Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://38903 [ 31.942186][ T4341] cgroup: Unknown subsys name 'net' [ 32.190051][ T4341] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.440006][ T4341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.470114][ T4372] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.471800][ T4372] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.473190][ T4372] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.474878][ T4372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.476357][ T4372] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.478193][ T4372] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.596354][ T4376] chnl_net:caif_netlink_parms(): no params data found [ 38.612335][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.613674][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.615194][ T4376] device bridge_slave_0 entered promiscuous mode [ 38.617430][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.618682][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.620211][ T4376] device bridge_slave_1 entered promiscuous mode [ 38.626173][ T4376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.629145][ T4376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.635724][ T4376] team0: Port device team_slave_0 added [ 38.637388][ T4376] team0: Port device team_slave_1 added [ 38.643830][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.644908][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.649376][ T4376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.651747][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.652967][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.657167][ T4376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.719174][ T4376] device hsr_slave_0 entered promiscuous mode [ 38.737818][ T4376] device hsr_slave_1 entered promiscuous mode [ 38.810501][ T4376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.839855][ T4376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.869819][ T4376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.909719][ T4376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.955566][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.956894][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.958404][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.959485][ T4376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.975819][ T4376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.979663][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.982100][ T1582] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.984038][ T1582] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.985874][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 38.991030][ T4376] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.994357][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.995978][ T1582] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.997149][ T1582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.038929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.040590][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.041838][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.046988][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.048877][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.053571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.055262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.058539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.061029][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.110715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.112080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.115263][ T4376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.121298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.126971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.128868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.130252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.132544][ T4376] device veth0_vlan entered promiscuous mode [ 39.135630][ T4376] device veth1_vlan entered promiscuous mode [ 39.143444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.145085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.146701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.150229][ T4376] device veth0_macvtap entered promiscuous mode [ 39.153559][ T4376] device veth1_macvtap entered promiscuous mode [ 39.160639][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.161839][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.165222][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.168960][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.170256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.172734][ T4376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.174069][ T4376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.175427][ T4376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.176915][ T4376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.273300][ T1582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.274644][ T1582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.276742][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.285353][ T1582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.286794][ T1582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.288912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:40 executed programs: 0 [ 40.378241][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.379850][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.381278][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.382896][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.384618][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.386017][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.660721][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.698232][ T4439] chnl_net:caif_netlink_parms(): no params data found [ 40.712262][ T4439] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.713598][ T4439] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.715069][ T4439] device bridge_slave_0 entered promiscuous mode [ 40.716988][ T4439] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.718764][ T4439] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.720474][ T4439] device bridge_slave_1 entered promiscuous mode [ 40.726779][ T4439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.730286][ T4439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.736737][ T4439] team0: Port device team_slave_0 added [ 40.738930][ T4439] team0: Port device team_slave_1 added [ 40.743689][ T4439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.744741][ T4439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.749021][ T4439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.751380][ T4439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.752589][ T4439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.756745][ T4439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.808481][ T4439] device hsr_slave_0 entered promiscuous mode [ 40.847732][ T4439] device hsr_slave_1 entered promiscuous mode [ 40.887551][ T4439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.889047][ T4439] Cannot create hsr debugfs directory [ 42.417771][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 42.958451][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.487520][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 45.079102][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.159274][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.120320][ T4439] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.209251][ T4439] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.268440][ T4439] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.409308][ T4439] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.567613][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 46.568038][ T4439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.572106][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.573712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.576254][ T4439] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.610064][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.611747][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.613292][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.614508][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.615930][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.618867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.620417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.621898][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.623171][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.625560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.628425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.631832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.633677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.635417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.638837][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.640621][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.643035][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.644607][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.647001][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.650031][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.652336][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.745457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.746920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.750574][ T4439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.755872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.757745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.763746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.765333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.767116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.769351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.819402][ T4439] device veth0_vlan entered promiscuous mode [ 46.822505][ T4439] device veth1_vlan entered promiscuous mode [ 46.829467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.830956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.832378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.834051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.836331][ T4439] device veth0_macvtap entered promiscuous mode [ 46.838978][ T4439] device veth1_macvtap entered promiscuous mode [ 46.843165][ T4439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.844971][ T4439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.847101][ T4439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.848893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.850404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.851930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.853479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.856136][ T4439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.858692][ T4439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.860891][ T4439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.862207][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.863716][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.910369][ T4439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.911926][ T4439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.913407][ T4439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.914945][ T4439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.934096][ T1594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.935349][ T1594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.936721][ T1594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.938262][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.939732][ T1594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.941026][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.945445][ T9] device hsr_slave_0 left promiscuous mode [ 47.977966][ T9] device hsr_slave_1 left promiscuous mode [ 48.057560][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.058809][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.060393][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.061651][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.063102][ T9] device bridge_slave_1 left promiscuous mode [ 48.064387][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.108010][ T9] device bridge_slave_0 left promiscuous mode [ 48.109133][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.247681][ T9] device veth1_macvtap left promiscuous mode [ 48.248818][ T9] device veth0_macvtap left promiscuous mode [ 48.249911][ T9] device veth1_vlan left promiscuous mode [ 48.250958][ T9] device veth0_vlan left promiscuous mode [ 48.647601][ T4372] Bluetooth: hci0: command 0x0419 tx timeout [ 49.981139][ T4514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 49.982748][ T4514] nci: nci_start_poll: failed to set local general bytes [ 49.984796][ T4509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 49.986142][ T4509] [ 49.986534][ T4509] ====================================================== [ 49.987694][ T4509] WARNING: possible circular locking dependency detected [ 49.988896][ T4509] syzkaller #0 Not tainted [ 49.989649][ T4509] ------------------------------------------------------ [ 49.990959][ T4509] syz.0.17/4509 is trying to acquire lock: [ 49.991983][ T4509] ffff800016a1a408 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x28/0x58 [ 49.993551][ T4509] [ 49.993551][ T4509] but task is already holding lock: [ 49.994784][ T4509] ffff0000c4177350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0xe8/0x57c [ 49.996333][ T4509] [ 49.996333][ T4509] which lock already depends on the new lock. [ 49.996333][ T4509] [ 49.998092][ T4509] [ 49.998092][ T4509] the existing dependency chain (in reverse order) is: [ 49.999630][ T4509] [ 49.999630][ T4509] -> #3 (&ndev->req_lock){+.+.}-{3:3}: [ 50.000896][ T4509] __mutex_lock_common+0x1a0/0x1f3c [ 50.001851][ T4509] mutex_lock_nested+0x38/0x44 [ 50.002730][ T4509] nci_start_poll+0x424/0xaa0 [ 50.003594][ T4509] nfc_start_poll+0x124/0x284 [ 50.004466][ T4509] nfc_genl_start_poll+0x1b0/0x2f4 [ 50.005418][ T4509] genl_family_rcv_msg_doit+0x210/0x308 [ 50.006411][ T4509] genl_rcv_msg+0x424/0x600 [ 50.007219][ T4509] netlink_rcv_skb+0x220/0x3ec [ 50.008123][ T4509] genl_rcv+0x38/0x50 [ 50.008870][ T4509] netlink_unicast+0x5fc/0x80c [ 50.009749][ T4509] netlink_sendmsg+0x6f0/0x9d8 [ 50.010639][ T4509] ____sys_sendmsg+0x588/0x90c [ 50.011530][ T4509] __sys_sendmsg+0x288/0x374 [ 50.012418][ T4509] __arm64_sys_sendmsg+0x80/0x94 [ 50.013303][ T4509] invoke_syscall+0x98/0x290 [ 50.014207][ T4509] el0_svc_common+0x13c/0x258 [ 50.015083][ T4509] do_el0_svc+0x5c/0x134 [ 50.015868][ T4509] el0_svc+0x58/0x128 [ 50.016601][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 50.017496][ T4509] el0t_64_sync+0x18c/0x190 [ 50.018417][ T4509] [ 50.018417][ T4509] -> #2 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 50.019949][ T4509] __mutex_lock_common+0x1a0/0x1f3c [ 50.020910][ T4509] mutex_lock_nested+0x38/0x44 [ 50.021776][ T4509] nfc_urelease_event_work+0x108/0x2b8 [ 50.022776][ T4509] process_one_work+0x7e4/0x13bc [ 50.023696][ T4509] worker_thread+0x8cc/0xfe8 [ 50.024546][ T4509] kthread+0x254/0x2e0 [ 50.025282][ T4509] ret_from_fork+0x10/0x20 [ 50.026131][ T4509] [ 50.026131][ T4509] -> #1 (nfc_devlist_mutex){+.+.}-{3:3}: [ 50.027472][ T4509] __mutex_lock_common+0x1a0/0x1f3c [ 50.028394][ T4509] mutex_lock_nested+0x38/0x44 [ 50.029318][ T4509] nfc_register_device+0x48/0x300 [ 50.030276][ T4509] nci_register_device+0x6b8/0x7e4 [ 50.031147][ T4509] virtual_ncidev_open+0x6c/0xd8 [ 50.032002][ T4509] misc_open+0x310/0x388 [ 50.032767][ T4509] chrdev_open+0x3d0/0x51c [ 50.033543][ T4509] do_dentry_open+0x738/0xf8c [ 50.034483][ T4509] vfs_open+0x7c/0x90 [ 50.035286][ T4509] path_openat+0x1fc0/0x27a0 [ 50.036206][ T4509] do_filp_open+0x198/0x38c [ 50.037072][ T4509] do_sys_openat2+0x134/0x3fc [ 50.037968][ T4509] __arm64_sys_openat+0x11c/0x150 [ 50.038944][ T4509] invoke_syscall+0x98/0x290 [ 50.039787][ T4509] el0_svc_common+0x13c/0x258 [ 50.040645][ T4509] do_el0_svc+0x5c/0x134 [ 50.041485][ T4509] el0_svc+0x58/0x128 [ 50.042190][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 50.043129][ T4509] el0t_64_sync+0x18c/0x190 [ 50.044000][ T4509] [ 50.044000][ T4509] -> #0 (nci_mutex){+.+.}-{3:3}: [ 50.045239][ T4509] __lock_acquire+0x2808/0x6634 [ 50.046168][ T4509] lock_acquire+0x20c/0x638 [ 50.047036][ T4509] __mutex_lock_common+0x1a0/0x1f3c [ 50.048012][ T4509] mutex_lock_nested+0x38/0x44 [ 50.048978][ T4509] virtual_nci_close+0x28/0x58 [ 50.049899][ T4509] nci_close_device+0x2e4/0x57c [ 50.050799][ T4509] nci_unregister_device+0x78/0x258 [ 50.051735][ T4509] virtual_ncidev_close+0x70/0xb0 [ 50.052628][ T4509] __fput+0x1b4/0x7b0 [ 50.053341][ T4509] ____fput+0x20/0x30 [ 50.054090][ T4509] task_work_run+0x1f4/0x280 [ 50.054969][ T4509] do_notify_resume+0x20f8/0x2c84 [ 50.055896][ T4509] el0_svc+0x98/0x128 [ 50.056677][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 50.057624][ T4509] el0t_64_sync+0x18c/0x190 [ 50.058437][ T4509] [ 50.058437][ T4509] other info that might help us debug this: [ 50.058437][ T4509] [ 50.060109][ T4509] Chain exists of: [ 50.060109][ T4509] nci_mutex --> &genl_data->genl_data_mutex --> &ndev->req_lock [ 50.060109][ T4509] [ 50.062358][ T4509] Possible unsafe locking scenario: [ 50.062358][ T4509] [ 50.063618][ T4509] CPU0 CPU1 [ 50.064543][ T4509] ---- ---- [ 50.065475][ T4509] lock(&ndev->req_lock); [ 50.066214][ T4509] lock(&genl_data->genl_data_mutex); [ 50.067596][ T4509] lock(&ndev->req_lock); [ 50.068730][ T4509] lock(nci_mutex); [ 50.069426][ T4509] [ 50.069426][ T4509] *** DEADLOCK *** [ 50.069426][ T4509] [ 50.070792][ T4509] 1 lock held by syz.0.17/4509: [ 50.071587][ T4509] #0: ffff0000c4177350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0xe8/0x57c [ 50.073222][ T4509] [ 50.073222][ T4509] stack backtrace: [ 50.074200][ T4509] CPU: 0 PID: 4509 Comm: syz.0.17 Not tainted syzkaller #0 [ 50.075382][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 50.077057][ T4509] Call trace: [ 50.077591][ T4509] dump_backtrace+0x1c4/0x1f0 [ 50.078368][ T4509] show_stack+0x2c/0x3c [ 50.079062][ T4509] __dump_stack+0x30/0x40 [ 50.079786][ T4509] dump_stack_lvl+0xf4/0x15c [ 50.080569][ T4509] dump_stack+0x1c/0x5c [ 50.081255][ T4509] print_circular_bug+0x148/0x1b0 [ 50.082097][ T4509] check_noncircular+0x264/0x2f8 [ 50.082919][ T4509] __lock_acquire+0x2808/0x6634 [ 50.083704][ T4509] lock_acquire+0x20c/0x638 [ 50.084437][ T4509] __mutex_lock_common+0x1a0/0x1f3c [ 50.085284][ T4509] mutex_lock_nested+0x38/0x44 [ 50.086098][ T4509] virtual_nci_close+0x28/0x58 [ 50.086900][ T4509] nci_close_device+0x2e4/0x57c [ 50.087739][ T4509] nci_unregister_device+0x78/0x258 [ 50.088662][ T4509] virtual_ncidev_close+0x70/0xb0 [ 50.089550][ T4509] __fput+0x1b4/0x7b0 [ 50.090235][ T4509] ____fput+0x20/0x30 [ 50.090917][ T4509] task_work_run+0x1f4/0x280 [ 50.091670][ T4509] do_notify_resume+0x20f8/0x2c84 [ 50.092553][ T4509] el0_svc+0x98/0x128 [ 50.093208][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 50.094042][ T4509] el0t_64_sync+0x18c/0x190