Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. executing program [ 44.077651][ T3970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 44.314730][ T3977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 44.549402][ T3984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 44.778901][ T3991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 45.008162][ T3997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 45.239156][ T4003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 45.470988][ T4009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 45.701518][ T4015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 45.934248][ T4021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 46.163808][ T4027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 46.396506][ T4033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 46.628650][ T4040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 46.698210][ T4050] [ 46.698746][ T4050] ====================================================== [ 46.700065][ T4050] WARNING: possible circular locking dependency detected [ 46.701450][ T4050] 5.15.120-syzkaller #0 Not tainted [ 46.702510][ T4050] ------------------------------------------------------ [ 46.703945][ T4050] syz-executor961/4050 is trying to acquire lock: [ 46.705265][ T4050] ffff0000c85af350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x498/0x1204 [ 46.707130][ T4050] [ 46.707130][ T4050] but task is already holding lock: [ 46.708659][ T4050] ffff0000c94185e8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 46.710860][ T4050] [ 46.710860][ T4050] which lock already depends on the new lock. [ 46.710860][ T4050] [ 46.712922][ T4050] [ 46.712922][ T4050] the existing dependency chain (in reverse order) is: [ 46.714737][ T4050] [ 46.714737][ T4050] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 46.716637][ T4050] __mutex_lock_common+0x194/0x2154 [ 46.717844][ T4050] mutex_lock_nested+0xa4/0xf8 [ 46.718933][ T4050] nfc_urelease_event_work+0xfc/0x2a8 [ 46.720044][ T4050] process_one_work+0x790/0x11b8 [ 46.721165][ T4050] worker_thread+0x910/0x1034 [ 46.722252][ T4050] kthread+0x37c/0x45c [ 46.723202][ T4050] ret_from_fork+0x10/0x20 [ 46.724210][ T4050] [ 46.724210][ T4050] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 46.725914][ T4050] __mutex_lock_common+0x194/0x2154 [ 46.727099][ T4050] mutex_lock_nested+0xa4/0xf8 [ 46.728233][ T4050] nfc_register_device+0x4c/0x310 [ 46.729381][ T4050] nci_register_device+0x6ac/0x7c4 [ 46.730576][ T4050] virtual_ncidev_open+0x6c/0xd8 [ 46.731697][ T4050] misc_open+0x2f0/0x368 [ 46.732677][ T4050] chrdev_open+0x3e8/0x4fc [ 46.733735][ T4050] do_dentry_open+0x780/0xed8 [ 46.734811][ T4050] vfs_open+0x7c/0x90 [ 46.735697][ T4050] path_openat+0x1f28/0x26f0 [ 46.736750][ T4050] do_filp_open+0x1a8/0x3b4 [ 46.737828][ T4050] do_sys_openat2+0x128/0x3d8 [ 46.738876][ T4050] __arm64_sys_openat+0x1f0/0x240 [ 46.739966][ T4050] invoke_syscall+0x98/0x2b8 [ 46.741017][ T4050] el0_svc_common+0x138/0x258 [ 46.742007][ T4050] do_el0_svc+0x58/0x14c [ 46.742952][ T4050] el0_svc+0x7c/0x1f0 [ 46.743889][ T4050] el0t_64_sync_handler+0x84/0xe4 [ 46.745020][ T4050] el0t_64_sync+0x1a0/0x1a4 [ 46.746065][ T4050] [ 46.746065][ T4050] -> #1 (nci_mutex){+.+.}-{3:3}: [ 46.747516][ T4050] __mutex_lock_common+0x194/0x2154 [ 46.748734][ T4050] mutex_lock_nested+0xa4/0xf8 [ 46.749753][ T4050] virtual_nci_close+0x28/0x58 [ 46.750830][ T4050] nci_dev_up+0x760/0xb50 [ 46.751831][ T4050] nfc_dev_up+0x154/0x300 [ 46.752797][ T4050] nfc_genl_dev_up+0x98/0xdc [ 46.753822][ T4050] genl_rcv_msg+0xc18/0x1018 [ 46.754885][ T4050] netlink_rcv_skb+0x20c/0x3b8 [ 46.755943][ T4050] genl_rcv+0x38/0x50 [ 46.756871][ T4050] netlink_unicast+0x664/0x938 [ 46.757935][ T4050] netlink_sendmsg+0x844/0xb38 [ 46.758986][ T4050] ____sys_sendmsg+0x584/0x870 [ 46.760149][ T4050] ___sys_sendmsg+0x214/0x294 [ 46.761169][ T4050] __arm64_sys_sendmsg+0x1ac/0x25c [ 46.762234][ T4050] invoke_syscall+0x98/0x2b8 [ 46.763291][ T4050] el0_svc_common+0x138/0x258 [ 46.764350][ T4050] do_el0_svc+0x58/0x14c [ 46.765322][ T4050] el0_svc+0x7c/0x1f0 [ 46.766250][ T4050] el0t_64_sync_handler+0x84/0xe4 [ 46.767396][ T4050] el0t_64_sync+0x1a0/0x1a4 [ 46.768452][ T4050] [ 46.768452][ T4050] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 46.769981][ T4050] __lock_acquire+0x32cc/0x7620 [ 46.771068][ T4050] lock_acquire+0x240/0x77c [ 46.772094][ T4050] __mutex_lock_common+0x194/0x2154 [ 46.773177][ T4050] mutex_lock_nested+0xa4/0xf8 [ 46.774164][ T4050] nci_start_poll+0x498/0x1204 [ 46.775327][ T4050] nfc_start_poll+0x164/0x2a4 [ 46.776450][ T4050] nfc_genl_start_poll+0x1b8/0x308 [ 46.777595][ T4050] genl_rcv_msg+0xc18/0x1018 [ 46.778570][ T4050] netlink_rcv_skb+0x20c/0x3b8 [ 46.779563][ T4050] genl_rcv+0x38/0x50 [ 46.780458][ T4050] netlink_unicast+0x664/0x938 [ 46.781499][ T4050] netlink_sendmsg+0x844/0xb38 [ 46.782527][ T4050] ____sys_sendmsg+0x584/0x870 [ 46.783671][ T4050] ___sys_sendmsg+0x214/0x294 [ 46.784746][ T4050] __arm64_sys_sendmsg+0x1ac/0x25c [ 46.785934][ T4050] invoke_syscall+0x98/0x2b8 [ 46.786993][ T4050] el0_svc_common+0x138/0x258 [ 46.788103][ T4050] do_el0_svc+0x58/0x14c [ 46.789072][ T4050] el0_svc+0x7c/0x1f0 [ 46.789965][ T4050] el0t_64_sync_handler+0x84/0xe4 [ 46.791173][ T4050] el0t_64_sync+0x1a0/0x1a4 [ 46.792169][ T4050] [ 46.792169][ T4050] other info that might help us debug this: [ 46.792169][ T4050] [ 46.794277][ T4050] Chain exists of: [ 46.794277][ T4050] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 46.794277][ T4050] [ 46.797180][ T4050] Possible unsafe locking scenario: [ 46.797180][ T4050] [ 46.798737][ T4050] CPU0 CPU1 [ 46.799776][ T4050] ---- ---- [ 46.800802][ T4050] lock(&genl_data->genl_data_mutex); [ 46.801920][ T4050] lock(nfc_devlist_mutex); [ 46.803382][ T4050] lock(&genl_data->genl_data_mutex); [ 46.804970][ T4050] lock(&ndev->req_lock); [ 46.805834][ T4050] [ 46.805834][ T4050] *** DEADLOCK *** [ 46.805834][ T4050] [ 46.807460][ T4050] 4 locks held by syz-executor961/4050: [ 46.808612][ T4050] #0: ffff800016a34e10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 46.810362][ T4050] #1: ffff800016a34cc8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0x1018 [ 46.812160][ T4050] #2: ffff0000c94185e8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 46.814297][ T4050] #3: ffff0000c9418190 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x60/0x2a4 [ 46.816025][ T4050] [ 46.816025][ T4050] stack backtrace: [ 46.817277][ T4050] CPU: 1 PID: 4050 Comm: syz-executor961 Not tainted 5.15.120-syzkaller #0 [ 46.819180][ T4050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 46.821350][ T4050] Call trace: [ 46.822034][ T4050] dump_backtrace+0x0/0x530 [ 46.822956][ T4050] show_stack+0x2c/0x3c [ 46.823803][ T4050] dump_stack_lvl+0x108/0x170 [ 46.824729][ T4050] dump_stack+0x1c/0x58 [ 46.825584][ T4050] print_circular_bug+0x150/0x1b8 [ 46.826629][ T4050] check_noncircular+0x2cc/0x378 [ 46.827634][ T4050] __lock_acquire+0x32cc/0x7620 [ 46.828523][ T4050] lock_acquire+0x240/0x77c [ 46.829474][ T4050] __mutex_lock_common+0x194/0x2154 [ 46.830505][ T4050] mutex_lock_nested+0xa4/0xf8 [ 46.831500][ T4050] nci_start_poll+0x498/0x1204 [ 46.832548][ T4050] nfc_start_poll+0x164/0x2a4 [ 46.833417][ T4050] nfc_genl_start_poll+0x1b8/0x308 [ 46.834510][ T4050] genl_rcv_msg+0xc18/0x1018 [ 46.835428][ T4050] netlink_rcv_skb+0x20c/0x3b8 [ 46.836425][ T4050] genl_rcv+0x38/0x50 [ 46.837261][ T4050] netlink_unicast+0x664/0x938 [ 46.838185][ T4050] netlink_sendmsg+0x844/0xb38 [ 46.839178][ T4050] ____sys_sendmsg+0x584/0x870 [ 46.840179][ T4050] ___sys_sendmsg+0x214/0x294 [ 46.841106][ T4050] __arm64_sys_sendmsg+0x1ac/0x25c [ 46.842122][ T4050] invoke_syscall+0x98/0x2b8 [ 46.843098][ T4050] el0_svc_common+0x138/0x258 [ 46.844048][ T4050] do_el0_svc+0x58/0x14c [ 46.844873][ T4050] el0_svc+0x7c/0x1f0 [ 46.845685][ T4050] el0t_64_sync_handler+0x84/0xe4 [ 46.846745][ T4050] el0t_64_sync+0x1a0/0x1a4 [ 46.864374][ T4050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.866304][ T4050] nci: nci_start_poll: failed to set local general bytes [ 51.936180][ T4050] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 executing program [ 52.159450][ T4057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 52.161421][ T4057] nci: nci_start_poll: failed to set local general bytes