Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. executing program [ 37.088815][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 37.094711][ T4290] [ 37.095222][ T4290] ====================================================== [ 37.096593][ T4290] WARNING: possible circular locking dependency detected [ 37.097967][ T4290] 6.1.124-syzkaller #0 Not tainted [ 37.098974][ T4290] ------------------------------------------------------ [ 37.100416][ T4290] syz-executor171/4290 is trying to acquire lock: [ 37.101815][ T4290] ffff0000d9c91450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 37.104179][ T4290] [ 37.104179][ T4290] but task is already holding lock: [ 37.105677][ T4290] ffff0000d9c90130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x528 [ 37.107533][ T4290] [ 37.107533][ T4290] which lock already depends on the new lock. [ 37.107533][ T4290] [ 37.109672][ T4290] [ 37.109672][ T4290] the existing dependency chain (in reverse order) is: [ 37.111714][ T4290] [ 37.111714][ T4290] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 37.113367][ T4290] lock_sock_nested+0x78/0x138 [ 37.114525][ T4290] smc_listen_out+0x114/0x3c4 [ 37.115593][ T4290] smc_listen_work+0x1e4/0x1038 [ 37.116770][ T4290] process_one_work+0x7ac/0x1404 [ 37.117883][ T4290] worker_thread+0x8e4/0xfec [ 37.119006][ T4290] kthread+0x250/0x2d8 [ 37.119934][ T4290] ret_from_fork+0x10/0x20 [ 37.120965][ T4290] [ 37.120965][ T4290] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 37.123065][ T4290] __lock_acquire+0x3338/0x7680 [ 37.124210][ T4290] lock_acquire+0x26c/0x7cc [ 37.125222][ T4290] __flush_work+0xf8/0x1c0 [ 37.126217][ T4290] __cancel_work_timer+0x3ec/0x548 [ 37.127374][ T4290] cancel_work_sync+0x24/0x38 [ 37.128477][ T4290] smc_clcsock_release+0x64/0xec [ 37.129638][ T4290] __smc_release+0x55c/0x700 [ 37.130662][ T4290] smc_close_non_accepted+0xd8/0x260 [ 37.131819][ T4290] smc_close_active+0x9bc/0xd20 [ 37.132875][ T4290] __smc_release+0xa0/0x700 [ 37.133918][ T4290] smc_release+0x260/0x528 [ 37.134962][ T4290] sock_close+0xb8/0x1fc [ 37.135965][ T4290] __fput+0x1c8/0x7c8 [ 37.136887][ T4290] ____fput+0x20/0x30 [ 37.137826][ T4290] task_work_run+0x240/0x2f0 [ 37.138943][ T4290] do_exit+0x550/0x1a84 [ 37.139998][ T4290] do_group_exit+0x194/0x22c [ 37.141114][ T4290] __wake_up_parent+0x0/0x60 [ 37.142140][ T4290] invoke_syscall+0x98/0x2bc [ 37.143233][ T4290] el0_svc_common+0x138/0x258 [ 37.144338][ T4290] do_el0_svc+0x58/0x13c [ 37.145413][ T4290] el0_svc+0x58/0x168 [ 37.146312][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 37.147491][ T4290] el0t_64_sync+0x18c/0x190 [ 37.148532][ T4290] [ 37.148532][ T4290] other info that might help us debug this: [ 37.148532][ T4290] [ 37.150594][ T4290] Possible unsafe locking scenario: [ 37.150594][ T4290] [ 37.152154][ T4290] CPU0 CPU1 [ 37.153231][ T4290] ---- ---- [ 37.154273][ T4290] lock(sk_lock-AF_SMC/1); [ 37.155244][ T4290] lock((work_completion)(&new_smc->smc_listen_work)); [ 37.157212][ T4290] lock(sk_lock-AF_SMC/1); [ 37.158660][ T4290] lock((work_completion)(&new_smc->smc_listen_work)); [ 37.160104][ T4290] [ 37.160104][ T4290] *** DEADLOCK *** [ 37.160104][ T4290] [ 37.161795][ T4290] 2 locks held by syz-executor171/4290: [ 37.162958][ T4290] #0: ffff0000e1bf3810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x80/0x1fc [ 37.165144][ T4290] #1: ffff0000d9c90130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x528 [ 37.167131][ T4290] [ 37.167131][ T4290] stack backtrace: [ 37.168442][ T4290] CPU: 0 PID: 4290 Comm: syz-executor171 Not tainted 6.1.124-syzkaller #0 [ 37.170158][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 37.172335][ T4290] Call trace: [ 37.173049][ T4290] dump_backtrace+0x1c8/0x1f4 [ 37.174013][ T4290] show_stack+0x2c/0x3c [ 37.174860][ T4290] dump_stack_lvl+0x108/0x170 [ 37.175793][ T4290] dump_stack+0x1c/0x5c [ 37.176752][ T4290] print_circular_bug+0x150/0x1b8 [ 37.177881][ T4290] check_noncircular+0x2cc/0x378 [ 37.178962][ T4290] __lock_acquire+0x3338/0x7680 [ 37.179963][ T4290] lock_acquire+0x26c/0x7cc [ 37.180875][ T4290] __flush_work+0xf8/0x1c0 [ 37.181832][ T4290] __cancel_work_timer+0x3ec/0x548 [ 37.182863][ T4290] cancel_work_sync+0x24/0x38 [ 37.183923][ T4290] smc_clcsock_release+0x64/0xec [ 37.184968][ T4290] __smc_release+0x55c/0x700 [ 37.185930][ T4290] smc_close_non_accepted+0xd8/0x260 [ 37.187034][ T4290] smc_close_active+0x9bc/0xd20 [ 37.188029][ T4290] __smc_release+0xa0/0x700 [ 37.188973][ T4290] smc_release+0x260/0x528 [ 37.189894][ T4290] sock_close+0xb8/0x1fc [ 37.190847][ T4290] __fput+0x1c8/0x7c8 [ 37.191654][ T4290] ____fput+0x20/0x30 [ 37.192641][ T4290] task_work_run+0x240/0x2f0 [ 37.193647][ T4290] do_exit+0x550/0x1a84 [ 37.194479][ T4290] do_group_exit+0x194/0x22c [ 37.195410][ T4290] __wake_up_parent+0x0/0x60 [ 37.196390][ T4290] invoke_syscall+0x98/0x2bc [ 37.197490][ T4290] el0_svc_common+0x138/0x258 [ 37.198576][ T4290] do_el0_svc+0x58/0x13c [ 37.199522][ T4290] el0_svc+0x58/0x168 [ 37.200435][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 37.201538][ T4290] el0t_64_sync+0x18c/0x190