============================================ WARNING: possible recursive locking detected 6.14.0-syzkaller-g8582d9ab3efd #0 Not tainted -------------------------------------------- kworker/0:1/10 is trying to acquire lock: ffffc9001bc690d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20e/0x650 kernel/bpf/ringbuf.c:423 but task is already holding lock: ffffc9001b4d40d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20e/0x650 kernel/bpf/ringbuf.c:423 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&rb->spinlock); lock(&rb->spinlock); *** DEADLOCK *** May be due to missing lock nesting notation 9 locks held by kworker/0:1/10: #0: ffff88802f36a948 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff88802f36a948 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc900000f7c60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc900000f7c60 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88807d5fc6d0 (&peer->endpoint_lock){++-.}-{3:3}, at: wg_socket_send_skb_to_peer+0x5a/0x1d0 drivers/net/wireguard/socket.c:173 #3: ffffffff8ed3dfc0 (rcu_read_lock_bh){....}-{1:3}, at: local_bh_disable include/linux/bottom_half.h:20 [inline] #3: ffffffff8ed3dfc0 (rcu_read_lock_bh){....}-{1:3}, at: rcu_read_lock_bh include/linux/rcupdate.h:892 [inline] #3: ffffffff8ed3dfc0 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x2d4/0xbf0 drivers/net/wireguard/socket.c:118 #4: ffffffff8ed3df60 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #4: ffffffff8ed3df60 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #4: ffffffff8ed3df60 (rcu_read_lock){....}-{1:3}, at: ip6_route_output_flags+0x30/0x610 net/ipv6/route.c:2650 #5: ffffffff8ed3df60 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #5: ffffffff8ed3df60 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #5: ffffffff8ed3df60 (rcu_read_lock){....}-{1:3}, at: ip6_pol_route+0x192/0x15f0 net/ipv6/route.c:2229 #6: ffffffff8ed3df60 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #6: ffffffff8ed3df60 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #6: ffffffff8ed3df60 (rcu_read_lock){....}-{1:3}, at: __bpf_trace_run kernel/trace/bpf_trace.c:2362 [inline] #6: ffffffff8ed3df60 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x246/0x5a0 kernel/trace/bpf_trace.c:2406 #7: ffffc9001b4d40d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20e/0x650 kernel/bpf/ringbuf.c:423 #8: ffffffff8ed3df60 (rcu_read_lock){....}-{1:3}, at: trace_call_bpf+0xb9/0x8a0 kernel/trace/bpf_trace.c:-1 stack backtrace: CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.14.0-syzkaller-g8582d9ab3efd #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: wg-crypt-wg0 wg_packet_tx_worker Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_deadlock_bug+0x2be/0x2d0 kernel/locking/lockdep.c:3042 check_deadlock kernel/locking/lockdep.c:3094 [inline] validate_chain+0x928/0x24e0 kernel/locking/lockdep.c:3896 __lock_acquire+0xad5/0xd80 kernel/locking/lockdep.c:5235 lock_acquire+0x116/0x2f0 kernel/locking/lockdep.c:5866 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd8/0x130 kernel/locking/spinlock.c:162 __bpf_ringbuf_reserve+0x20e/0x650 kernel/bpf/ringbuf.c:423 ____bpf_ringbuf_reserve kernel/bpf/ringbuf.c:474 [inline] bpf_ringbuf_reserve+0x5c/0x70 kernel/bpf/ringbuf.c:466 bpf_prog_ba4789e7f2e155d6+0x36/0x53 bpf_dispatcher_nop_func include/linux/bpf.h:1316 [inline] __bpf_prog_run include/linux/filter.h:718 [inline] bpf_prog_run include/linux/filter.h:725 [inline] bpf_prog_run_array include/linux/bpf.h:2215 [inline] trace_call_bpf+0x36a/0x8a0 kernel/trace/bpf_trace.c:146 perf_trace_run_bpf_submit+0x82/0x180 kernel/events/core.c:10807 do_perf_trace_lock include/trace/events/lock.h:50 [inline] perf_trace_lock+0x39c/0x4a0 include/trace/events/lock.h:50 __do_trace_lock_release include/trace/events/lock.h:69 [inline] trace_lock_release include/trace/events/lock.h:69 [inline] lock_release+0x3b4/0x3e0 kernel/locking/lockdep.c:5877 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:149 [inline] _raw_spin_unlock_irqrestore+0x7a/0x140 kernel/locking/spinlock.c:194 __bpf_ringbuf_reserve+0x4c5/0x650 kernel/bpf/ringbuf.c:461 ____bpf_ringbuf_reserve kernel/bpf/ringbuf.c:474 [inline] bpf_ringbuf_reserve+0x5c/0x70 kernel/bpf/ringbuf.c:466 bpf_prog_f42551b0fba4abb2+0x2e/0x48 bpf_dispatcher_nop_func include/linux/bpf.h:1316 [inline] __bpf_prog_run include/linux/filter.h:718 [inline] bpf_prog_run include/linux/filter.h:725 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2363 [inline] bpf_trace_run4+0x336/0x5a0 kernel/trace/bpf_trace.c:2406 __bpf_trace_fib6_table_lookup+0x2b6/0x320 include/trace/events/fib6.h:13 __do_trace_fib6_table_lookup include/trace/events/fib6.h:13 [inline] trace_fib6_table_lookup+0x1a7/0x210 include/trace/events/fib6.h:13 fib6_table_lookup+0xb98/0xbf0 net/ipv6/route.c:2208 ip6_pol_route+0x26d/0x15f0 net/ipv6/route.c:2231 pol_lookup_func include/net/ip6_fib.h:616 [inline] fib6_rule_lookup+0x288/0x7a0 net/ipv6/fib6_rules.c:120 ip6_route_output_flags_noref net/ipv6/route.c:2639 [inline] ip6_route_output_flags+0x38e/0x610 net/ipv6/route.c:2651 ip6_dst_lookup_tail+0x292/0x1510 net/ipv6/ip6_output.c:1156 ip6_dst_lookup_flow+0xbb/0x180 net/ipv6/ip6_output.c:1259 send6+0x626/0xbf0 drivers/net/wireguard/socket.c:139 wg_socket_send_skb_to_peer+0x115/0x1d0 drivers/net/wireguard/socket.c:178 wg_packet_create_data_done drivers/net/wireguard/send.c:251 [inline] wg_packet_tx_worker+0x1bf/0x810 drivers/net/wireguard/send.c:276 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xac3/0x18e0 kernel/workqueue.c:3319 worker_thread+0x870/0xd50 kernel/workqueue.c:3400 kthread+0x7b7/0x940 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245