Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. executing program [ 35.815027][ T4219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 36.046113][ T4227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 36.276159][ T4233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 36.505733][ T4239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 36.734600][ T4246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 36.962896][ T4253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 37.193319][ T4260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 37.423256][ T4266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 37.490333][ T4276] [ 37.491042][ T4276] ====================================================== [ 37.492915][ T4276] WARNING: possible circular locking dependency detected [ 37.494772][ T4276] 6.1.42-syzkaller #0 Not tainted [ 37.496047][ T4276] ------------------------------------------------------ [ 37.497942][ T4276] syz-executor323/4276 is trying to acquire lock: [ 37.499634][ T4276] ffff0000debcc350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x498/0x1204 [ 37.502160][ T4276] [ 37.502160][ T4276] but task is already holding lock: [ 37.504096][ T4276] ffff0000debcd520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 37.506952][ T4276] [ 37.506952][ T4276] which lock already depends on the new lock. [ 37.506952][ T4276] [ 37.509662][ T4276] [ 37.509662][ T4276] the existing dependency chain (in reverse order) is: [ 37.511999][ T4276] [ 37.511999][ T4276] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 37.514274][ T4276] __mutex_lock_common+0x190/0x21a0 [ 37.515778][ T4276] mutex_lock_nested+0x38/0x44 [ 37.517152][ T4276] nfc_urelease_event_work+0xfc/0x2a8 [ 37.518753][ T4276] process_one_work+0x7ac/0x1404 [ 37.520185][ T4276] worker_thread+0x8e4/0xfec [ 37.521526][ T4276] kthread+0x250/0x2d8 [ 37.522726][ T4276] ret_from_fork+0x10/0x20 [ 37.523998][ T4276] [ 37.523998][ T4276] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 37.526087][ T4276] __mutex_lock_common+0x190/0x21a0 [ 37.527605][ T4276] mutex_lock_nested+0x38/0x44 [ 37.528981][ T4276] nfc_register_device+0x4c/0x310 [ 37.530397][ T4276] nci_register_device+0x6ac/0x7c4 [ 37.531929][ T4276] virtual_ncidev_open+0x6c/0xd8 [ 37.533341][ T4276] misc_open+0x2f0/0x368 [ 37.534636][ T4276] chrdev_open+0x3e8/0x4fc [ 37.535970][ T4276] do_dentry_open+0x734/0xfa0 [ 37.537298][ T4276] vfs_open+0x7c/0x90 [ 37.538550][ T4276] path_openat+0x1e14/0x2548 [ 37.539886][ T4276] do_filp_open+0x1bc/0x3cc [ 37.541161][ T4276] do_sys_openat2+0x128/0x3d8 [ 37.542522][ T4276] __arm64_sys_openat+0x1f0/0x240 [ 37.543998][ T4276] invoke_syscall+0x98/0x2c0 [ 37.545355][ T4276] el0_svc_common+0x138/0x258 [ 37.546742][ T4276] do_el0_svc+0x64/0x218 [ 37.547975][ T4276] el0_svc+0x58/0x168 [ 37.549145][ T4276] el0t_64_sync_handler+0x84/0xf0 [ 37.550589][ T4276] el0t_64_sync+0x18c/0x190 [ 37.551923][ T4276] [ 37.551923][ T4276] -> #1 (nci_mutex){+.+.}-{3:3}: [ 37.553902][ T4276] __mutex_lock_common+0x190/0x21a0 [ 37.555470][ T4276] mutex_lock_nested+0x38/0x44 [ 37.556884][ T4276] virtual_nci_close+0x28/0x58 [ 37.558223][ T4276] nci_dev_up+0x754/0xb10 [ 37.559367][ T4276] nfc_dev_up+0x154/0x300 [ 37.560504][ T4276] nfc_genl_dev_up+0x98/0xdc [ 37.561864][ T4276] genl_rcv_msg+0x948/0xc2c [ 37.563187][ T4276] netlink_rcv_skb+0x20c/0x3b8 [ 37.564533][ T4276] genl_rcv+0x38/0x50 [ 37.565724][ T4276] netlink_unicast+0x660/0x8d4 [ 37.567121][ T4276] netlink_sendmsg+0x834/0xb18 [ 37.568532][ T4276] ____sys_sendmsg+0x558/0x844 [ 37.569944][ T4276] __sys_sendmsg+0x26c/0x33c [ 37.571304][ T4276] __arm64_sys_sendmsg+0x80/0x94 [ 37.572712][ T4276] invoke_syscall+0x98/0x2c0 [ 37.574075][ T4276] el0_svc_common+0x138/0x258 [ 37.575432][ T4276] do_el0_svc+0x64/0x218 [ 37.576737][ T4276] el0_svc+0x58/0x168 [ 37.577920][ T4276] el0t_64_sync_handler+0x84/0xf0 [ 37.579414][ T4276] el0t_64_sync+0x18c/0x190 [ 37.580777][ T4276] [ 37.580777][ T4276] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 37.582842][ T4276] __lock_acquire+0x3338/0x764c [ 37.584292][ T4276] lock_acquire+0x26c/0x7cc [ 37.585586][ T4276] __mutex_lock_common+0x190/0x21a0 [ 37.587064][ T4276] mutex_lock_nested+0x38/0x44 [ 37.588473][ T4276] nci_start_poll+0x498/0x1204 [ 37.589864][ T4276] nfc_start_poll+0x164/0x2a4 [ 37.591260][ T4276] nfc_genl_start_poll+0x1b8/0x308 [ 37.592719][ T4276] genl_rcv_msg+0x948/0xc2c [ 37.594028][ T4276] netlink_rcv_skb+0x20c/0x3b8 [ 37.595464][ T4276] genl_rcv+0x38/0x50 [ 37.596668][ T4276] netlink_unicast+0x660/0x8d4 [ 37.598030][ T4276] netlink_sendmsg+0x834/0xb18 [ 37.599449][ T4276] ____sys_sendmsg+0x558/0x844 [ 37.600843][ T4276] __sys_sendmsg+0x26c/0x33c [ 37.602225][ T4276] __arm64_sys_sendmsg+0x80/0x94 [ 37.603700][ T4276] invoke_syscall+0x98/0x2c0 [ 37.605053][ T4276] el0_svc_common+0x138/0x258 [ 37.606444][ T4276] do_el0_svc+0x64/0x218 [ 37.607758][ T4276] el0_svc+0x58/0x168 [ 37.608977][ T4276] el0t_64_sync_handler+0x84/0xf0 [ 37.610416][ T4276] el0t_64_sync+0x18c/0x190 [ 37.611766][ T4276] [ 37.611766][ T4276] other info that might help us debug this: [ 37.611766][ T4276] [ 37.614460][ T4276] Chain exists of: [ 37.614460][ T4276] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 37.614460][ T4276] [ 37.618234][ T4276] Possible unsafe locking scenario: [ 37.618234][ T4276] [ 37.620222][ T4276] CPU0 CPU1 [ 37.621638][ T4276] ---- ---- [ 37.623086][ T4276] lock(&genl_data->genl_data_mutex); [ 37.624477][ T4276] lock(nfc_devlist_mutex); [ 37.626404][ T4276] lock(&genl_data->genl_data_mutex); [ 37.628495][ T4276] lock(&ndev->req_lock); [ 37.629671][ T4276] [ 37.629671][ T4276] *** DEADLOCK *** [ 37.629671][ T4276] [ 37.631831][ T4276] 4 locks held by syz-executor323/4276: [ 37.633255][ T4276] #0: ffff800017ed3550 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 37.635456][ T4276] #1: ffff800017ed3408 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 37.637863][ T4276] #2: ffff0000debcd520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 37.640835][ T4276] #3: ffff0000debcd100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x60/0x2a4 [ 37.643307][ T4276] [ 37.643307][ T4276] stack backtrace: [ 37.644824][ T4276] CPU: 0 PID: 4276 Comm: syz-executor323 Not tainted 6.1.42-syzkaller #0 [ 37.647016][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 37.649691][ T4276] Call trace: [ 37.650600][ T4276] dump_backtrace+0x1c8/0x1f4 [ 37.651895][ T4276] show_stack+0x2c/0x3c [ 37.652988][ T4276] dump_stack_lvl+0x108/0x170 [ 37.654207][ T4276] dump_stack+0x1c/0x58 [ 37.655299][ T4276] print_circular_bug+0x150/0x1b8 [ 37.656721][ T4276] check_noncircular+0x2cc/0x378 [ 37.658062][ T4276] __lock_acquire+0x3338/0x764c [ 37.659325][ T4276] lock_acquire+0x26c/0x7cc [ 37.660486][ T4276] __mutex_lock_common+0x190/0x21a0 [ 37.661899][ T4276] mutex_lock_nested+0x38/0x44 [ 37.663211][ T4276] nci_start_poll+0x498/0x1204 [ 37.664507][ T4276] nfc_start_poll+0x164/0x2a4 [ 37.665772][ T4276] nfc_genl_start_poll+0x1b8/0x308 [ 37.667135][ T4276] genl_rcv_msg+0x948/0xc2c [ 37.668309][ T4276] netlink_rcv_skb+0x20c/0x3b8 [ 37.669559][ T4276] genl_rcv+0x38/0x50 [ 37.670648][ T4276] netlink_unicast+0x660/0x8d4 [ 37.671948][ T4276] netlink_sendmsg+0x834/0xb18 [ 37.673241][ T4276] ____sys_sendmsg+0x558/0x844 [ 37.674503][ T4276] __sys_sendmsg+0x26c/0x33c [ 37.675761][ T4276] __arm64_sys_sendmsg+0x80/0x94 [ 37.677043][ T4276] invoke_syscall+0x98/0x2c0 [ 37.678261][ T4276] el0_svc_common+0x138/0x258 [ 37.679521][ T4276] do_el0_svc+0x64/0x218 [ 37.680624][ T4276] el0_svc+0x58/0x168 [ 37.681700][ T4276] el0t_64_sync_handler+0x84/0xf0 [ 37.683055][ T4276] el0t_64_sync+0x18c/0x190 [ 37.798659][ T4276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.801082][ T4276] nci: nci_start_poll: failed to set local general bytes [ 42.816656][ T4276] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 executing program [ 43.038088][ T4279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 43.257886][ T4285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 43.477521][ T4291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 43.697769][ T4297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 43.918241][ T4308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 43.920627][ T4308] nci: nci_start_poll: failed to set local general bytes