[ 9.587738][ T2609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9.590328][ T2609] eql: remember to turn off Van-Jacobson compression on your slave devices [ 9.613705][ T984] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.618111][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 39.471462][ T3032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 39.694766][ T3039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 39.917971][ T3048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 40.139222][ T3055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 40.362007][ T3061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 40.584632][ T3067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 40.807354][ T3073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 41.029972][ T3079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 41.252054][ T3085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 41.474048][ T3091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 41.695635][ T3097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 41.918120][ T3103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 42.140283][ T3109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 42.361795][ T3115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 42.583836][ T3121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 42.804810][ T3127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 43.026182][ T3133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 43.089038][ T3143] [ 43.089711][ T3143] ====================================================== [ 43.091406][ T3143] WARNING: possible circular locking dependency detected [ 43.093026][ T3143] 6.1.0-rc5-syzkaller-32254-g9e4ce762f0e7 #0 Not tainted [ 43.094731][ T3143] ------------------------------------------------------ [ 43.096217][ T3143] syz-executor173/3143 is trying to acquire lock: [ 43.097695][ T3143] ffff0000cae1b350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_set_local_general_bytes+0xbc/0x480 [ 43.100014][ T3143] [ 43.100014][ T3143] but task is already holding lock: [ 43.101678][ T3143] ffff0000cae1dd18 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0xc4/0x174 [ 43.103967][ T3143] [ 43.103967][ T3143] which lock already depends on the new lock. [ 43.103967][ T3143] [ 43.106185][ T3143] [ 43.106185][ T3143] the existing dependency chain (in reverse order) is: [ 43.108195][ T3143] [ 43.108195][ T3143] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 43.110263][ T3143] __mutex_lock_common+0xd4/0xca8 [ 43.111574][ T3143] mutex_lock_nested+0x38/0x44 [ 43.112651][ T3143] nfc_urelease_event_work+0x88/0x16c [ 43.114035][ T3143] process_one_work+0x2d8/0x504 [ 43.115238][ T3143] worker_thread+0x340/0x610 [ 43.116369][ T3143] kthread+0x12c/0x158 [ 43.117388][ T3143] ret_from_fork+0x10/0x20 [ 43.118594][ T3143] [ 43.118594][ T3143] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 43.120359][ T3143] __mutex_lock_common+0xd4/0xca8 [ 43.121580][ T3143] mutex_lock_nested+0x38/0x44 [ 43.122712][ T3143] nfc_register_device+0x34/0x208 [ 43.124042][ T3143] nci_register_device+0x338/0x3b0 [ 43.125410][ T3143] virtual_ncidev_open+0x6c/0xd8 [ 43.126601][ T3143] misc_open+0x1b8/0x200 [ 43.127708][ T3143] chrdev_open+0x2b4/0x2e8 [ 43.128769][ T3143] do_dentry_open+0x364/0x748 [ 43.129900][ T3143] vfs_open+0x38/0x48 [ 43.130902][ T3143] path_openat+0xe34/0x11c4 [ 43.132016][ T3143] do_filp_open+0xdc/0x1b8 [ 43.133187][ T3143] do_sys_openat2+0xb8/0x22c [ 43.134408][ T3143] __arm64_sys_openat+0xb0/0xe0 [ 43.135639][ T3143] el0_svc_common+0x138/0x220 [ 43.136831][ T3143] do_el0_svc+0x48/0x164 [ 43.137905][ T3143] el0_svc+0x58/0x150 [ 43.138906][ T3143] el0t_64_sync_handler+0x84/0xf0 [ 43.140187][ T3143] el0t_64_sync+0x190/0x194 [ 43.141374][ T3143] [ 43.141374][ T3143] -> #1 (nci_mutex){+.+.}-{3:3}: [ 43.143027][ T3143] __mutex_lock_common+0xd4/0xca8 [ 43.144336][ T3143] mutex_lock_nested+0x38/0x44 [ 43.145429][ T3143] virtual_nci_close+0x28/0x58 [ 43.146638][ T3143] nci_open_device+0x414/0x518 [ 43.147873][ T3143] nci_dev_up+0x20/0x30 [ 43.149015][ T3143] nfc_dev_up+0xcc/0x1b0 [ 43.150085][ T3143] nfc_genl_dev_up+0x40/0x78 [ 43.151258][ T3143] genl_rcv_msg+0x458/0x4f4 [ 43.152450][ T3143] netlink_rcv_skb+0xe8/0x1d4 [ 43.153644][ T3143] genl_rcv+0x38/0x50 [ 43.154716][ T3143] netlink_unicast_kernel+0xfc/0x1dc [ 43.156011][ T3143] netlink_unicast+0x164/0x248 [ 43.157240][ T3143] netlink_sendmsg+0x484/0x584 [ 43.158421][ T3143] ____sys_sendmsg+0x2f8/0x440 [ 43.159611][ T3143] __sys_sendmsg+0x1ac/0x228 [ 43.161011][ T3143] __arm64_sys_sendmsg+0x2c/0x3c [ 43.162262][ T3143] el0_svc_common+0x138/0x220 [ 43.163365][ T3143] do_el0_svc+0x48/0x164 [ 43.164369][ T3143] el0_svc+0x58/0x150 [ 43.165378][ T3143] el0t_64_sync_handler+0x84/0xf0 [ 43.166673][ T3143] el0t_64_sync+0x190/0x194 [ 43.167805][ T3143] [ 43.167805][ T3143] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 43.169545][ T3143] __lock_acquire+0x1530/0x3084 [ 43.170536][ T3143] lock_acquire+0x100/0x1f8 [ 43.171439][ T3143] __mutex_lock_common+0xd4/0xca8 [ 43.172492][ T3143] mutex_lock_nested+0x38/0x44 [ 43.173463][ T3143] nci_set_local_general_bytes+0xbc/0x480 [ 43.174631][ T3143] nci_start_poll+0x1e8/0x474 [ 43.175855][ T3143] nfc_start_poll+0xfc/0x170 [ 43.177007][ T3143] nfc_genl_start_poll+0xd4/0x174 [ 43.178366][ T3143] genl_rcv_msg+0x458/0x4f4 [ 43.179552][ T3143] netlink_rcv_skb+0xe8/0x1d4 [ 43.180776][ T3143] genl_rcv+0x38/0x50 [ 43.181890][ T3143] netlink_unicast_kernel+0xfc/0x1dc [ 43.182938][ T3143] netlink_unicast+0x164/0x248 [ 43.183895][ T3143] netlink_sendmsg+0x484/0x584 [ 43.184842][ T3143] ____sys_sendmsg+0x2f8/0x440 [ 43.186073][ T3143] __sys_sendmsg+0x1ac/0x228 [ 43.187181][ T3143] __arm64_sys_sendmsg+0x2c/0x3c [ 43.188491][ T3143] el0_svc_common+0x138/0x220 [ 43.189717][ T3143] do_el0_svc+0x48/0x164 [ 43.190831][ T3143] el0_svc+0x58/0x150 [ 43.191965][ T3143] el0t_64_sync_handler+0x84/0xf0 [ 43.193233][ T3143] el0t_64_sync+0x190/0x194 [ 43.194405][ T3143] [ 43.194405][ T3143] other info that might help us debug this: [ 43.194405][ T3143] [ 43.196947][ T3143] Chain exists of: [ 43.196947][ T3143] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 43.196947][ T3143] [ 43.200390][ T3143] Possible unsafe locking scenario: [ 43.200390][ T3143] [ 43.202142][ T3143] CPU0 CPU1 [ 43.203355][ T3143] ---- ---- [ 43.204449][ T3143] lock(&genl_data->genl_data_mutex); [ 43.205695][ T3143] lock(nfc_devlist_mutex); [ 43.207347][ T3143] lock(&genl_data->genl_data_mutex); [ 43.209319][ T3143] lock(&ndev->req_lock); [ 43.210308][ T3143] [ 43.210308][ T3143] *** DEADLOCK *** [ 43.210308][ T3143] [ 43.212192][ T3143] 4 locks held by syz-executor173/3143: [ 43.213485][ T3143] #0: ffff80000d7b7aa8 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 43.215167][ T3143] #1: ffff80000d7b79b8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x80/0x4f4 [ 43.217251][ T3143] #2: ffff0000cae1dd18 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0xc4/0x174 [ 43.219439][ T3143] #3: ffff0000cae1d900 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x5c/0x170 [ 43.221147][ T3143] [ 43.221147][ T3143] stack backtrace: [ 43.222372][ T3143] CPU: 1 PID: 3143 Comm: syz-executor173 Not tainted 6.1.0-rc5-syzkaller-32254-g9e4ce762f0e7 #0 [ 43.224258][ T3143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 43.226529][ T3143] Call trace: [ 43.227244][ T3143] dump_backtrace+0x1c4/0x1f0 [ 43.228257][ T3143] show_stack+0x2c/0x54 [ 43.229209][ T3143] dump_stack_lvl+0x104/0x16c [ 43.230453][ T3143] dump_stack+0x1c/0x58 [ 43.231511][ T3143] print_circular_bug+0x2c4/0x2c8 [ 43.232635][ T3143] check_noncircular+0x14c/0x154 [ 43.233811][ T3143] __lock_acquire+0x1530/0x3084 [ 43.234919][ T3143] lock_acquire+0x100/0x1f8 [ 43.235931][ T3143] __mutex_lock_common+0xd4/0xca8 [ 43.237011][ T3143] mutex_lock_nested+0x38/0x44 [ 43.238103][ T3143] nci_set_local_general_bytes+0xbc/0x480 [ 43.239466][ T3143] nci_start_poll+0x1e8/0x474 [ 43.240519][ T3143] nfc_start_poll+0xfc/0x170 [ 43.241618][ T3143] nfc_genl_start_poll+0xd4/0x174 [ 43.242764][ T3143] genl_rcv_msg+0x458/0x4f4 [ 43.243873][ T3143] netlink_rcv_skb+0xe8/0x1d4 [ 43.245018][ T3143] genl_rcv+0x38/0x50 [ 43.245926][ T3143] netlink_unicast_kernel+0xfc/0x1dc [ 43.247189][ T3143] netlink_unicast+0x164/0x248 [ 43.248313][ T3143] netlink_sendmsg+0x484/0x584 [ 43.249562][ T3143] ____sys_sendmsg+0x2f8/0x440 [ 43.250644][ T3143] __sys_sendmsg+0x1ac/0x228 [ 43.251659][ T3143] __arm64_sys_sendmsg+0x2c/0x3c [ 43.252798][ T3143] el0_svc_common+0x138/0x220 [ 43.253920][ T3143] do_el0_svc+0x48/0x164 [ 43.254838][ T3143] el0_svc+0x58/0x150 [ 43.255749][ T3143] el0t_64_sync_handler+0x84/0xf0 [ 43.256864][ T3143] el0t_64_sync+0x190/0x194 [ 43.368760][ T3143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 43.370563][ T3143] nci: nci_start_poll: failed to set local general bytes [ 48.412704][ T3143] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 executing program [ 48.629495][ T3146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 executing program [ 48.846500][ T3156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 48.848552][ T3156] nci: nci_start_poll: failed to set local general bytes