Warning: Permanently added '10.128.10.61' (ED25519) to the list of known hosts. executing program [ 51.937346][ T3547] [ 51.939693][ T3547] ====================================================== [ 51.946691][ T3547] WARNING: possible circular locking dependency detected [ 51.953684][ T3547] 6.1.90-syzkaller #0 Not tainted [ 51.958767][ T3547] ------------------------------------------------------ [ 51.965775][ T3547] syz-executor404/3547 is trying to acquire lock: [ 51.972163][ T3547] ffff888021742290 (&psock->link_lock){+...}-{2:2}, at: sock_map_update_common+0x31c/0x5b0 [ 51.982162][ T3547] [ 51.982162][ T3547] but task is already holding lock: [ 51.989501][ T3547] ffff88807d8f8240 (&stab->lock){+...}-{2:2}, at: sock_map_update_common+0x1b6/0x5b0 [ 51.998958][ T3547] [ 51.998958][ T3547] which lock already depends on the new lock. [ 51.998958][ T3547] [ 52.009339][ T3547] [ 52.009339][ T3547] the existing dependency chain (in reverse order) is: [ 52.018327][ T3547] [ 52.018327][ T3547] -> #1 (&stab->lock){+...}-{2:2}: [ 52.025599][ T3547] lock_acquire+0x1f8/0x5a0 [ 52.030604][ T3547] _raw_spin_lock_bh+0x31/0x40 [ 52.035896][ T3547] sock_map_delete_elem+0x161/0x230 [ 52.041597][ T3547] bpf_prog_330576d32f01b34b+0x5b/0x5f [ 52.047563][ T3547] bpf_trace_run2+0x1fd/0x410 [ 52.052746][ T3547] __bpf_trace_kfree+0x6e/0x90 [ 52.058006][ T3547] kfree+0xf6/0x190 [ 52.062329][ T3547] sock_map_unref+0x3ac/0x5d0 [ 52.067522][ T3547] sock_hash_update_common+0x911/0xa30 [ 52.073495][ T3547] sock_map_update_elem_sys+0x5a0/0x910 [ 52.079557][ T3547] map_update_elem+0x503/0x680 [ 52.084833][ T3547] __sys_bpf+0x337/0x6c0 [ 52.089583][ T3547] __x64_sys_bpf+0x78/0x90 [ 52.094503][ T3547] do_syscall_64+0x3b/0xb0 [ 52.099447][ T3547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.105844][ T3547] [ 52.105844][ T3547] -> #0 (&psock->link_lock){+...}-{2:2}: [ 52.113637][ T3547] validate_chain+0x1661/0x5950 [ 52.118991][ T3547] __lock_acquire+0x125b/0x1f80 [ 52.124362][ T3547] lock_acquire+0x1f8/0x5a0 [ 52.129369][ T3547] _raw_spin_lock_bh+0x31/0x40 [ 52.134638][ T3547] sock_map_update_common+0x31c/0x5b0 [ 52.140509][ T3547] sock_map_update_elem_sys+0x55b/0x910 [ 52.146584][ T3547] map_update_elem+0x503/0x680 [ 52.151866][ T3547] __sys_bpf+0x337/0x6c0 [ 52.156635][ T3547] __x64_sys_bpf+0x78/0x90 [ 52.161562][ T3547] do_syscall_64+0x3b/0xb0 [ 52.166483][ T3547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.172907][ T3547] [ 52.172907][ T3547] other info that might help us debug this: [ 52.172907][ T3547] [ 52.183118][ T3547] Possible unsafe locking scenario: [ 52.183118][ T3547] [ 52.190544][ T3547] CPU0 CPU1 [ 52.195886][ T3547] ---- ---- [ 52.201225][ T3547] lock(&stab->lock); [ 52.205276][ T3547] lock(&psock->link_lock); [ 52.212365][ T3547] lock(&stab->lock); [ 52.218929][ T3547] lock(&psock->link_lock); [ 52.223496][ T3547] [ 52.223496][ T3547] *** DEADLOCK *** [ 52.223496][ T3547] [ 52.231639][ T3547] 3 locks held by syz-executor404/3547: [ 52.237163][ T3547] #0: ffff88802a711930 (sk_lock-AF_UNIX){+.+.}-{0:0}, at: sock_map_update_elem_sys+0x1c8/0x910 [ 52.247584][ T3547] #1: ffffffff8d12ac80 (rcu_read_lock){....}-{1:2}, at: sock_map_update_elem_sys+0x1d4/0x910 [ 52.257827][ T3547] #2: ffff88807d8f8240 (&stab->lock){+...}-{2:2}, at: sock_map_update_common+0x1b6/0x5b0 [ 52.267721][ T3547] [ 52.267721][ T3547] stack backtrace: [ 52.273587][ T3547] CPU: 0 PID: 3547 Comm: syz-executor404 Not tainted 6.1.90-syzkaller #0 [ 52.281981][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 52.292023][ T3547] Call Trace: [ 52.295296][ T3547] [ 52.298230][ T3547] dump_stack_lvl+0x1e3/0x2cb [ 52.302893][ T3547] ? nf_tcp_handle_invalid+0x642/0x642 [ 52.308336][ T3547] ? print_circular_bug+0x12b/0x1a0 [ 52.313518][ T3547] check_noncircular+0x2fa/0x3b0 [ 52.318438][ T3547] ? add_chain_block+0x850/0x850 [ 52.323359][ T3547] ? lockdep_lock+0x11f/0x2a0 [ 52.328046][ T3547] ? _find_first_zero_bit+0xd0/0x100 [ 52.333311][ T3547] validate_chain+0x1661/0x5950 [ 52.338230][ T3547] ? reacquire_held_locks+0x660/0x660 [ 52.343590][ T3547] ? reacquire_held_locks+0x660/0x660 [ 52.348958][ T3547] ? mark_lock+0x29d/0x340 [ 52.353354][ T3547] ? mark_lock+0x9a/0x340 [ 52.357665][ T3547] ? look_up_lock_class+0x77/0x140 [ 52.362756][ T3547] ? register_lock_class+0x100/0x990 [ 52.368018][ T3547] ? is_dynamic_key+0x260/0x260 [ 52.372861][ T3547] ? mark_lock+0x9a/0x340 [ 52.377175][ T3547] __lock_acquire+0x125b/0x1f80 [ 52.382012][ T3547] lock_acquire+0x1f8/0x5a0 [ 52.386504][ T3547] ? sock_map_update_common+0x31c/0x5b0 [ 52.392048][ T3547] ? read_lock_is_recursive+0x10/0x10 [ 52.397422][ T3547] ? sock_map_update_common+0x31c/0x5b0 [ 52.402969][ T3547] ? __bpf_trace_softirq+0x10/0x10 [ 52.408080][ T3547] ? __rwlock_init+0x140/0x140 [ 52.412826][ T3547] ? sock_map_update_common+0x31c/0x5b0 [ 52.418371][ T3547] _raw_spin_lock_bh+0x31/0x40 [ 52.423134][ T3547] ? sock_map_update_common+0x31c/0x5b0 [ 52.428662][ T3547] sock_map_update_common+0x31c/0x5b0 [ 52.434022][ T3547] sock_map_update_elem_sys+0x55b/0x910 [ 52.439549][ T3547] ? sock_map_update_elem_sys+0x1d4/0x910 [ 52.445258][ T3547] ? sock_map_prog_detach+0x290/0x290 [ 52.450612][ T3547] ? bpf_map_update_value+0x14a/0x6f0 [ 52.455969][ T3547] map_update_elem+0x503/0x680 [ 52.460717][ T3547] __sys_bpf+0x337/0x6c0 [ 52.464945][ T3547] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 52.470305][ T3547] ? fd_install+0x57/0x540 [ 52.474703][ T3547] ? print_irqtrace_events+0x210/0x210 [ 52.480141][ T3547] ? print_irqtrace_events+0x210/0x210 [ 52.485582][ T3547] ? syscall_enter_from_user_mode+0x2e/0x230 [ 52.491538][ T3547] ? lockdep_hardirqs_on+0x94/0x130 [ 52.496726][ T3547] __x64_sys_bpf+0x78/0x90 [ 52.501126][ T3547] do_syscall_64+0x3b/0xb0 [ 52.505531][ T3547] ? clear_bhb_loop+0x45/0xa0 [ 52.510195][ T3547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.516067][ T3547] RIP: 0033:0x7fa89628eb69 [ 52.520459][ T3547] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.540041][ T3547] RSP: 002b:00007ffe19945fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.548490][ T3547] RAX: ffffffffffffffda RBX: 00007ffe19946198 RCX: 00007fa89628eb69 [ 52.556533][ T3547] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000002 [ 52.564552][ T3547] RBP: 00007fa896302610 R08: 00007ffe19946198 R09: 00007ffe19946198 [ 52.572553][ T3547] R10: 00007ffe19946198 R11: 0000000000000246 R12: 0000000000000001 [ 52.580525][ T3547] R13: 00007ffe19946188 R14: 0000000000000001 R15: 0000000000000001 [ 52.588498][ T354