Warning: Permanently added '10.128.0.83' (ECDSA) to the list of known hosts. executing program [ 36.995450][ T4315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 37.225772][ T4322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 37.455211][ T4330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 37.683791][ T4337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 37.750658][ T4347] [ 37.751248][ T4347] ====================================================== [ 37.752907][ T4347] WARNING: possible circular locking dependency detected [ 37.754500][ T4347] 6.1.21-syzkaller #0 Not tainted [ 37.755683][ T4347] ------------------------------------------------------ [ 37.757214][ T4347] syz-executor131/4347 is trying to acquire lock: [ 37.758714][ T4347] ffff0000d399d350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x498/0x1204 [ 37.760878][ T4347] [ 37.760878][ T4347] but task is already holding lock: [ 37.762588][ T4347] ffff0000c8043520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 37.765143][ T4347] [ 37.765143][ T4347] which lock already depends on the new lock. [ 37.765143][ T4347] [ 37.767566][ T4347] [ 37.767566][ T4347] the existing dependency chain (in reverse order) is: [ 37.769650][ T4347] [ 37.769650][ T4347] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 37.771739][ T4347] __mutex_lock_common+0x190/0x21a0 [ 37.773055][ T4347] mutex_lock_nested+0x38/0x44 [ 37.774216][ T4347] nfc_urelease_event_work+0xfc/0x2a8 [ 37.775646][ T4347] process_one_work+0x7ac/0x1404 [ 37.776973][ T4347] worker_thread+0x8e4/0xfec [ 37.778269][ T4347] kthread+0x24c/0x2d4 [ 37.779319][ T4347] ret_from_fork+0x10/0x20 [ 37.780433][ T4347] [ 37.780433][ T4347] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 37.782255][ T4347] __mutex_lock_common+0x190/0x21a0 [ 37.783611][ T4347] mutex_lock_nested+0x38/0x44 [ 37.784825][ T4347] nfc_register_device+0x4c/0x310 [ 37.786087][ T4347] nci_register_device+0x6ac/0x7c4 [ 37.787393][ T4347] virtual_ncidev_open+0x6c/0xd8 [ 37.788708][ T4347] misc_open+0x2f0/0x368 [ 37.789819][ T4347] chrdev_open+0x3e8/0x4fc [ 37.790919][ T4347] do_dentry_open+0x734/0xfa0 [ 37.792169][ T4347] vfs_open+0x7c/0x90 [ 37.793198][ T4347] path_openat+0x1e14/0x2548 [ 37.794373][ T4347] do_filp_open+0x1bc/0x3cc [ 37.795540][ T4347] do_sys_openat2+0x128/0x3d8 [ 37.796773][ T4347] __arm64_sys_openat+0x1f0/0x240 [ 37.798041][ T4347] invoke_syscall+0x98/0x2c0 [ 37.799309][ T4347] el0_svc_common+0x138/0x258 [ 37.800537][ T4347] do_el0_svc+0x64/0x218 [ 37.801654][ T4347] el0_svc+0x58/0x168 [ 37.802714][ T4347] el0t_64_sync_handler+0x84/0xf0 [ 37.804007][ T4347] el0t_64_sync+0x18c/0x190 [ 37.805191][ T4347] [ 37.805191][ T4347] -> #1 (nci_mutex){+.+.}-{3:3}: [ 37.806906][ T4347] __mutex_lock_common+0x190/0x21a0 [ 37.808229][ T4347] mutex_lock_nested+0x38/0x44 [ 37.809499][ T4347] virtual_nci_close+0x28/0x58 [ 37.810718][ T4347] nci_dev_up+0x754/0xb10 [ 37.811852][ T4347] nfc_dev_up+0x154/0x300 [ 37.813056][ T4347] nfc_genl_dev_up+0x98/0xdc [ 37.814222][ T4347] genl_rcv_msg+0x948/0xc2c [ 37.815413][ T4347] netlink_rcv_skb+0x20c/0x3b8 [ 37.816646][ T4347] genl_rcv+0x38/0x50 [ 37.817725][ T4347] netlink_unicast+0x660/0x8d4 [ 37.818945][ T4347] netlink_sendmsg+0x834/0xb18 [ 37.820135][ T4347] ____sys_sendmsg+0x558/0x844 [ 37.821322][ T4347] __sys_sendmsg+0x26c/0x33c [ 37.822502][ T4347] __arm64_sys_sendmsg+0x80/0x94 [ 37.823757][ T4347] invoke_syscall+0x98/0x2c0 [ 37.824964][ T4347] el0_svc_common+0x138/0x258 [ 37.826178][ T4347] do_el0_svc+0x64/0x218 [ 37.827338][ T4347] el0_svc+0x58/0x168 [ 37.828398][ T4347] el0t_64_sync_handler+0x84/0xf0 [ 37.829636][ T4347] el0t_64_sync+0x18c/0x190 [ 37.830776][ T4347] [ 37.830776][ T4347] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 37.832597][ T4347] __lock_acquire+0x3338/0x764c [ 37.833866][ T4347] lock_acquire+0x26c/0x7cc [ 37.835064][ T4347] __mutex_lock_common+0x190/0x21a0 [ 37.836395][ T4347] mutex_lock_nested+0x38/0x44 [ 37.837621][ T4347] nci_start_poll+0x498/0x1204 [ 37.838845][ T4347] nfc_start_poll+0x164/0x2a4 [ 37.840070][ T4347] nfc_genl_start_poll+0x1b8/0x308 [ 37.841376][ T4347] genl_rcv_msg+0x948/0xc2c [ 37.842559][ T4347] netlink_rcv_skb+0x20c/0x3b8 [ 37.843789][ T4347] genl_rcv+0x38/0x50 [ 37.844801][ T4347] netlink_unicast+0x660/0x8d4 [ 37.845988][ T4347] netlink_sendmsg+0x834/0xb18 [ 37.847269][ T4347] ____sys_sendmsg+0x558/0x844 [ 37.848520][ T4347] __sys_sendmsg+0x26c/0x33c [ 37.849704][ T4347] __arm64_sys_sendmsg+0x80/0x94 [ 37.850985][ T4347] invoke_syscall+0x98/0x2c0 [ 37.852216][ T4347] el0_svc_common+0x138/0x258 [ 37.853411][ T4347] do_el0_svc+0x64/0x218 [ 37.854533][ T4347] el0_svc+0x58/0x168 [ 37.855567][ T4347] el0t_64_sync_handler+0x84/0xf0 [ 37.856786][ T4347] el0t_64_sync+0x18c/0x190 [ 37.857975][ T4347] [ 37.857975][ T4347] other info that might help us debug this: [ 37.857975][ T4347] [ 37.860361][ T4347] Chain exists of: [ 37.860361][ T4347] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 37.860361][ T4347] [ 37.863693][ T4347] Possible unsafe locking scenario: [ 37.863693][ T4347] [ 37.865420][ T4347] CPU0 CPU1 [ 37.866631][ T4347] ---- ---- [ 37.867877][ T4347] lock(&genl_data->genl_data_mutex); [ 37.869124][ T4347] lock(nfc_devlist_mutex); [ 37.870750][ T4347] lock(&genl_data->genl_data_mutex); [ 37.872566][ T4347] lock(&ndev->req_lock); [ 37.873568][ T4347] [ 37.873568][ T4347] *** DEADLOCK *** [ 37.873568][ T4347] [ 37.875438][ T4347] 4 locks held by syz-executor131/4347: [ 37.876684][ T4347] #0: ffff800017bae4d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 37.878546][ T4347] #1: ffff800017bae388 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 37.880734][ T4347] #2: ffff0000c8043520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 37.883275][ T4347] #3: ffff0000c8043100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x60/0x2a4 [ 37.885377][ T4347] [ 37.885377][ T4347] stack backtrace: [ 37.886708][ T4347] CPU: 0 PID: 4347 Comm: syz-executor131 Not tainted 6.1.21-syzkaller #0 [ 37.888657][ T4347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 37.890965][ T4347] Call trace: [ 37.891736][ T4347] dump_backtrace+0x1c8/0x1f4 [ 37.892823][ T4347] show_stack+0x2c/0x3c [ 37.893784][ T4347] dump_stack_lvl+0x108/0x170 [ 37.894938][ T4347] dump_stack+0x1c/0x5c [ 37.895847][ T4347] print_circular_bug+0x150/0x1b8 [ 37.897015][ T4347] check_noncircular+0x2cc/0x378 [ 37.898163][ T4347] __lock_acquire+0x3338/0x764c [ 37.899355][ T4347] lock_acquire+0x26c/0x7cc [ 37.900377][ T4347] __mutex_lock_common+0x190/0x21a0 [ 37.901567][ T4347] mutex_lock_nested+0x38/0x44 [ 37.902647][ T4347] nci_start_poll+0x498/0x1204 [ 37.903735][ T4347] nfc_start_poll+0x164/0x2a4 [ 37.904812][ T4347] nfc_genl_start_poll+0x1b8/0x308 [ 37.905948][ T4347] genl_rcv_msg+0x948/0xc2c [ 37.907029][ T4347] netlink_rcv_skb+0x20c/0x3b8 [ 37.908102][ T4347] genl_rcv+0x38/0x50 [ 37.909032][ T4347] netlink_unicast+0x660/0x8d4 [ 37.910096][ T4347] netlink_sendmsg+0x834/0xb18 [ 37.911210][ T4347] ____sys_sendmsg+0x558/0x844 [ 37.912350][ T4347] __sys_sendmsg+0x26c/0x33c [ 37.913459][ T4347] __arm64_sys_sendmsg+0x80/0x94 [ 37.914624][ T4347] invoke_syscall+0x98/0x2c0 [ 37.915718][ T4347] el0_svc_common+0x138/0x258 [ 37.916859][ T4347] do_el0_svc+0x64/0x218 [ 37.917895][ T4347] el0_svc+0x58/0x168 [ 37.918864][ T4347] el0t_64_sync_handler+0x84/0xf0 [ 37.920038][ T4347] el0t_64_sync+0x18c/0x190 [ 38.030869][ T4347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 38.032995][ T4347] nci: nci_start_poll: failed to set local general bytes [ 43.045981][ T4347] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 executing program [ 43.268392][ T4351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 43.487256][ T4357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 43.706092][ T4363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 43.925293][ T4369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 44.147292][ T4375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 44.366669][ T4385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 44.368675][ T4385] nci: nci_start_poll: failed to set local general bytes