[ 10.273098][ T2608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 10.281814][ T2608] eql: remember to turn off Van-Jacobson compression on your slave devices [ 10.309438][ T9] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 10.311336][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.203' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.911655][ T3032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 34.138856][ T3040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 34.204391][ T3051] [ 34.205074][ T3051] ====================================================== [ 34.206837][ T3051] WARNING: possible circular locking dependency detected [ 34.208772][ T3051] 6.1.0-rc5-syzkaller-32254-g9e4ce762f0e7 #0 Not tainted [ 34.210640][ T3051] ------------------------------------------------------ [ 34.212371][ T3051] syz-executor195/3051 is trying to acquire lock: [ 34.214075][ T3051] ffff0000c9b0c350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_set_local_general_bytes+0xbc/0x480 [ 34.216748][ T3051] [ 34.216748][ T3051] but task is already holding lock: [ 34.218604][ T3051] ffff0000c9b0d518 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0xc4/0x174 [ 34.221409][ T3051] [ 34.221409][ T3051] which lock already depends on the new lock. [ 34.221409][ T3051] [ 34.224042][ T3051] [ 34.224042][ T3051] the existing dependency chain (in reverse order) is: [ 34.226469][ T3051] [ 34.226469][ T3051] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 34.228901][ T3051] __mutex_lock_common+0xd4/0xca8 [ 34.230521][ T3051] mutex_lock_nested+0x38/0x44 [ 34.231899][ T3051] nfc_urelease_event_work+0x88/0x16c [ 34.233410][ T3051] process_one_work+0x2d8/0x504 [ 34.234853][ T3051] worker_thread+0x340/0x610 [ 34.236177][ T3051] kthread+0x12c/0x158 [ 34.237384][ T3051] ret_from_fork+0x10/0x20 [ 34.238698][ T3051] [ 34.238698][ T3051] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 34.240728][ T3051] __mutex_lock_common+0xd4/0xca8 [ 34.242093][ T3051] mutex_lock_nested+0x38/0x44 [ 34.243510][ T3051] nfc_register_device+0x34/0x208 [ 34.244986][ T3051] nci_register_device+0x338/0x3b0 [ 34.246410][ T3051] virtual_ncidev_open+0x6c/0xd8 [ 34.247821][ T3051] misc_open+0x1b8/0x200 [ 34.249031][ T3051] chrdev_open+0x2b4/0x2e8 [ 34.250287][ T3051] do_dentry_open+0x364/0x748 [ 34.251485][ T3051] vfs_open+0x38/0x48 [ 34.252637][ T3051] path_openat+0xe34/0x11c4 [ 34.253905][ T3051] do_filp_open+0xdc/0x1b8 [ 34.255171][ T3051] do_sys_openat2+0xb8/0x22c [ 34.256459][ T3051] __arm64_sys_openat+0xb0/0xe0 [ 34.257894][ T3051] el0_svc_common+0x138/0x220 [ 34.259341][ T3051] do_el0_svc+0x48/0x164 [ 34.260517][ T3051] el0_svc+0x58/0x150 [ 34.261574][ T3051] el0t_64_sync_handler+0x84/0xf0 [ 34.263022][ T3051] el0t_64_sync+0x190/0x194 [ 34.264296][ T3051] [ 34.264296][ T3051] -> #1 (nci_mutex){+.+.}-{3:3}: [ 34.266196][ T3051] __mutex_lock_common+0xd4/0xca8 [ 34.267713][ T3051] mutex_lock_nested+0x38/0x44 [ 34.269105][ T3051] virtual_nci_close+0x28/0x58 [ 34.270449][ T3051] nci_open_device+0x414/0x518 [ 34.271836][ T3051] nci_dev_up+0x20/0x30 [ 34.273027][ T3051] nfc_dev_up+0xcc/0x1b0 [ 34.274233][ T3051] nfc_genl_dev_up+0x40/0x78 [ 34.275608][ T3051] genl_rcv_msg+0x458/0x4f4 [ 34.276880][ T3051] netlink_rcv_skb+0xe8/0x1d4 [ 34.278151][ T3051] genl_rcv+0x38/0x50 [ 34.279283][ T3051] netlink_unicast_kernel+0xfc/0x1dc [ 34.280735][ T3051] netlink_unicast+0x164/0x248 [ 34.282093][ T3051] netlink_sendmsg+0x484/0x584 [ 34.283399][ T3051] ____sys_sendmsg+0x2f8/0x440 [ 34.284701][ T3051] __sys_sendmsg+0x1ac/0x228 [ 34.286004][ T3051] __arm64_sys_sendmsg+0x2c/0x3c [ 34.287332][ T3051] el0_svc_common+0x138/0x220 [ 34.288674][ T3051] do_el0_svc+0x48/0x164 [ 34.289877][ T3051] el0_svc+0x58/0x150 [ 34.291004][ T3051] el0t_64_sync_handler+0x84/0xf0 [ 34.292380][ T3051] el0t_64_sync+0x190/0x194 [ 34.293630][ T3051] [ 34.293630][ T3051] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 34.295532][ T3051] __lock_acquire+0x1530/0x3084 [ 34.296987][ T3051] lock_acquire+0x100/0x1f8 [ 34.298205][ T3051] __mutex_lock_common+0xd4/0xca8 [ 34.299636][ T3051] mutex_lock_nested+0x38/0x44 [ 34.300964][ T3051] nci_set_local_general_bytes+0xbc/0x480 [ 34.302766][ T3051] nci_start_poll+0x1e8/0x474 [ 34.304187][ T3051] nfc_start_poll+0xfc/0x170 [ 34.305546][ T3051] nfc_genl_start_poll+0xd4/0x174 [ 34.306948][ T3051] genl_rcv_msg+0x458/0x4f4 [ 34.308241][ T3051] netlink_rcv_skb+0xe8/0x1d4 [ 34.309571][ T3051] genl_rcv+0x38/0x50 [ 34.310733][ T3051] netlink_unicast_kernel+0xfc/0x1dc [ 34.312232][ T3051] netlink_unicast+0x164/0x248 [ 34.313607][ T3051] netlink_sendmsg+0x484/0x584 [ 34.315098][ T3051] ____sys_sendmsg+0x2f8/0x440 [ 34.316450][ T3051] __sys_sendmsg+0x1ac/0x228 [ 34.317755][ T3051] __arm64_sys_sendmsg+0x2c/0x3c [ 34.319165][ T3051] el0_svc_common+0x138/0x220 [ 34.320444][ T3051] do_el0_svc+0x48/0x164 [ 34.321726][ T3051] el0_svc+0x58/0x150 [ 34.322850][ T3051] el0t_64_sync_handler+0x84/0xf0 [ 34.324293][ T3051] el0t_64_sync+0x190/0x194 [ 34.325617][ T3051] [ 34.325617][ T3051] other info that might help us debug this: [ 34.325617][ T3051] [ 34.328327][ T3051] Chain exists of: [ 34.328327][ T3051] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 34.328327][ T3051] [ 34.332111][ T3051] Possible unsafe locking scenario: [ 34.332111][ T3051] [ 34.334028][ T3051] CPU0 CPU1 [ 34.335427][ T3051] ---- ---- [ 34.336918][ T3051] lock(&genl_data->genl_data_mutex); [ 34.338341][ T3051] lock(nfc_devlist_mutex); [ 34.340166][ T3051] lock(&genl_data->genl_data_mutex); [ 34.342206][ T3051] lock(&ndev->req_lock); [ 34.343277][ T3051] [ 34.343277][ T3051] *** DEADLOCK *** [ 34.343277][ T3051] [ 34.345378][ T3051] 4 locks held by syz-executor195/3051: [ 34.346892][ T3051] #0: ffff80000d7b7aa8 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 34.349046][ T3051] #1: ffff80000d7b79b8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x80/0x4f4 [ 34.351415][ T3051] #2: ffff0000c9b0d518 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0xc4/0x174 [ 34.354268][ T3051] #3: ffff0000c9b0d100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x5c/0x170 [ 34.356706][ T3051] [ 34.356706][ T3051] stack backtrace: [ 34.358248][ T3051] CPU: 0 PID: 3051 Comm: syz-executor195 Not tainted 6.1.0-rc5-syzkaller-32254-g9e4ce762f0e7 #0 [ 34.360969][ T3051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 34.363701][ T3051] Call trace: [ 34.364563][ T3051] dump_backtrace+0x1c4/0x1f0 [ 34.365867][ T3051] show_stack+0x2c/0x54 [ 34.366967][ T3051] dump_stack_lvl+0x104/0x16c [ 34.368228][ T3051] dump_stack+0x1c/0x58 [ 34.369254][ T3051] print_circular_bug+0x2c4/0x2c8 [ 34.370454][ T3051] check_noncircular+0x14c/0x154 [ 34.371664][ T3051] __lock_acquire+0x1530/0x3084 [ 34.372955][ T3051] lock_acquire+0x100/0x1f8 [ 34.374245][ T3051] __mutex_lock_common+0xd4/0xca8 [ 34.375664][ T3051] mutex_lock_nested+0x38/0x44 [ 34.376966][ T3051] nci_set_local_general_bytes+0xbc/0x480 [ 34.378481][ T3051] nci_start_poll+0x1e8/0x474 [ 34.379723][ T3051] nfc_start_poll+0xfc/0x170 [ 34.380973][ T3051] nfc_genl_start_poll+0xd4/0x174 [ 34.382300][ T3051] genl_rcv_msg+0x458/0x4f4 [ 34.383454][ T3051] netlink_rcv_skb+0xe8/0x1d4 [ 34.384684][ T3051] genl_rcv+0x38/0x50 [ 34.385715][ T3051] netlink_unicast_kernel+0xfc/0x1dc [ 34.387075][ T3051] netlink_unicast+0x164/0x248 [ 34.388415][ T3051] netlink_sendmsg+0x484/0x584 [ 34.389715][ T3051] ____sys_sendmsg+0x2f8/0x440 [ 34.390845][ T3051] __sys_sendmsg+0x1ac/0x228 [ 34.392053][ T3051] __arm64_sys_sendmsg+0x2c/0x3c [ 34.393418][ T3051] el0_svc_common+0x138/0x220 [ 34.394682][ T3051] do_el0_svc+0x48/0x164 [ 34.395842][ T3051] el0_svc+0x58/0x150 [ 34.396889][ T3051] el0t_64_sync_handler+0x84/0xf0 [ 34.398185][ T3051] el0t_64_sync+0x190/0x194 [ 34.510154][ T3051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 34.512369][ T3051] nci: nci_start_poll: failed to set local general bytes [ 39.547045][ T3051] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 executing program [ 39.765515][ T3058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 39.767935][ T3058] nci: nci_start_poll: failed to set local general bytes