Warning: Permanently added '10.128.10.47' (ECDSA) to the list of known hosts. executing program [ 38.582093][ T4219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 38.812453][ T4227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 39.041200][ T4233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 39.269078][ T4240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 39.496211][ T4247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 39.723215][ T4254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 39.953538][ T4260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 40.181977][ T4266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 40.409854][ T4272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 40.638552][ T4278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 40.866425][ T4284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 41.094079][ T4290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 41.321591][ T4296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 41.389012][ T4302] [ 41.389649][ T4302] ====================================================== [ 41.391259][ T4302] WARNING: possible circular locking dependency detected [ 41.392961][ T4302] 6.1.26-syzkaller #0 Not tainted [ 41.394127][ T4302] ------------------------------------------------------ [ 41.395837][ T4302] syz-executor298/4302 is trying to acquire lock: [ 41.397424][ T4302] ffff0000de519350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x498/0x1204 [ 41.399721][ T4302] [ 41.399721][ T4302] but task is already holding lock: [ 41.401465][ T4302] ffff0000de51a520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 41.404191][ T4302] [ 41.404191][ T4302] which lock already depends on the new lock. [ 41.404191][ T4302] [ 41.406613][ T4302] [ 41.406613][ T4302] the existing dependency chain (in reverse order) is: [ 41.408729][ T4302] [ 41.408729][ T4302] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 41.410821][ T4302] __mutex_lock_common+0x190/0x21a0 [ 41.412177][ T4302] mutex_lock_nested+0x38/0x44 [ 41.413446][ T4302] nfc_urelease_event_work+0xfc/0x2a8 [ 41.414884][ T4302] process_one_work+0x7ac/0x1404 [ 41.416109][ T4302] worker_thread+0x8e4/0xfec [ 41.417381][ T4302] kthread+0x250/0x2d8 [ 41.418491][ T4302] ret_from_fork+0x10/0x20 [ 41.419612][ T4302] [ 41.419612][ T4302] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 41.421460][ T4302] __mutex_lock_common+0x190/0x21a0 [ 41.422762][ T4302] mutex_lock_nested+0x38/0x44 [ 41.424084][ T4302] nfc_register_device+0x4c/0x310 [ 41.425415][ T4302] nci_register_device+0x6ac/0x7c4 [ 41.426735][ T4302] virtual_ncidev_open+0x6c/0xd8 [ 41.428055][ T4302] misc_open+0x2f0/0x368 [ 41.429134][ T4302] chrdev_open+0x3e8/0x4fc [ 41.430282][ T4302] do_dentry_open+0x734/0xfa0 [ 41.431474][ T4302] vfs_open+0x7c/0x90 [ 41.432574][ T4302] path_openat+0x1e14/0x2548 [ 41.433708][ T4302] do_filp_open+0x1bc/0x3cc [ 41.434832][ T4302] do_sys_openat2+0x128/0x3d8 [ 41.436034][ T4302] __arm64_sys_openat+0x1f0/0x240 [ 41.437266][ T4302] invoke_syscall+0x98/0x2c0 [ 41.438473][ T4302] el0_svc_common+0x138/0x258 [ 41.439641][ T4302] do_el0_svc+0x64/0x218 [ 41.440747][ T4302] el0_svc+0x58/0x168 [ 41.441823][ T4302] el0t_64_sync_handler+0x84/0xf0 [ 41.443118][ T4302] el0t_64_sync+0x18c/0x190 [ 41.444370][ T4302] [ 41.444370][ T4302] -> #1 (nci_mutex){+.+.}-{3:3}: [ 41.446015][ T4302] __mutex_lock_common+0x190/0x21a0 [ 41.447410][ T4302] mutex_lock_nested+0x38/0x44 [ 41.448657][ T4302] virtual_nci_close+0x28/0x58 [ 41.449924][ T4302] nci_dev_up+0x754/0xb10 [ 41.451102][ T4302] nfc_dev_up+0x154/0x300 [ 41.452201][ T4302] nfc_genl_dev_up+0x98/0xdc [ 41.453458][ T4302] genl_rcv_msg+0x948/0xc2c [ 41.454647][ T4302] netlink_rcv_skb+0x20c/0x3b8 [ 41.455907][ T4302] genl_rcv+0x38/0x50 [ 41.456957][ T4302] netlink_unicast+0x660/0x8d4 [ 41.458143][ T4302] netlink_sendmsg+0x834/0xb18 [ 41.459383][ T4302] ____sys_sendmsg+0x558/0x844 [ 41.460614][ T4302] __sys_sendmsg+0x26c/0x33c [ 41.461815][ T4302] __arm64_sys_sendmsg+0x80/0x94 [ 41.463052][ T4302] invoke_syscall+0x98/0x2c0 [ 41.464287][ T4302] el0_svc_common+0x138/0x258 [ 41.465505][ T4302] do_el0_svc+0x64/0x218 [ 41.466652][ T4302] el0_svc+0x58/0x168 [ 41.467790][ T4302] el0t_64_sync_handler+0x84/0xf0 [ 41.469053][ T4302] el0t_64_sync+0x18c/0x190 [ 41.470309][ T4302] [ 41.470309][ T4302] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 41.472169][ T4302] __lock_acquire+0x3338/0x764c [ 41.473441][ T4302] lock_acquire+0x26c/0x7cc [ 41.474598][ T4302] __mutex_lock_common+0x190/0x21a0 [ 41.475898][ T4302] mutex_lock_nested+0x38/0x44 [ 41.477139][ T4302] nci_start_poll+0x498/0x1204 [ 41.478374][ T4302] nfc_start_poll+0x164/0x2a4 [ 41.479586][ T4302] nfc_genl_start_poll+0x1b8/0x308 [ 41.481012][ T4302] genl_rcv_msg+0x948/0xc2c [ 41.482202][ T4302] netlink_rcv_skb+0x20c/0x3b8 [ 41.483477][ T4302] genl_rcv+0x38/0x50 [ 41.484512][ T4302] netlink_unicast+0x660/0x8d4 [ 41.485738][ T4302] netlink_sendmsg+0x834/0xb18 [ 41.486920][ T4302] ____sys_sendmsg+0x558/0x844 [ 41.488176][ T4302] __sys_sendmsg+0x26c/0x33c [ 41.489370][ T4302] __arm64_sys_sendmsg+0x80/0x94 [ 41.490674][ T4302] invoke_syscall+0x98/0x2c0 [ 41.491965][ T4302] el0_svc_common+0x138/0x258 [ 41.493203][ T4302] do_el0_svc+0x64/0x218 [ 41.494306][ T4302] el0_svc+0x58/0x168 [ 41.495439][ T4302] el0t_64_sync_handler+0x84/0xf0 [ 41.496782][ T4302] el0t_64_sync+0x18c/0x190 [ 41.497920][ T4302] [ 41.497920][ T4302] other info that might help us debug this: [ 41.497920][ T4302] [ 41.500349][ T4302] Chain exists of: [ 41.500349][ T4302] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 41.500349][ T4302] [ 41.503766][ T4302] Possible unsafe locking scenario: [ 41.503766][ T4302] [ 41.505484][ T4302] CPU0 CPU1 [ 41.506810][ T4302] ---- ---- [ 41.508015][ T4302] lock(&genl_data->genl_data_mutex); [ 41.509266][ T4302] lock(nfc_devlist_mutex); [ 41.510973][ T4302] lock(&genl_data->genl_data_mutex); [ 41.512851][ T4302] lock(&ndev->req_lock); [ 41.513937][ T4302] [ 41.513937][ T4302] *** DEADLOCK *** [ 41.513937][ T4302] [ 41.515783][ T4302] 4 locks held by syz-executor298/4302: [ 41.517095][ T4302] #0: ffff800017bbf050 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 41.519060][ T4302] #1: ffff800017bbef08 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 41.521179][ T4302] #2: ffff0000de51a520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 41.523828][ T4302] #3: ffff0000de51a100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x60/0x2a4 [ 41.526098][ T4302] [ 41.526098][ T4302] stack backtrace: [ 41.527461][ T4302] CPU: 0 PID: 4302 Comm: syz-executor298 Not tainted 6.1.26-syzkaller #0 [ 41.529466][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 41.531862][ T4302] Call trace: [ 41.532637][ T4302] dump_backtrace+0x1c8/0x1f4 [ 41.533795][ T4302] show_stack+0x2c/0x3c [ 41.534778][ T4302] dump_stack_lvl+0x108/0x170 [ 41.535890][ T4302] dump_stack+0x1c/0x5c [ 41.536875][ T4302] print_circular_bug+0x150/0x1b8 [ 41.538096][ T4302] check_noncircular+0x2cc/0x378 [ 41.539295][ T4302] __lock_acquire+0x3338/0x764c [ 41.540338][ T4302] lock_acquire+0x26c/0x7cc [ 41.541455][ T4302] __mutex_lock_common+0x190/0x21a0 [ 41.542684][ T4302] mutex_lock_nested+0x38/0x44 [ 41.543852][ T4302] nci_start_poll+0x498/0x1204 [ 41.544936][ T4302] nfc_start_poll+0x164/0x2a4 [ 41.546100][ T4302] nfc_genl_start_poll+0x1b8/0x308 [ 41.547317][ T4302] genl_rcv_msg+0x948/0xc2c [ 41.548357][ T4302] netlink_rcv_skb+0x20c/0x3b8 [ 41.549581][ T4302] genl_rcv+0x38/0x50 [ 41.550536][ T4302] netlink_unicast+0x660/0x8d4 [ 41.551694][ T4302] netlink_sendmsg+0x834/0xb18 [ 41.552784][ T4302] ____sys_sendmsg+0x558/0x844 [ 41.553946][ T4302] __sys_sendmsg+0x26c/0x33c [ 41.555075][ T4302] __arm64_sys_sendmsg+0x80/0x94 [ 41.556243][ T4302] invoke_syscall+0x98/0x2c0 [ 41.557493][ T4302] el0_svc_common+0x138/0x258 [ 41.558590][ T4302] do_el0_svc+0x64/0x218 [ 41.559537][ T4302] el0_svc+0x58/0x168 [ 41.560552][ T4302] el0t_64_sync_handler+0x84/0xf0 [ 41.561763][ T4302] el0t_64_sync+0x18c/0x190 [ 41.563131][ T4302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 41.565181][ T4302] nci: nci_start_poll: failed to set local general bytes [ 46.641049][ T4302] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 executing program [ 46.862577][ T4309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 47.083900][ T4319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 47.086094][ T4319] nci: nci_start_poll: failed to set local general bytes