Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. executing program [ 40.783226][ T4223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 41.014120][ T4231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 41.243527][ T4238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 41.473527][ T4244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 41.704010][ T4251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 41.933221][ T4257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 42.001168][ T4267] [ 42.001825][ T4267] ====================================================== [ 42.003681][ T4267] WARNING: possible circular locking dependency detected [ 42.005486][ T4267] 6.1.79-syzkaller #0 Not tainted [ 42.006811][ T4267] ------------------------------------------------------ [ 42.008679][ T4267] syz-executor115/4267 is trying to acquire lock: [ 42.010336][ T4267] ffff0000d59b7350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x498/0x1204 [ 42.012855][ T4267] [ 42.012855][ T4267] but task is already holding lock: [ 42.014820][ T4267] ffff0000cd49c520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 42.017719][ T4267] [ 42.017719][ T4267] which lock already depends on the new lock. [ 42.017719][ T4267] [ 42.020555][ T4267] [ 42.020555][ T4267] the existing dependency chain (in reverse order) is: [ 42.022954][ T4267] [ 42.022954][ T4267] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 42.025304][ T4267] __mutex_lock_common+0x190/0x21a0 [ 42.026844][ T4267] mutex_lock_nested+0x38/0x44 [ 42.028267][ T4267] nfc_urelease_event_work+0xfc/0x2a8 [ 42.029839][ T4267] process_one_work+0x7ac/0x1404 [ 42.031288][ T4267] worker_thread+0x8e4/0xfec [ 42.032679][ T4267] kthread+0x250/0x2d8 [ 42.033968][ T4267] ret_from_fork+0x10/0x20 [ 42.035339][ T4267] [ 42.035339][ T4267] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 42.037416][ T4267] __mutex_lock_common+0x190/0x21a0 [ 42.038958][ T4267] mutex_lock_nested+0x38/0x44 [ 42.040412][ T4267] nfc_register_device+0x4c/0x310 [ 42.041903][ T4267] nci_register_device+0x6ac/0x7c4 [ 42.043479][ T4267] virtual_ncidev_open+0x6c/0xd8 [ 42.044932][ T4267] misc_open+0x2f0/0x368 [ 42.046247][ T4267] chrdev_open+0x3e8/0x4fc [ 42.047611][ T4267] do_dentry_open+0x734/0xfa0 [ 42.049057][ T4267] vfs_open+0x7c/0x90 [ 42.050229][ T4267] path_openat+0x1e14/0x2548 [ 42.051624][ T4267] do_filp_open+0x1bc/0x3cc [ 42.052952][ T4267] do_sys_openat2+0x128/0x3d8 [ 42.054323][ T4267] __arm64_sys_openat+0x1f0/0x240 [ 42.055848][ T4267] invoke_syscall+0x98/0x2c0 [ 42.057230][ T4267] el0_svc_common+0x138/0x258 [ 42.058614][ T4267] do_el0_svc+0x64/0x218 [ 42.059883][ T4267] el0_svc+0x58/0x168 [ 42.061114][ T4267] el0t_64_sync_handler+0x84/0xf0 [ 42.062760][ T4267] el0t_64_sync+0x18c/0x190 [ 42.064096][ T4267] [ 42.064096][ T4267] -> #1 (nci_mutex){+.+.}-{3:3}: [ 42.066075][ T4267] __mutex_lock_common+0x190/0x21a0 [ 42.067619][ T4267] mutex_lock_nested+0x38/0x44 [ 42.069205][ T4267] virtual_nci_close+0x28/0x58 [ 42.070676][ T4267] nci_dev_up+0x754/0xb10 [ 42.071962][ T4267] nfc_dev_up+0x154/0x300 [ 42.073265][ T4267] nfc_genl_dev_up+0x98/0xdc [ 42.074644][ T4267] genl_rcv_msg+0x948/0xc2c [ 42.076039][ T4267] netlink_rcv_skb+0x20c/0x3b8 [ 42.077531][ T4267] genl_rcv+0x38/0x50 [ 42.078743][ T4267] netlink_unicast+0x65c/0x898 [ 42.080182][ T4267] netlink_sendmsg+0x834/0xb18 [ 42.081641][ T4267] ____sys_sendmsg+0x55c/0x848 [ 42.083098][ T4267] __sys_sendmsg+0x26c/0x33c [ 42.084428][ T4267] __arm64_sys_sendmsg+0x80/0x94 [ 42.085998][ T4267] invoke_syscall+0x98/0x2c0 [ 42.087357][ T4267] el0_svc_common+0x138/0x258 [ 42.088767][ T4267] do_el0_svc+0x64/0x218 [ 42.090028][ T4267] el0_svc+0x58/0x168 [ 42.091246][ T4267] el0t_64_sync_handler+0x84/0xf0 [ 42.092767][ T4267] el0t_64_sync+0x18c/0x190 [ 42.094113][ T4267] [ 42.094113][ T4267] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 42.096144][ T4267] __lock_acquire+0x3338/0x7680 [ 42.097620][ T4267] lock_acquire+0x26c/0x7cc [ 42.098977][ T4267] __mutex_lock_common+0x190/0x21a0 [ 42.100559][ T4267] mutex_lock_nested+0x38/0x44 [ 42.102010][ T4267] nci_start_poll+0x498/0x1204 [ 42.103471][ T4267] nfc_start_poll+0x164/0x2a4 [ 42.104866][ T4267] nfc_genl_start_poll+0x1b8/0x308 [ 42.106400][ T4267] genl_rcv_msg+0x948/0xc2c [ 42.107785][ T4267] netlink_rcv_skb+0x20c/0x3b8 [ 42.109235][ T4267] genl_rcv+0x38/0x50 [ 42.110512][ T4267] netlink_unicast+0x65c/0x898 [ 42.111937][ T4267] netlink_sendmsg+0x834/0xb18 [ 42.113369][ T4267] ____sys_sendmsg+0x55c/0x848 [ 42.114900][ T4267] __sys_sendmsg+0x26c/0x33c [ 42.116328][ T4267] __arm64_sys_sendmsg+0x80/0x94 [ 42.117838][ T4267] invoke_syscall+0x98/0x2c0 [ 42.119212][ T4267] el0_svc_common+0x138/0x258 [ 42.120630][ T4267] do_el0_svc+0x64/0x218 [ 42.121955][ T4267] el0_svc+0x58/0x168 [ 42.123197][ T4267] el0t_64_sync_handler+0x84/0xf0 [ 42.124697][ T4267] el0t_64_sync+0x18c/0x190 [ 42.126030][ T4267] [ 42.126030][ T4267] other info that might help us debug this: [ 42.126030][ T4267] [ 42.128713][ T4267] Chain exists of: [ 42.128713][ T4267] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 42.128713][ T4267] [ 42.132583][ T4267] Possible unsafe locking scenario: [ 42.132583][ T4267] [ 42.134617][ T4267] CPU0 CPU1 [ 42.136066][ T4267] ---- ---- [ 42.137586][ T4267] lock(&genl_data->genl_data_mutex); [ 42.139056][ T4267] lock(nfc_devlist_mutex); [ 42.141003][ T4267] lock(&genl_data->genl_data_mutex); [ 42.143224][ T4267] lock(&ndev->req_lock); [ 42.144515][ T4267] [ 42.144515][ T4267] *** DEADLOCK *** [ 42.144515][ T4267] [ 42.146759][ T4267] 4 locks held by syz-executor115/4267: [ 42.148301][ T4267] #0: ffff800017e782b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 42.150502][ T4267] #1: ffff800017e78168 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 42.152954][ T4267] #2: ffff0000cd49c520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 42.156183][ T4267] #3: ffff0000cd49c100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x60/0x2a4 [ 42.158836][ T4267] [ 42.158836][ T4267] stack backtrace: [ 42.160433][ T4267] CPU: 0 PID: 4267 Comm: syz-executor115 Not tainted 6.1.79-syzkaller #0 [ 42.162689][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 42.165373][ T4267] Call trace: [ 42.166278][ T4267] dump_backtrace+0x1c8/0x1f4 [ 42.167561][ T4267] show_stack+0x2c/0x3c [ 42.168713][ T4267] dump_stack_lvl+0x108/0x170 [ 42.169955][ T4267] dump_stack+0x1c/0x58 [ 42.171077][ T4267] print_circular_bug+0x150/0x1b8 [ 42.172478][ T4267] check_noncircular+0x2cc/0x378 [ 42.173855][ T4267] __lock_acquire+0x3338/0x7680 [ 42.175213][ T4267] lock_acquire+0x26c/0x7cc [ 42.176438][ T4267] __mutex_lock_common+0x190/0x21a0 [ 42.177886][ T4267] mutex_lock_nested+0x38/0x44 [ 42.179178][ T4267] nci_start_poll+0x498/0x1204 [ 42.180446][ T4267] nfc_start_poll+0x164/0x2a4 [ 42.181682][ T4267] nfc_genl_start_poll+0x1b8/0x308 [ 42.183073][ T4267] genl_rcv_msg+0x948/0xc2c [ 42.184358][ T4267] netlink_rcv_skb+0x20c/0x3b8 [ 42.185720][ T4267] genl_rcv+0x38/0x50 [ 42.186787][ T4267] netlink_unicast+0x65c/0x898 [ 42.188140][ T4267] netlink_sendmsg+0x834/0xb18 [ 42.189348][ T4267] ____sys_sendmsg+0x55c/0x848 [ 42.190700][ T4267] __sys_sendmsg+0x26c/0x33c [ 42.192012][ T4267] __arm64_sys_sendmsg+0x80/0x94 [ 42.193300][ T4267] invoke_syscall+0x98/0x2c0 [ 42.194585][ T4267] el0_svc_common+0x138/0x258 [ 42.195818][ T4267] do_el0_svc+0x64/0x218 [ 42.196959][ T4267] el0_svc+0x58/0x168 [ 42.198048][ T4267] el0t_64_sync_handler+0x84/0xf0 [ 42.199410][ T4267] el0t_64_sync+0x18c/0x190 [ 42.311931][ T4267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 42.314211][ T4267] nci: nci_start_poll: failed to set local general bytes [ 47.390996][ T4267] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 executing program [ 47.612131][ T4271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 47.832658][ T4278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 48.052304][ T4284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 48.272031][ T4294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 48.274498][ T4294] nci: nci_start_poll: failed to set local general bytes