Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts. executing program executing program [ 35.052085][ T4223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 35.283876][ T4230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 35.513423][ T4237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 35.742431][ T4245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 35.971443][ T4251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 36.199319][ T4258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 36.428778][ T4264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 36.657205][ T4270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 36.887375][ T4276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 37.116971][ T4282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 37.183808][ T4292] [ 37.184392][ T4292] ====================================================== [ 37.186199][ T4292] WARNING: possible circular locking dependency detected [ 37.188066][ T4292] 6.1.55-syzkaller #0 Not tainted [ 37.189385][ T4292] ------------------------------------------------------ [ 37.191244][ T4292] syz-executor851/4292 is trying to acquire lock: [ 37.193005][ T4292] ffff0000c4471350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x498/0x1204 [ 37.195411][ T4292] [ 37.195411][ T4292] but task is already holding lock: [ 37.197353][ T4292] ffff0000cef28520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 37.200196][ T4292] [ 37.200196][ T4292] which lock already depends on the new lock. [ 37.200196][ T4292] [ 37.202942][ T4292] [ 37.202942][ T4292] the existing dependency chain (in reverse order) is: [ 37.205379][ T4292] [ 37.205379][ T4292] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 37.207690][ T4292] __mutex_lock_common+0x190/0x21a0 [ 37.209198][ T4292] mutex_lock_nested+0x38/0x44 [ 37.210596][ T4292] nfc_urelease_event_work+0xfc/0x2b0 [ 37.212200][ T4292] process_one_work+0x7ac/0x1404 [ 37.213792][ T4292] worker_thread+0x8e4/0xfec [ 37.215127][ T4292] kthread+0x250/0x2d8 [ 37.216345][ T4292] ret_from_fork+0x10/0x20 [ 37.217663][ T4292] [ 37.217663][ T4292] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 37.219741][ T4292] __mutex_lock_common+0x190/0x21a0 [ 37.221224][ T4292] mutex_lock_nested+0x38/0x44 [ 37.222596][ T4292] nfc_register_device+0x4c/0x310 [ 37.224076][ T4292] nci_register_device+0x6ac/0x7c4 [ 37.225561][ T4292] virtual_ncidev_open+0x6c/0xd8 [ 37.227011][ T4292] misc_open+0x2f0/0x368 [ 37.228293][ T4292] chrdev_open+0x3e8/0x4fc [ 37.229572][ T4292] do_dentry_open+0x734/0xfa0 [ 37.230959][ T4292] vfs_open+0x7c/0x90 [ 37.232041][ T4292] path_openat+0x1e14/0x2548 [ 37.233384][ T4292] do_filp_open+0x1bc/0x3cc [ 37.234738][ T4292] do_sys_openat2+0x128/0x3d8 [ 37.236112][ T4292] __arm64_sys_openat+0x1f0/0x240 [ 37.237620][ T4292] invoke_syscall+0x98/0x2c0 [ 37.239013][ T4292] el0_svc_common+0x138/0x258 [ 37.240400][ T4292] do_el0_svc+0x64/0x218 [ 37.241691][ T4292] el0_svc+0x58/0x168 [ 37.242876][ T4292] el0t_64_sync_handler+0x84/0xf0 [ 37.244346][ T4292] el0t_64_sync+0x18c/0x190 [ 37.245673][ T4292] [ 37.245673][ T4292] -> #1 (nci_mutex){+.+.}-{3:3}: [ 37.247569][ T4292] __mutex_lock_common+0x190/0x21a0 [ 37.249280][ T4292] mutex_lock_nested+0x38/0x44 [ 37.250557][ T4292] virtual_nci_close+0x28/0x58 [ 37.251967][ T4292] nci_dev_up+0x754/0xb10 [ 37.253265][ T4292] nfc_dev_up+0x154/0x300 [ 37.254540][ T4292] nfc_genl_dev_up+0x98/0xdc [ 37.255886][ T4292] genl_rcv_msg+0x948/0xc2c [ 37.257234][ T4292] netlink_rcv_skb+0x20c/0x3b8 [ 37.258807][ T4292] genl_rcv+0x38/0x50 [ 37.260031][ T4292] netlink_unicast+0x65c/0x898 [ 37.261436][ T4292] netlink_sendmsg+0x834/0xb18 [ 37.262828][ T4292] ____sys_sendmsg+0x558/0x844 [ 37.264218][ T4292] __sys_sendmsg+0x26c/0x33c [ 37.265563][ T4292] __arm64_sys_sendmsg+0x80/0x94 [ 37.267070][ T4292] invoke_syscall+0x98/0x2c0 [ 37.268427][ T4292] el0_svc_common+0x138/0x258 [ 37.269915][ T4292] do_el0_svc+0x64/0x218 [ 37.271178][ T4292] el0_svc+0x58/0x168 [ 37.272364][ T4292] el0t_64_sync_handler+0x84/0xf0 [ 37.273846][ T4292] el0t_64_sync+0x18c/0x190 [ 37.275359][ T4292] [ 37.275359][ T4292] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 37.277637][ T4292] __lock_acquire+0x3338/0x764c [ 37.279082][ T4292] lock_acquire+0x26c/0x7cc [ 37.280407][ T4292] __mutex_lock_common+0x190/0x21a0 [ 37.281913][ T4292] mutex_lock_nested+0x38/0x44 [ 37.283352][ T4292] nci_start_poll+0x498/0x1204 [ 37.284673][ T4292] nfc_start_poll+0x164/0x2a4 [ 37.286232][ T4292] nfc_genl_start_poll+0x1b8/0x308 [ 37.287735][ T4292] genl_rcv_msg+0x948/0xc2c [ 37.289055][ T4292] netlink_rcv_skb+0x20c/0x3b8 [ 37.290457][ T4292] genl_rcv+0x38/0x50 [ 37.291593][ T4292] netlink_unicast+0x65c/0x898 [ 37.293036][ T4292] netlink_sendmsg+0x834/0xb18 [ 37.294506][ T4292] ____sys_sendmsg+0x558/0x844 [ 37.295924][ T4292] __sys_sendmsg+0x26c/0x33c [ 37.297281][ T4292] __arm64_sys_sendmsg+0x80/0x94 [ 37.298728][ T4292] invoke_syscall+0x98/0x2c0 [ 37.300073][ T4292] el0_svc_common+0x138/0x258 [ 37.301501][ T4292] do_el0_svc+0x64/0x218 [ 37.302798][ T4292] el0_svc+0x58/0x168 [ 37.304120][ T4292] el0t_64_sync_handler+0x84/0xf0 [ 37.305540][ T4292] el0t_64_sync+0x18c/0x190 [ 37.306865][ T4292] [ 37.306865][ T4292] other info that might help us debug this: [ 37.306865][ T4292] [ 37.309615][ T4292] Chain exists of: [ 37.309615][ T4292] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 37.309615][ T4292] [ 37.313490][ T4292] Possible unsafe locking scenario: [ 37.313490][ T4292] [ 37.315463][ T4292] CPU0 CPU1 [ 37.316918][ T4292] ---- ---- [ 37.318381][ T4292] lock(&genl_data->genl_data_mutex); [ 37.319986][ T4292] lock(nfc_devlist_mutex); [ 37.321890][ T4292] lock(&genl_data->genl_data_mutex); [ 37.324054][ T4292] lock(&ndev->req_lock); [ 37.325219][ T4292] [ 37.325219][ T4292] *** DEADLOCK *** [ 37.325219][ T4292] [ 37.327372][ T4292] 4 locks held by syz-executor851/4292: [ 37.328786][ T4292] #0: ffff800017ee4e70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 37.331190][ T4292] #1: ffff800017ee4d28 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 37.333577][ T4292] #2: ffff0000cef28520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 37.336506][ T4292] #3: ffff0000cef28100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x60/0x2a4 [ 37.339063][ T4292] [ 37.339063][ T4292] stack backtrace: [ 37.340782][ T4292] CPU: 1 PID: 4292 Comm: syz-executor851 Not tainted 6.1.55-syzkaller #0 [ 37.343005][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 37.345758][ T4292] Call trace: [ 37.346654][ T4292] dump_backtrace+0x1c8/0x1f4 [ 37.347901][ T4292] show_stack+0x2c/0x3c [ 37.349051][ T4292] dump_stack_lvl+0x108/0x170 [ 37.350290][ T4292] dump_stack+0x1c/0x5c [ 37.351376][ T4292] print_circular_bug+0x150/0x1b8 [ 37.352737][ T4292] check_noncircular+0x2cc/0x378 [ 37.354052][ T4292] __lock_acquire+0x3338/0x764c [ 37.355328][ T4292] lock_acquire+0x26c/0x7cc [ 37.356495][ T4292] __mutex_lock_common+0x190/0x21a0 [ 37.358050][ T4292] mutex_lock_nested+0x38/0x44 [ 37.359317][ T4292] nci_start_poll+0x498/0x1204 [ 37.360579][ T4292] nfc_start_poll+0x164/0x2a4 [ 37.361834][ T4292] nfc_genl_start_poll+0x1b8/0x308 [ 37.363219][ T4292] genl_rcv_msg+0x948/0xc2c [ 37.364417][ T4292] netlink_rcv_skb+0x20c/0x3b8 [ 37.365825][ T4292] genl_rcv+0x38/0x50 [ 37.366970][ T4292] netlink_unicast+0x65c/0x898 [ 37.368248][ T4292] netlink_sendmsg+0x834/0xb18 [ 37.369523][ T4292] ____sys_sendmsg+0x558/0x844 [ 37.370806][ T4292] __sys_sendmsg+0x26c/0x33c [ 37.372069][ T4292] __arm64_sys_sendmsg+0x80/0x94 [ 37.373347][ T4292] invoke_syscall+0x98/0x2c0 [ 37.374524][ T4292] el0_svc_common+0x138/0x258 [ 37.375751][ T4292] do_el0_svc+0x64/0x218 [ 37.376873][ T4292] el0_svc+0x58/0x168 [ 37.377937][ T4292] el0t_64_sync_handler+0x84/0xf0 [ 37.379262][ T4292] el0t_64_sync+0x18c/0x190 [ 37.491594][ T4292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.493865][ T4292] nci: nci_start_poll: failed to set local general bytes executing program [ 42.505664][ T4292] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 42.729571][ T4299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 42.731882][ T4299] nci: nci_start_poll: failed to set local general bytes