Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 50.848460][ T7] [ 50.850825][ T7] ============================================ [ 50.856998][ T7] WARNING: possible recursive locking detected [ 50.863138][ T7] 5.15.158-syzkaller #0 Not tainted [ 50.868324][ T7] -------------------------------------------- [ 50.874482][ T7] kworker/0:0/7 is trying to acquire lock: [ 50.880285][ T7] ffff88802432ba68 (&htab->buckets[i].lock){+...}-{2:2}, at: sock_hash_delete_elem+0x177/0x400 [ 50.891010][ T7] [ 50.891010][ T7] but task is already holding lock: [ 50.898376][ T7] ffff88802432ba68 (&htab->buckets[i].lock){+...}-{2:2}, at: sock_hash_delete_elem+0x177/0x400 [ 50.908739][ T7] [ 50.908739][ T7] other info that might help us debug this: [ 50.916796][ T7] Possible unsafe locking scenario: [ 50.916796][ T7] [ 50.924255][ T7] CPU0 [ 50.927642][ T7] ---- [ 50.930914][ T7] lock(&htab->buckets[i].lock); [ 50.936116][ T7] lock(&htab->buckets[i].lock); [ 50.941156][ T7] [ 50.941156][ T7] *** DEADLOCK *** [ 50.941156][ T7] [ 50.949305][ T7] May be due to missing lock nesting notation [ 50.949305][ T7] [ 50.957621][ T7] 6 locks held by kworker/0:0/7: [ 50.962564][ T7] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 50.972928][ T7] #1: ffffc90000cc7d20 ((work_completion)(&(&psock->rwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 50.985035][ T7] #2: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 50.994367][ T7] #3: ffff88802432ba68 (&htab->buckets[i].lock){+...}-{2:2}, at: sock_hash_delete_elem+0x177/0x400 [ 51.005155][ T7] #4: ffff88814b126290 (&psock->link_lock){+...}-{2:2}, at: sock_map_unref+0xcc/0x5d0 [ 51.015005][ T7] #5: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 51.024333][ T7] [ 51.024333][ T7] stack backtrace: [ 51.030228][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted 5.15.158-syzkaller #0 [ 51.038210][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 51.048290][ T7] Workqueue: events sk_psock_destroy [ 51.053580][ T7] Call Trace: [ 51.056877][ T7] [ 51.059805][ T7] dump_stack_lvl+0x1e3/0x2d0 [ 51.064492][ T7] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 51.070144][ T7] ? panic+0x860/0x860 [ 51.074581][ T7] validate_chain+0x46d2/0x5930 [ 51.079473][ T7] ? arch_stack_walk+0x10d/0x140 [ 51.084427][ T7] ? reacquire_held_locks+0x660/0x660 [ 51.089803][ T7] ? check_noncircular+0x1e1/0x3b0 [ 51.094924][ T7] ? lockdep_unlock+0x166/0x300 [ 51.099864][ T7] ? lockdep_lock+0x2a0/0x2a0 [ 51.104542][ T7] ? add_chain_block+0x850/0x850 [ 51.109475][ T7] ? reacquire_held_locks+0x660/0x660 [ 51.115022][ T7] ? mark_lock+0x98/0x340 [ 51.119353][ T7] __lock_acquire+0x1295/0x1ff0 [ 51.124207][ T7] lock_acquire+0x1db/0x4f0 [ 51.128707][ T7] ? sock_hash_delete_elem+0x177/0x400 [ 51.134168][ T7] ? read_lock_is_recursive+0x10/0x10 [ 51.139539][ T7] ? sock_hash_delete_elem+0x177/0x400 [ 51.144998][ T7] ? __bpf_trace_softirq+0x10/0x10 [ 51.150112][ T7] ? sock_hash_delete_elem+0x177/0x400 [ 51.155633][ T7] _raw_spin_lock_bh+0x31/0x40 [ 51.160530][ T7] ? sock_hash_delete_elem+0x177/0x400 [ 51.165997][ T7] sock_hash_delete_elem+0x177/0x400 [ 51.171284][ T7] ? sock_hash_lookup+0x660/0x660 [ 51.176337][ T7] bpf_prog_2c29ac5cdc6b1842+0x3a/0xed8 [ 51.181901][ T7] bpf_trace_run2+0x19e/0x340 [ 51.186585][ T7] ? bpf_trace_run1+0x2f0/0x2f0 [ 51.191430][ T7] ? sock_map_unref+0x3ac/0x5d0 [ 51.196278][ T7] ? do_raw_spin_lock+0x14a/0x370 [ 51.201300][ T7] ? __bpf_trace_softirq+0x10/0x10 [ 51.206410][ T7] ? sock_map_unref+0x3ac/0x5d0 [ 51.211260][ T7] __bpf_trace_kfree+0x6e/0x90 [ 51.216026][ T7] ? sock_map_unref+0x3ac/0x5d0 [ 51.220876][ T7] kfree+0x22f/0x270 [ 51.224792][ T7] ? sock_map_unref+0xcc/0x5d0 [ 51.229564][ T7] sock_map_unref+0x3ac/0x5d0 [ 51.234317][ T7] sock_hash_delete_elem+0x388/0x400 [ 51.239606][ T7] ? sock_hash_lookup+0x660/0x660 [ 51.244642][ T7] bpf_prog_2c29ac5cdc6b1842+0x3a/0xed8 [ 51.250183][ T7] bpf_trace_run2+0x19e/0x340 [ 51.254860][ T7] ? bpf_trace_run1+0x2f0/0x2f0 [ 51.259706][ T7] ? security_sk_free+0x40/0x80 [ 51.264578][ T7] ? rcu_lock_release+0x5/0x20 [ 51.269374][ T7] ? __lock_acquire+0x1ff0/0x1ff0 [ 51.274397][ T7] ? security_sk_free+0x40/0x80 [ 51.279249][ T7] __bpf_trace_kfree+0x6e/0x90 [ 51.284013][ T7] ? security_sk_free+0x40/0x80 [ 51.288965][ T7] kfree+0x22f/0x270 [ 51.292867][ T7] security_sk_free+0x40/0x80 [ 51.297542][ T7] __sk_destruct+0x56a/0x840 [ 51.302132][ T7] sk_psock_destroy+0x48f/0x510 [ 51.306985][ T7] process_one_work+0x8a1/0x10c0 [ 51.311928][ T7] ? worker_detach_from_pool+0x260/0x260 [ 51.317563][ T7] ? _raw_spin_lock_irqsave+0x120/0x120 [ 51.323113][ T7] ? kthread_data+0x4e/0xc0 [ 51.327622][ T7] ? wq_worker_running+0x97/0x170 [ 51.332734][ T7] worker_thread+0xaca/0x1280 [ 51.337425][ T7] kthread+0x3f6/0x4f0 [ 51.341488][ T7] ? rcu_lock_release+0x20/0x20 [ 51.346355][ T7] ? kthread_blkcg+0xd0/0xd0 [ 51.351029][ T7] ret_from_fork+0x1f/0x30 [ 51.355477][ T7]