Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. executing program [ 32.158177][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:50637. Sending cookies. [ 32.166541][ T6095] [ 32.167129][ T6095] ====================================================== [ 32.168597][ T6095] WARNING: possible circular locking dependency detected [ 32.170157][ T6095] 6.7.0-rc8-syzkaller-g0802e17d9aca #0 Not tainted [ 32.171614][ T6095] ------------------------------------------------------ [ 32.173118][ T6095] syz-executor306/6095 is trying to acquire lock: [ 32.174526][ T6095] ffff0000ce391450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 32.177066][ T6095] [ 32.177066][ T6095] but task is already holding lock: [ 32.178697][ T6095] ffff0000ce390130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x528 [ 32.180695][ T6095] [ 32.180695][ T6095] which lock already depends on the new lock. [ 32.180695][ T6095] [ 32.183079][ T6095] [ 32.183079][ T6095] the existing dependency chain (in reverse order) is: [ 32.185067][ T6095] [ 32.185067][ T6095] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 32.186725][ T6095] lock_sock_nested+0x5c/0x11c [ 32.187916][ T6095] smc_listen_out+0x10c/0x3bc [ 32.189002][ T6095] smc_listen_work+0x1e4/0xfc8 [ 32.190242][ T6095] process_one_work+0x694/0x1204 [ 32.191472][ T6095] worker_thread+0x938/0xef4 [ 32.192555][ T6095] kthread+0x288/0x310 [ 32.193617][ T6095] ret_from_fork+0x10/0x20 [ 32.194704][ T6095] [ 32.194704][ T6095] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 32.196935][ T6095] __lock_acquire+0x3384/0x763c [ 32.198118][ T6095] lock_acquire+0x23c/0x71c [ 32.199155][ T6095] __flush_work+0xf8/0x1c0 [ 32.200264][ T6095] __cancel_work_timer+0x3e4/0x540 [ 32.201544][ T6095] cancel_work_sync+0x24/0x38 [ 32.202672][ T6095] smc_clcsock_release+0x64/0xec [ 32.203916][ T6095] __smc_release+0x55c/0x700 [ 32.205032][ T6095] smc_close_non_accepted+0xd8/0x260 [ 32.206228][ T6095] smc_close_active+0x9bc/0xd20 [ 32.207492][ T6095] __smc_release+0xa0/0x700 [ 32.208685][ T6095] smc_release+0x260/0x528 [ 32.209789][ T6095] sock_close+0xa4/0x1e8 [ 32.210818][ T6095] __fput+0x308/0x8e4 [ 32.211877][ T6095] ____fput+0x20/0x30 [ 32.212944][ T6095] task_work_run+0x230/0x2e0 [ 32.214010][ T6095] do_exit+0x618/0x1f64 [ 32.215082][ T6095] do_group_exit+0x194/0x22c [ 32.216267][ T6095] pid_child_should_wake+0x0/0x1dc [ 32.217521][ T6095] invoke_syscall+0x98/0x2b8 [ 32.218534][ T6095] el0_svc_common+0x130/0x23c [ 32.219764][ T6095] do_el0_svc+0x48/0x58 [ 32.220783][ T6095] el0_svc+0x54/0x158 [ 32.221755][ T6095] el0t_64_sync_handler+0x84/0xfc [ 32.222922][ T6095] el0t_64_sync+0x190/0x194 [ 32.224052][ T6095] [ 32.224052][ T6095] other info that might help us debug this: [ 32.224052][ T6095] [ 32.226298][ T6095] Possible unsafe locking scenario: [ 32.226298][ T6095] [ 32.227937][ T6095] CPU0 CPU1 [ 32.229216][ T6095] ---- ---- [ 32.230421][ T6095] lock(sk_lock-AF_SMC/1); [ 32.231401][ T6095] lock((work_completion)(&new_smc->smc_listen_work)); [ 32.233590][ T6095] lock(sk_lock-AF_SMC/1); [ 32.235184][ T6095] lock((work_completion)(&new_smc->smc_listen_work)); [ 32.236760][ T6095] [ 32.236760][ T6095] *** DEADLOCK *** [ 32.236760][ T6095] [ 32.238600][ T6095] 2 locks held by syz-executor306/6095: [ 32.239930][ T6095] #0: ffff0000dbb5a010 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x80/0x1e8 [ 32.242174][ T6095] #1: ffff0000ce390130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x528 [ 32.244279][ T6095] [ 32.244279][ T6095] stack backtrace: [ 32.245563][ T6095] CPU: 0 PID: 6095 Comm: syz-executor306 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 32.247772][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 32.250058][ T6095] Call trace: [ 32.250797][ T6095] dump_backtrace+0x1b8/0x1e4 [ 32.251774][ T6095] show_stack+0x2c/0x3c [ 32.252694][ T6095] dump_stack_lvl+0xd0/0x124 [ 32.253686][ T6095] dump_stack+0x1c/0x28 [ 32.254546][ T6095] print_circular_bug+0x150/0x1b8 [ 32.255665][ T6095] check_noncircular+0x310/0x404 [ 32.256779][ T6095] __lock_acquire+0x3384/0x763c [ 32.257848][ T6095] lock_acquire+0x23c/0x71c [ 32.258867][ T6095] __flush_work+0xf8/0x1c0 [ 32.259767][ T6095] __cancel_work_timer+0x3e4/0x540 [ 32.260813][ T6095] cancel_work_sync+0x24/0x38 [ 32.261849][ T6095] smc_clcsock_release+0x64/0xec [ 32.263005][ T6095] __smc_release+0x55c/0x700 [ 32.264008][ T6095] smc_close_non_accepted+0xd8/0x260 [ 32.265127][ T6095] smc_close_active+0x9bc/0xd20 [ 32.266154][ T6095] __smc_release+0xa0/0x700 [ 32.267099][ T6095] smc_release+0x260/0x528 [ 32.268081][ T6095] sock_close+0xa4/0x1e8 [ 32.268945][ T6095] __fput+0x308/0x8e4 [ 32.269814][ T6095] ____fput+0x20/0x30 [ 32.270594][ T6095] task_work_run+0x230/0x2e0 [ 32.271686][ T6095] do_exit+0x618/0x1f64 [ 32.272612][ T6095] do_group_exit+0x194/0x22c [ 32.273685][ T6095] pid_child_should_wake+0x0/0x1dc [ 32.274862][ T6095] invoke_syscall+0x98/0x2b8 [ 32.275831][ T6095] el0_svc_common+0x130/0x23c [ 32.276890][ T6095] do_el0_svc+0x48/0x58 [ 32.277839][ T6095] el0_svc+0x54/0x158 [ 32.278726][ T6095] el0t_64_sync_handler+0x84/0xfc [ 32.279857][ T6095] el0t_64_sync+0x190/0x194