Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. executing program [ 67.033855][ T4162] [ 67.036203][ T4162] ====================================================== [ 67.043343][ T4162] WARNING: possible circular locking dependency detected [ 67.050355][ T4162] 5.15.175-syzkaller #0 Not tainted [ 67.055549][ T4162] ------------------------------------------------------ [ 67.062565][ T4162] syz-executor342/4162 is trying to acquire lock: [ 67.068972][ T4162] ffff88802a8b8120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf6a/0x1cb0 [ 67.078566][ T4162] [ 67.078566][ T4162] but task is already holding lock: [ 67.086000][ T4162] ffffc900018751a8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x869/0x1330 [ 67.095683][ T4162] [ 67.095683][ T4162] which lock already depends on the new lock. [ 67.095683][ T4162] [ 67.106079][ T4162] [ 67.106079][ T4162] the existing dependency chain (in reverse order) is: [ 67.115084][ T4162] [ 67.115084][ T4162] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 67.122981][ T4162] lock_acquire+0x1db/0x4f0 [ 67.128000][ T4162] _raw_spin_lock+0x2a/0x40 [ 67.133018][ T4162] __inet_hash+0xe4/0x8e0 [ 67.137945][ T4162] inet_csk_listen_start+0x231/0x310 [ 67.143741][ T4162] inet_listen+0x2c9/0x7c0 [ 67.148670][ T4162] __sys_listen+0x1a7/0x220 [ 67.153701][ T4162] __x64_sys_listen+0x56/0x60 [ 67.158976][ T4162] do_syscall_64+0x3b/0xb0 [ 67.163907][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.170311][ T4162] [ 67.170311][ T4162] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 67.178026][ T4162] validate_chain+0x1649/0x5930 [ 67.183388][ T4162] __lock_acquire+0x1295/0x1ff0 [ 67.188758][ T4162] lock_acquire+0x1db/0x4f0 [ 67.193769][ T4162] mptcp_diag_get_info+0x276/0xa10 [ 67.199390][ T4162] inet_sk_diag_fill+0xf6a/0x1cb0 [ 67.204923][ T4162] mptcp_diag_dump+0xd1d/0x1330 [ 67.210280][ T4162] __inet_diag_dump+0x20e/0x3a0 [ 67.215637][ T4162] netlink_dump+0x5a4/0xca0 [ 67.220650][ T4162] __netlink_dump_start+0x50f/0x6d0 [ 67.226361][ T4162] inet_diag_handler_cmd+0x1d7/0x2a0 [ 67.232164][ T4162] sock_diag_rcv_msg+0xd5/0x400 [ 67.237529][ T4162] netlink_rcv_skb+0x1cf/0x410 [ 67.242808][ T4162] sock_diag_rcv+0x26/0x40 [ 67.247746][ T4162] netlink_unicast+0x7b6/0x980 [ 67.253889][ T4162] netlink_sendmsg+0xa30/0xd60 [ 67.259261][ T4162] sock_write_iter+0x39b/0x530 [ 67.264534][ T4162] do_iter_readv_writev+0x594/0x7a0 [ 67.270241][ T4162] do_iter_write+0x1e6/0x760 [ 67.275341][ T4162] do_writev+0x281/0x470 [ 67.280094][ T4162] do_syscall_64+0x3b/0xb0 [ 67.285126][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.291532][ T4162] [ 67.291532][ T4162] other info that might help us debug this: [ 67.291532][ T4162] [ 67.301832][ T4162] Possible unsafe locking scenario: [ 67.301832][ T4162] [ 67.309266][ T4162] CPU0 CPU1 [ 67.314624][ T4162] ---- ---- [ 67.319999][ T4162] lock(&h->lhash2[i].lock); [ 67.324837][ T4162] lock(sk_lock-AF_INET6); [ 67.331847][ T4162] lock(&h->lhash2[i].lock); [ 67.339031][ T4162] lock(sk_lock-AF_INET6); [ 67.343543][ T4162] [ 67.343543][ T4162] *** DEADLOCK *** [ 67.343543][ T4162] [ 67.351668][ T4162] 6 locks held by syz-executor342/4162: [ 67.357196][ T4162] #0: ffffffff8dc4b748 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 67.366606][ T4162] #1: ffffffff8dc4b5a8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x206/0x400 [ 67.376950][ T4162] #2: ffff88814c582690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6d0 [ 67.387655][ T4162] #3: ffffffff8dd27f28 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x191/0x3a0 [ 67.398037][ T4162] #4: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 67.407441][ T4162] #5: ffffc900018751a8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x869/0x1330 [ 67.417438][ T4162] [ 67.417438][ T4162] stack backtrace: [ 67.423330][ T4162] CPU: 1 PID: 4162 Comm: syz-executor342 Not tainted 5.15.175-syzkaller #0 [ 67.432101][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.442422][ T4162] Call Trace: [ 67.445700][ T4162] [ 67.448727][ T4162] dump_stack_lvl+0x1e3/0x2d0 [ 67.453400][ T4162] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 67.459029][ T4162] ? print_circular_bug+0x12b/0x1a0 [ 67.464245][ T4162] check_noncircular+0x2f8/0x3b0 [ 67.469219][ T4162] ? add_chain_block+0x850/0x850 [ 67.474154][ T4162] ? lockdep_lock+0x11f/0x2a0 [ 67.478824][ T4162] validate_chain+0x1649/0x5930 [ 67.483691][ T4162] ? __kernel_text_address+0x94/0x100 [ 67.489083][ T4162] ? reacquire_held_locks+0x660/0x660 [ 67.494468][ T4162] ? is_dynamic_key+0x1f0/0x1f0 [ 67.499448][ T4162] ? mark_lock+0x98/0x340 [ 67.503779][ T4162] ? reacquire_held_locks+0x660/0x660 [ 67.509166][ T4162] ? __lock_acquire+0x1295/0x1ff0 [ 67.514191][ T4162] ? mark_lock+0x98/0x340 [ 67.518521][ T4162] __lock_acquire+0x1295/0x1ff0 [ 67.523394][ T4162] lock_acquire+0x1db/0x4f0 [ 67.527890][ T4162] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 67.533089][ T4162] ? read_lock_is_recursive+0x10/0x10 [ 67.538477][ T4162] mptcp_diag_get_info+0x276/0xa10 [ 67.543706][ T4162] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 67.548932][ T4162] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 67.554148][ T4162] ? mptcp_diag_dump_one+0x280/0x280 [ 67.559454][ T4162] ? memset+0x1f/0x40 [ 67.563447][ T4162] inet_sk_diag_fill+0xf6a/0x1cb0 [ 67.568479][ T4162] ? inet_diag_msg_attrs_fill+0x9c0/0x9c0 [ 67.574199][ T4162] ? __might_sleep+0xc0/0xc0 [ 67.578784][ T4162] ? inet_diag_bc_sk+0x19d/0x10d0 [ 67.583809][ T4162] ? __rwlock_init+0x140/0x140 [ 67.588568][ T4162] ? do_raw_spin_unlock+0x137/0x8b0 [ 67.593765][ T4162] mptcp_diag_dump+0xd1d/0x1330 [ 67.598700][ T4162] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 67.605372][ T4162] __inet_diag_dump+0x20e/0x3a0 [ 67.610227][ T4162] netlink_dump+0x5a4/0xca0 [ 67.614743][ T4162] ? netlink_lookup+0x1d0/0x1d0 [ 67.619588][ T4162] ? __inet_diag_dump_start+0x8a/0x990 [ 67.625130][ T4162] ? __inet_diag_dump_start+0x831/0x990 [ 67.630669][ T4162] __netlink_dump_start+0x50f/0x6d0 [ 67.635873][ T4162] inet_diag_handler_cmd+0x1d7/0x2a0 [ 67.641148][ T4162] ? sock_diag_rcv_msg+0x206/0x400 [ 67.646255][ T4162] ? rcu_lock_release+0x20/0x20 [ 67.651098][ T4162] ? inet_diag_handler_get_info+0xb70/0xb70 [ 67.657000][ T4162] ? inet_diag_dump_start+0x20/0x20 [ 67.662197][ T4162] ? inet_diag_dump+0x50/0x50 [ 67.666960][ T4162] ? rcu_lock_release+0x20/0x20 [ 67.671847][ T4162] ? rcu_lock_release+0x20/0x20 [ 67.676708][ T4162] sock_diag_rcv_msg+0xd5/0x400 [ 67.681563][ T4162] netlink_rcv_skb+0x1cf/0x410 [ 67.686507][ T4162] ? sock_diag_bind+0xa0/0xa0 [ 67.691175][ T4162] ? netlink_ack+0xb10/0xb10 [ 67.695763][ T4162] sock_diag_rcv+0x26/0x40 [ 67.700171][ T4162] netlink_unicast+0x7b6/0x980 [ 67.704930][ T4162] ? netlink_detachskb+0x90/0x90 [ 67.709881][ T4162] ? __virt_addr_valid+0x3bb/0x460 [ 67.715094][ T4162] ? 0xffffffff81000000 [ 67.719236][ T4162] ? __check_object_size+0x300/0x410 [ 67.724529][ T4162] ? bpf_lsm_netlink_send+0x5/0x10 [ 67.729645][ T4162] netlink_sendmsg+0xa30/0xd60 [ 67.734414][ T4162] ? netlink_getsockopt+0x5b0/0x5b0 [ 67.739612][ T4162] ? aa_sock_msg_perm+0x91/0x150 [ 67.744545][ T4162] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 67.749845][ T4162] ? security_socket_sendmsg+0x7d/0xa0 [ 67.755301][ T4162] ? netlink_getsockopt+0x5b0/0x5b0 [ 67.760494][ T4162] sock_write_iter+0x39b/0x530 [ 67.765280][ T4162] ? sock_read_iter+0x480/0x480 [ 67.770212][ T4162] ? __lock_acquire+0x1ff0/0x1ff0 [ 67.775224][ T4162] ? memset+0x1f/0x40 [ 67.779198][ T4162] do_iter_readv_writev+0x594/0x7a0 [ 67.784493][ T4162] ? generic_file_rw_checks+0x260/0x260 [ 67.790048][ T4162] ? common_file_perm+0x17d/0x1d0 [ 67.795072][ T4162] ? fsnotify_perm+0x64/0x590 [ 67.799742][ T4162] ? security_file_permission+0x75/0xa0 [ 67.805281][ T4162] do_iter_write+0x1e6/0x760 [ 67.809873][ T4162] ? import_iovec+0xe6/0x120 [ 67.814457][ T4162] do_writev+0x281/0x470 [ 67.818719][ T4162] ? do_readv+0x460/0x460 [ 67.823065][ T4162] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 67.829044][ T4162] ? vtime_user_exit+0x2d1/0x400 [ 67.833980][ T4162] ? syscall_enter_from_user_mode+0x2e/0x240 [ 67.839958][ T4162] ? lockdep_hardirqs_on+0x94/0x130 [ 67.845186][ T4162] ? syscall_enter_from_user_mode+0x2e/0x240 [ 67.851441][ T4162] do_syscall_64+0x3b/0xb0 [ 67.855989][ T4162] ? clear_bhb_loop+0x15/0x70 [ 67.860779][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.866678][ T4162] RIP: 0033:0x7fc28fe06429 [ 67.871103][ T4162] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 67.890739][ T4162] RSP: 002b:00007ffc7bf910d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 67.899151][ T4162] RAX: ffffffffffffffda RBX: 00007ffc7bf912a8 RCX: 00007fc28fe06429 [ 67.907126][ T4162] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000004 [ 67.915091][ T4162] RBP: 00007fc28fe79610 R08: 00007ffc7bf912a8 R09: 00007ffc7bf912a8 [ 67.923071][ T4162] R10: 00007ffc7bf912a8 R11: 0000000000000246 R12: 0000000000000001 [ 67.931051][ T4162] R13: 00007ffc7bf91298 R14: 0000000000000001 R15: 0000000000000001 [ 67.939044][ T4162] [ 67.942204][ T4162] BUG: sleeping function called from invalid context at net/core/sock.c:3282 [ 67.951018][ T4162] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4162, name: syz-executor342 [ 67.960508][ T4162] INFO: lockdep is turned off. [ 67.965255][ T4162] Preemption disabled at: [ 67.965263][ T4162] [<0000000000000000>] 0x0 [ 67.974056][ T4162] CPU: 1 PID: 4162 Comm: syz-executor342 Not tainted 5.15.175-syzkaller #0 [ 67.982633][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.992679][ T4162] Call Trace: [ 67.995949][ T4162] [ 67.998879][ T4162] dump_stack_lvl+0x1e3/0x2d0 [ 68.003564][ T4162] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 68.009185][ T4162] ? panic+0x860/0x860 [ 68.013251][ T4162] ___might_sleep+0x547/0x6a0 [ 68.018035][ T4162] ? __might_sleep+0xc0/0xc0 [ 68.022637][ T4162] __lock_sock_fast+0x2f/0xe0 [ 68.027349][ T4162] mptcp_diag_get_info+0x282/0xa10 [ 68.032458][ T4162] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 68.037655][ T4162] ? mptcp_diag_dump_one+0x280/0x280 [ 68.042929][ T4162] ? memset+0x1f/0x40 [ 68.047017][ T4162] inet_sk_diag_fill+0xf6a/0x1cb0 [ 68.052151][ T4162] ? inet_diag_msg_attrs_fill+0x9c0/0x9c0 [ 68.057878][ T4162] ? __might_sleep+0xc0/0xc0 [ 68.062468][ T4162] ? inet_diag_bc_sk+0x19d/0x10d0 [ 68.067485][ T4162] ? __rwlock_init+0x140/0x140 [ 68.072249][ T4162] ? do_raw_spin_unlock+0x137/0x8b0 [ 68.077440][ T4162] mptcp_diag_dump+0xd1d/0x1330 [ 68.082287][ T4162] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 68.088881][ T4162] __inet_diag_dump+0x20e/0x3a0 [ 68.093763][ T4162] netlink_dump+0x5a4/0xca0 [ 68.098265][ T4162] ? netlink_lookup+0x1d0/0x1d0 [ 68.103105][ T4162] ? __inet_diag_dump_start+0x8a/0x990 [ 68.108557][ T4162] ? __inet_diag_dump_start+0x831/0x990 [ 68.114169][ T4162] __netlink_dump_start+0x50f/0x6d0 [ 68.119388][ T4162] inet_diag_handler_cmd+0x1d7/0x2a0 [ 68.124762][ T4162] ? sock_diag_rcv_msg+0x206/0x400 [ 68.129868][ T4162] ? rcu_lock_release+0x20/0x20 [ 68.134735][ T4162] ? inet_diag_handler_get_info+0xb70/0xb70 [ 68.140625][ T4162] ? inet_diag_dump_start+0x20/0x20 [ 68.145816][ T4162] ? inet_diag_dump+0x50/0x50 [ 68.150488][ T4162] ? rcu_lock_release+0x20/0x20 [ 68.155354][ T4162] ? rcu_lock_release+0x20/0x20 [ 68.160197][ T4162] sock_diag_rcv_msg+0xd5/0x400 [ 68.165053][ T4162] netlink_rcv_skb+0x1cf/0x410 [ 68.169824][ T4162] ? sock_diag_bind+0xa0/0xa0 [ 68.174500][ T4162] ? netlink_ack+0xb10/0xb10 [ 68.179090][ T4162] sock_diag_rcv+0x26/0x40 [ 68.183502][ T4162] netlink_unicast+0x7b6/0x980 [ 68.188282][ T4162] ? netlink_detachskb+0x90/0x90 [ 68.193209][ T4162] ? __virt_addr_valid+0x3bb/0x460 [ 68.198310][ T4162] ? 0xffffffff81000000 [ 68.202449][ T4162] ? __check_object_size+0x300/0x410 [ 68.207725][ T4162] ? bpf_lsm_netlink_send+0x5/0x10 [ 68.212852][ T4162] netlink_sendmsg+0xa30/0xd60 [ 68.217658][ T4162] ? netlink_getsockopt+0x5b0/0x5b0 [ 68.222874][ T4162] ? aa_sock_msg_perm+0x91/0x150 [ 68.227809][ T4162] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 68.233092][ T4162] ? security_socket_sendmsg+0x7d/0xa0 [ 68.238554][ T4162] ? netlink_getsockopt+0x5b0/0x5b0 [ 68.243744][ T4162] sock_write_iter+0x39b/0x530 [ 68.248502][ T4162] ? sock_read_iter+0x480/0x480 [ 68.253372][ T4162] ? __lock_acquire+0x1ff0/0x1ff0 [ 68.258389][ T4162] ? memset+0x1f/0x40 [ 68.262381][ T4162] do_iter_readv_writev+0x594/0x7a0 [ 68.267592][ T4162] ? generic_file_rw_checks+0x260/0x260 [ 68.273133][ T4162] ? common_file_perm+0x17d/0x1d0 [ 68.278483][ T4162] ? fsnotify_perm+0x64/0x590 [ 68.283170][ T4162] ? security_file_permission+0x75/0xa0 [ 68.288735][ T4162] do_iter_write+0x1e6/0x760 [ 68.293326][ T4162] ? import_iovec+0xe6/0x120 [ 68.297963][ T4162] do_writev+0x281/0x470 [ 68.302221][ T4162] ? do_readv+0x460/0x460 [ 68.306555][ T4162] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 68.312550][ T4162] ? vtime_user_exit+0x2d1/0x400 [ 68.317493][ T4162] ? syscall_enter_from_user_mode+0x2e/0x240 [ 68.323464][ T4162] ? lockdep_hardirqs_on+0x94/0x130 [ 68.328744][ T4162] ? syscall_enter_from_user_mode+0x2e/0x240 [ 68.334716][ T4162] do_syscall_64+0x3b/0xb0 [ 68.339125][ T4162] ? clear_bhb_loop+0x15/0x70 [ 68.343791][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.349675][ T4162] RIP: 0033:0x7fc28fe06429 [ 68.354081][ T4162] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 68.373708][ T4162] RSP: 002b:00007ffc7bf910d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 68.382114][ T4162] RAX: ffffffffffffffda RBX: 00007ffc7bf912a8 RCX: 00007fc28fe06429