[ 14.833242][ T3894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 14.836450][ T3894] eql: remember to turn off Van-Jacobson compression on your slave devices [ 14.881683][ T11] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 14.885082][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.53' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 37.951834][ T4220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 38.181688][ T4227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 38.409926][ T4235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 38.636579][ T4241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 38.864077][ T4248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 39.091924][ T4254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 39.319585][ T4260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 39.548292][ T4266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 39.616216][ T4276] [ 39.616890][ T4276] ====================================================== [ 39.618437][ T4276] WARNING: possible circular locking dependency detected [ 39.619930][ T4276] 6.1.29-syzkaller #0 Not tainted [ 39.621070][ T4276] ------------------------------------------------------ [ 39.622717][ T4276] syz-executor372/4276 is trying to acquire lock: [ 39.624375][ T4276] ffff0000dde9c350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x498/0x1204 [ 39.626609][ T4276] [ 39.626609][ T4276] but task is already holding lock: [ 39.628367][ T4276] ffff0000dde9d520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 39.631051][ T4276] [ 39.631051][ T4276] which lock already depends on the new lock. [ 39.631051][ T4276] [ 39.633572][ T4276] [ 39.633572][ T4276] the existing dependency chain (in reverse order) is: [ 39.635657][ T4276] [ 39.635657][ T4276] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 39.637768][ T4276] __mutex_lock_common+0x190/0x21a0 [ 39.639161][ T4276] mutex_lock_nested+0x38/0x44 [ 39.640392][ T4276] nfc_urelease_event_work+0xfc/0x2a8 [ 39.641752][ T4276] process_one_work+0x7ac/0x1404 [ 39.643017][ T4276] worker_thread+0x8e4/0xfec [ 39.644263][ T4276] kthread+0x250/0x2d8 [ 39.645301][ T4276] ret_from_fork+0x10/0x20 [ 39.646511][ T4276] [ 39.646511][ T4276] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 39.648371][ T4276] __mutex_lock_common+0x190/0x21a0 [ 39.649792][ T4276] mutex_lock_nested+0x38/0x44 [ 39.651076][ T4276] nfc_register_device+0x4c/0x310 [ 39.652390][ T4276] nci_register_device+0x6ac/0x7c4 [ 39.653745][ T4276] virtual_ncidev_open+0x6c/0xd8 [ 39.654984][ T4276] misc_open+0x2f0/0x368 [ 39.656127][ T4276] chrdev_open+0x3e8/0x4fc [ 39.657331][ T4276] do_dentry_open+0x734/0xfa0 [ 39.658566][ T4276] vfs_open+0x7c/0x90 [ 39.659684][ T4276] path_openat+0x1e14/0x2548 [ 39.660915][ T4276] do_filp_open+0x1bc/0x3cc [ 39.662160][ T4276] do_sys_openat2+0x128/0x3d8 [ 39.663350][ T4276] __arm64_sys_openat+0x1f0/0x240 [ 39.664686][ T4276] invoke_syscall+0x98/0x2c0 [ 39.665919][ T4276] el0_svc_common+0x138/0x258 [ 39.667187][ T4276] do_el0_svc+0x64/0x218 [ 39.668308][ T4276] el0_svc+0x58/0x168 [ 39.669388][ T4276] el0t_64_sync_handler+0x84/0xf0 [ 39.670721][ T4276] el0t_64_sync+0x18c/0x190 [ 39.671914][ T4276] [ 39.671914][ T4276] -> #1 (nci_mutex){+.+.}-{3:3}: [ 39.673621][ T4276] __mutex_lock_common+0x190/0x21a0 [ 39.675048][ T4276] mutex_lock_nested+0x38/0x44 [ 39.676325][ T4276] virtual_nci_close+0x28/0x58 [ 39.677589][ T4276] nci_dev_up+0x754/0xb10 [ 39.678780][ T4276] nfc_dev_up+0x154/0x300 [ 39.679929][ T4276] nfc_genl_dev_up+0x98/0xdc [ 39.681143][ T4276] genl_rcv_msg+0x948/0xc2c [ 39.682324][ T4276] netlink_rcv_skb+0x20c/0x3b8 [ 39.683579][ T4276] genl_rcv+0x38/0x50 [ 39.684689][ T4276] netlink_unicast+0x660/0x8d4 [ 39.686028][ T4276] netlink_sendmsg+0x834/0xb18 [ 39.687306][ T4276] ____sys_sendmsg+0x558/0x844 [ 39.688548][ T4276] __sys_sendmsg+0x26c/0x33c [ 39.689751][ T4276] __arm64_sys_sendmsg+0x80/0x94 [ 39.691137][ T4276] invoke_syscall+0x98/0x2c0 [ 39.692380][ T4276] el0_svc_common+0x138/0x258 [ 39.693615][ T4276] do_el0_svc+0x64/0x218 [ 39.694803][ T4276] el0_svc+0x58/0x168 [ 39.695939][ T4276] el0t_64_sync_handler+0x84/0xf0 [ 39.697293][ T4276] el0t_64_sync+0x18c/0x190 [ 39.698474][ T4276] [ 39.698474][ T4276] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 39.700278][ T4276] __lock_acquire+0x3338/0x764c [ 39.701544][ T4276] lock_acquire+0x26c/0x7cc [ 39.702705][ T4276] __mutex_lock_common+0x190/0x21a0 [ 39.704115][ T4276] mutex_lock_nested+0x38/0x44 [ 39.705374][ T4276] nci_start_poll+0x498/0x1204 [ 39.706652][ T4276] nfc_start_poll+0x164/0x2a4 [ 39.707907][ T4276] nfc_genl_start_poll+0x1b8/0x308 [ 39.709320][ T4276] genl_rcv_msg+0x948/0xc2c [ 39.710541][ T4276] netlink_rcv_skb+0x20c/0x3b8 [ 39.711864][ T4276] genl_rcv+0x38/0x50 [ 39.712888][ T4276] netlink_unicast+0x660/0x8d4 [ 39.714207][ T4276] netlink_sendmsg+0x834/0xb18 [ 39.715464][ T4276] ____sys_sendmsg+0x558/0x844 [ 39.716723][ T4276] __sys_sendmsg+0x26c/0x33c [ 39.717987][ T4276] __arm64_sys_sendmsg+0x80/0x94 [ 39.719259][ T4276] invoke_syscall+0x98/0x2c0 [ 39.720524][ T4276] el0_svc_common+0x138/0x258 [ 39.721794][ T4276] do_el0_svc+0x64/0x218 [ 39.722911][ T4276] el0_svc+0x58/0x168 [ 39.723896][ T4276] el0t_64_sync_handler+0x84/0xf0 [ 39.725240][ T4276] el0t_64_sync+0x18c/0x190 [ 39.726433][ T4276] [ 39.726433][ T4276] other info that might help us debug this: [ 39.726433][ T4276] [ 39.728771][ T4276] Chain exists of: [ 39.728771][ T4276] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 39.728771][ T4276] [ 39.732187][ T4276] Possible unsafe locking scenario: [ 39.732187][ T4276] [ 39.733980][ T4276] CPU0 CPU1 [ 39.735262][ T4276] ---- ---- [ 39.736528][ T4276] lock(&genl_data->genl_data_mutex); [ 39.737840][ T4276] lock(nfc_devlist_mutex); [ 39.739508][ T4276] lock(&genl_data->genl_data_mutex); [ 39.741416][ T4276] lock(&ndev->req_lock); [ 39.742501][ T4276] [ 39.742501][ T4276] *** DEADLOCK *** [ 39.742501][ T4276] [ 39.744294][ T4276] 4 locks held by syz-executor372/4276: [ 39.745666][ T4276] #0: ffff800017bd0070 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 39.747635][ T4276] #1: ffff800017bcff28 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 39.749823][ T4276] #2: ffff0000dde9d520 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a8/0x308 [ 39.752520][ T4276] #3: ffff0000dde9d100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x60/0x2a4 [ 39.754766][ T4276] [ 39.754766][ T4276] stack backtrace: [ 39.756135][ T4276] CPU: 0 PID: 4276 Comm: syz-executor372 Not tainted 6.1.29-syzkaller #0 [ 39.758183][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 39.760624][ T4276] Call trace: [ 39.761456][ T4276] dump_backtrace+0x1c8/0x1f4 [ 39.762542][ T4276] show_stack+0x2c/0x3c [ 39.763566][ T4276] dump_stack_lvl+0x108/0x170 [ 39.764702][ T4276] dump_stack+0x1c/0x5c [ 39.765642][ T4276] print_circular_bug+0x150/0x1b8 [ 39.766846][ T4276] check_noncircular+0x2cc/0x378 [ 39.768028][ T4276] __lock_acquire+0x3338/0x764c [ 39.769126][ T4276] lock_acquire+0x26c/0x7cc [ 39.770293][ T4276] __mutex_lock_common+0x190/0x21a0 [ 39.771552][ T4276] mutex_lock_nested+0x38/0x44 [ 39.772693][ T4276] nci_start_poll+0x498/0x1204 [ 39.773842][ T4276] nfc_start_poll+0x164/0x2a4 [ 39.774991][ T4276] nfc_genl_start_poll+0x1b8/0x308 [ 39.776223][ T4276] genl_rcv_msg+0x948/0xc2c [ 39.777240][ T4276] netlink_rcv_skb+0x20c/0x3b8 [ 39.778403][ T4276] genl_rcv+0x38/0x50 [ 39.779343][ T4276] netlink_unicast+0x660/0x8d4 [ 39.780466][ T4276] netlink_sendmsg+0x834/0xb18 [ 39.781649][ T4276] ____sys_sendmsg+0x558/0x844 [ 39.782779][ T4276] __sys_sendmsg+0x26c/0x33c [ 39.783859][ T4276] __arm64_sys_sendmsg+0x80/0x94 [ 39.785042][ T4276] invoke_syscall+0x98/0x2c0 [ 39.786185][ T4276] el0_svc_common+0x138/0x258 [ 39.787270][ T4276] do_el0_svc+0x64/0x218 [ 39.788274][ T4276] el0_svc+0x58/0x168 [ 39.789231][ T4276] el0t_64_sync_handler+0x84/0xf0 [ 39.790408][ T4276] el0t_64_sync+0x18c/0x190 [ 39.903960][ T4276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 39.906046][ T4276] nci: nci_start_poll: failed to set local general bytes [ 44.979359][ T4276] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 executing program [ 45.200843][ T4283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 45.202914][ T4283] nci: nci_start_poll: failed to set local general bytes