program: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$inet6(0xa, 0x1, 0x100) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040081}, 0x24000040) (async) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1d9}]}) (async) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f0000000300), 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000012140100000000000000000008004b0013000000080001000000000008004f000000000008001500000000000800030001100000"], 0x38}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) [ 71.378941][ T4661] Bluetooth: hci0: command tx timeout [ 71.384324][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.386796][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.460363][ T5315] wlan0 speed is unknown, defaulting to 1000 [ 71.462753][ T5315] wlan0 speed is unknown, defaulting to 1000 [ 71.466227][ T5315] wlan0 speed is unknown, defaulting to 1000 [ 71.482244][ T5315] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.487326][ T5315] [ 71.488310][ T5315] ====================================================== [ 71.490917][ T5315] WARNING: possible circular locking dependency detected [ 71.493628][ T5315] 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 Not tainted [ 71.496316][ T5315] ------------------------------------------------------ [ 71.499130][ T5315] syz.0.0/5315 is trying to acquire lock: [ 71.501249][ T5315] ffff88803f735358 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sock_set_reuseaddr+0x17/0x60 [ 71.505241][ T5315] [ 71.505241][ T5315] but task is already holding lock: [ 71.508344][ T5315] ffffffff8fa48c88 (lock#8){+.+.}-{4:4}, at: cma_add_one+0x6bc/0xcd0 [ 71.511412][ T5315] [ 71.511412][ T5315] which lock already depends on the new lock. [ 71.511412][ T5315] [ 71.515217][ T5315] [ 71.515217][ T5315] the existing dependency chain (in reverse order) is: [ 71.518616][ T5315] [ 71.518616][ T5315] -> #2 (lock#8){+.+.}-{4:4}: [ 71.521195][ T5315] lock_acquire+0x1ed/0x550 [ 71.523101][ T5315] __mutex_lock+0x1ac/0xee0 [ 71.525023][ T5315] cma_init+0x1e/0x140 [ 71.526833][ T5315] do_one_initcall+0x248/0x870 [ 71.528904][ T5315] do_initcall_level+0x157/0x210 [ 71.530938][ T5315] do_initcalls+0x3f/0x80 [ 71.532747][ T5315] kernel_init_freeable+0x435/0x5d0 [ 71.534864][ T5315] kernel_init+0x1d/0x2b0 [ 71.536665][ T5315] ret_from_fork+0x4b/0x80 [ 71.538564][ T5315] ret_from_fork_asm+0x1a/0x30 [ 71.540543][ T5315] [ 71.540543][ T5315] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 71.543144][ T5315] lock_acquire+0x1ed/0x550 [ 71.545019][ T5315] __mutex_lock+0x1ac/0xee0 [ 71.546950][ T5315] smc_vlan_by_tcpsk+0x399/0x4e0 [ 71.548994][ T5315] __smc_connect+0x292/0x1850 [ 71.550916][ T5315] smc_connect+0x868/0xde0 [ 71.552930][ T5315] __sys_connect+0x288/0x2d0 [ 71.554880][ T5315] __x64_sys_connect+0x7a/0x90 [ 71.557024][ T5315] do_syscall_64+0xf3/0x230 [ 71.558917][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.561348][ T5315] [ 71.561348][ T5315] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 71.564186][ T5315] validate_chain+0x18ef/0x5920 [ 71.566348][ T5315] __lock_acquire+0x1397/0x2100 [ 71.568444][ T5315] lock_acquire+0x1ed/0x550 [ 71.570289][ T5315] lock_sock_nested+0x48/0x100 [ 71.572354][ T5315] sock_set_reuseaddr+0x17/0x60 [ 71.574391][ T5315] siw_create_listen+0x19d/0x11d0 [ 71.576582][ T5315] iw_cm_listen+0x15e/0x230 [ 71.578504][ T5315] rdma_listen+0x941/0xd60 [ 71.580379][ T5315] cma_listen_on_dev+0x3e3/0x6f0 [ 71.582366][ T5315] cma_add_one+0x7d7/0xcd0 [ 71.584227][ T5315] add_client_context+0x536/0x8b0 [ 71.586191][ T5315] enable_device_and_get+0x1e6/0x440 [ 71.588339][ T5315] ib_register_device+0x10d4/0x13e0 [ 71.590510][ T5315] siw_newlink+0x905/0xd60 [ 71.592543][ T5315] nldev_newlink+0x5c0/0x640 [ 71.594714][ T5315] rdma_nl_rcv+0x6dd/0x9e0 [ 71.597023][ T5315] netlink_unicast+0x7f6/0x990 [ 71.599140][ T5315] netlink_sendmsg+0x8e4/0xcb0 [ 71.601175][ T5315] __sock_sendmsg+0x221/0x270 [ 71.603182][ T5315] ____sys_sendmsg+0x52a/0x7e0 [ 71.605251][ T5315] __sys_sendmsg+0x269/0x350 [ 71.607199][ T5315] do_syscall_64+0xf3/0x230 [ 71.609127][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.611498][ T5315] [ 71.611498][ T5315] other info that might help us debug this: [ 71.611498][ T5315] [ 71.615334][ T5315] Chain exists of: [ 71.615334][ T5315] sk_lock-AF_INET6 --> rtnl_mutex --> lock#8 [ 71.615334][ T5315] [ 71.619938][ T5315] Possible unsafe locking scenario: [ 71.619938][ T5315] [ 71.622681][ T5315] CPU0 CPU1 [ 71.624635][ T5315] ---- ---- [ 71.626404][ T5315] lock(lock#8); [ 71.627769][ T5315] lock(rtnl_mutex); [ 71.630347][ T5315] lock(lock#8); [ 71.632632][ T5315] lock(sk_lock-AF_INET6); [ 71.634388][ T5315] [ 71.634388][ T5315] *** DEADLOCK *** [ 71.634388][ T5315] [ 71.637564][ T5315] 6 locks held by syz.0.0/5315: [ 71.639390][ T5315] #0: ffffffff9a76a1d8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32d/0x9e0 [ 71.643054][ T5315] #1: ffffffff8fa34e50 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42a/0x640 [ 71.646728][ T5315] #2: ffffffff8fa27bf0 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0x12e/0x440 [ 71.650717][ T5315] #3: ffffffff8fa27ef0 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x196/0x440 [ 71.654646][ T5315] #4: ffff888011e745d8 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x4f4/0x8b0 [ 71.658594][ T5315] #5: ffffffff8fa48c88 (lock#8){+.+.}-{4:4}, at: cma_add_one+0x6bc/0xcd0 [ 71.661720][ T5315] [ 71.661720][ T5315] stack backtrace: [ 71.663970][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 71.667752][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.671751][ T5315] Call Trace: [ 71.672948][ T5315] [ 71.674046][ T5315] dump_stack_lvl+0x241/0x360 [ 71.675801][ T5315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.677834][ T5315] ? __pfx__printk+0x10/0x10 [ 71.679562][ T5315] print_circular_bug+0x13a/0x1b0 [ 71.681514][ T5315] check_noncircular+0x36a/0x4a0 [ 71.683411][ T5315] ? __pfx_check_noncircular+0x10/0x10 [ 71.685462][ T5315] ? lockdep_lock+0x123/0x2b0 [ 71.687149][ T5315] validate_chain+0x18ef/0x5920 [ 71.689010][ T5315] ? __pfx_validate_chain+0x10/0x10 [ 71.691005][ T5315] ? mark_lock+0x9a/0x360 [ 71.692678][ T5315] ? __lock_acquire+0x1397/0x2100 [ 71.694636][ T5315] ? look_up_lock_class+0x77/0x170 [ 71.696530][ T5315] ? register_lock_class+0x102/0x980 [ 71.698512][ T5315] ? __pfx_register_lock_class+0x10/0x10 [ 71.700406][ T5315] ? mark_lock+0x9a/0x360 [ 71.701969][ T5315] __lock_acquire+0x1397/0x2100 [ 71.703856][ T5315] ? lockdep_init_map_type+0xa1/0x910 [ 71.705900][ T5315] lock_acquire+0x1ed/0x550 [ 71.708229][ T5315] ? sock_set_reuseaddr+0x17/0x60 [ 71.710591][ T5315] ? __pfx_lock_acquire+0x10/0x10 [ 71.712816][ T5315] ? tcp_init_sock+0x604/0x950 [ 71.715026][ T5315] ? apparmor_socket_post_create+0x2b7/0x2e0 [ 71.717574][ T5315] ? bpf_lsm_socket_post_create+0x9/0x10 [ 71.719702][ T5315] lock_sock_nested+0x48/0x100 [ 71.721559][ T5315] ? sock_set_reuseaddr+0x17/0x60 [ 71.723401][ T5315] sock_set_reuseaddr+0x17/0x60 [ 71.725235][ T5315] siw_create_listen+0x19d/0x11d0 [ 71.727131][ T5315] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 71.729454][ T5315] ? __pfx_siw_create_listen+0x10/0x10 [ 71.731532][ T5315] iw_cm_listen+0x15e/0x230 [ 71.733238][ T5315] rdma_listen+0x941/0xd60 [ 71.734951][ T5315] ? __pfx_rdma_listen+0x10/0x10 [ 71.737016][ T5315] ? rdma_restrack_add+0x288/0x7b0 [ 71.738991][ T5315] ? _cma_attach_to_dev+0x295/0x490 [ 71.741343][ T5315] cma_listen_on_dev+0x3e3/0x6f0 [ 71.743314][ T5315] cma_add_one+0x7d7/0xcd0 [ 71.745055][ T5315] ? __pfx_cma_add_one+0x10/0x10 [ 71.746887][ T5315] ? _raw_spin_unlock+0x28/0x50 [ 71.748810][ T5315] add_client_context+0x536/0x8b0 [ 71.750768][ T5315] ? __pfx_add_client_context+0x10/0x10 [ 71.752924][ T5315] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 71.755107][ T5315] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 71.757452][ T5315] enable_device_and_get+0x1e6/0x440 [ 71.759456][ T5315] ? __pfx_enable_device_and_get+0x10/0x10 [ 71.761732][ T5315] ? device_add+0x460/0xbf0 [ 71.763786][ T5315] ib_register_device+0x10d4/0x13e0 [ 71.765959][ T5315] ? __pfx_ib_register_device+0x10/0x10 [ 71.768265][ T5315] ? xa_load+0x2dd/0x350 [ 71.769870][ T5315] ? xa_load+0x147/0x350 [ 71.771564][ T5315] ? __asan_memset+0x23/0x50 [ 71.773360][ T5315] ? lockdep_init_map_type+0xa1/0x910 [ 71.775428][ T5315] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 71.777682][ T5315] ? ib_device_set_netdev+0x5b6/0x6b0 [ 71.779807][ T5315] ? __raw_spin_lock_init+0x45/0x100 [ 71.781789][ T5315] siw_newlink+0x905/0xd60 [ 71.783498][ T5315] nldev_newlink+0x5c0/0x640 [ 71.785321][ T5315] ? __pfx_nldev_newlink+0x10/0x10 [ 71.787324][ T5315] ? __pfx_aa_get_newest_label+0x10/0x10 [ 71.789552][ T5315] ? __pfx_aa_get_newest_label+0x10/0x10 [ 71.791737][ T5315] ? bpf_lsm_capable+0x9/0x10 [ 71.793557][ T5315] ? security_capable+0x7e/0x2d0 [ 71.795462][ T5315] ? __pfx_nldev_newlink+0x10/0x10 [ 71.797588][ T5315] rdma_nl_rcv+0x6dd/0x9e0 [ 71.799287][ T5315] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 71.801151][ T5315] ? netlink_deliver_tap+0x2e/0x1b0 [ 71.803265][ T5315] netlink_unicast+0x7f6/0x990 [ 71.805192][ T5315] ? __pfx_netlink_unicast+0x10/0x10 [ 71.807193][ T5315] ? __virt_addr_valid+0x45f/0x530 [ 71.809160][ T5315] ? __phys_addr_symbol+0x2f/0x70 [ 71.811054][ T5315] ? __check_object_size+0x47a/0x730 [ 71.813083][ T5315] netlink_sendmsg+0x8e4/0xcb0 [ 71.814847][ T5315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.817019][ T5315] ? aa_sock_msg_perm+0x91/0x160 [ 71.819124][ T5315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.821062][ T5315] __sock_sendmsg+0x221/0x270 [ 71.823144][ T5315] ____sys_sendmsg+0x52a/0x7e0 [ 71.824988][ T5315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.827011][ T5315] ? __fget_files+0x2a/0x410 [ 71.828945][ T5315] ? __fget_files+0x2a/0x410 [ 71.830860][ T5315] __sys_sendmsg+0x269/0x350 [ 71.832709][ T5315] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.834651][ T5315] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.837373][ T5315] ? do_syscall_64+0x100/0x230 [ 71.839192][ T5315] ? do_syscall_64+0xb6/0x230 [ 71.841052][ T5315] do_syscall_64+0xf3/0x230 [ 71.842795][ T5315] ? clear_bhb_loop+0x35/0x90 [ 71.844631][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.846925][ T5315] RIP: 0033:0x7f405a785d29 [ 71.848657][ T5315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.856041][ T5315] RSP: 002b:00007f405b556038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.859914][ T5315] RAX: ffffffffffffffda RBX: 00007f405a975fa0 RCX: 00007f405a785d29 [ 71.863260][ T5315] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 71.866499][ T5315] RBP: 00007f405a801b08 R08: 0000000000000000 R09: 0000000000000000 [ 71.869635][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.872703][ T5315] R13: 0000000000000000 R14: 00007f405a975fa0 R15: 00007fff77f89028 [ 71.875868][ T5315] [ 71.892866][ T5315] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 71.910069][ T5315] wlan0 speed is unknown, defaulting to 1000