T4275] __mutex_lock_common+0x190/0x21a0 [ 43.854001][ T4275] mutex_lock_nested+0x38/0x44 [ 43.855035][ T4275] nci_start_poll+0x498/0x1204 [ 43.856017][ T4275] nfc_start_poll+0x164/0x2a4 [ 43.857005][ T4275] nfc_genl_start_poll+0x1b8/0x308 [ 43.858074][ T4275] genl_rcv_msg+0x948/0xc2c [ 43.858971][ T4275] netlink_rcv_skb+0x20c/0x3b8 [ 43.859960][ T4275] genl_rcv+0x38/0x50 [ 43.860758][ T4275] netlink_unicast+0x65c/0x898 [ 43.861766][ T4275] netlink_sendmsg+0x834/0xb18 [ 43.862834][ T4275] ____sys_sendmsg+0x55c/0x848 [ 43.863911][ T4275] __sys_sendmsg+0x26c/0x33c [ 43.864920][ T4275] __arm64_sys_sendmsg+0x80/0x94 [ 43.865964][ T4275] invoke_syscall+0x98/0x2c0 [ 43.866923][ T4275] el0_svc_common+0x138/0x258 [ 43.867970][ T4275] do_el0_svc+0x64/0x218 [ 43.868900][ T4275] el0_svc+0x58/0x168 [ 43.869767][ T4275] el0t_64_sync_handler+0x84/0xf0 [ 43.870863][ T4275] el0t_64_sync+0x18c/0x190 [ 43.983109][ T4275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 43.984926][ T4275] nci: nci_start_poll: failed to set local general bytes [ 49.058491][ T4275] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 executing program [ 49.281933][ T4278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 49.502020][ T4289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 49.503897][ T4289] nci: nci_start_poll: failed to set local general bytes