============================================
WARNING: possible recursive locking detected
6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 Not tainted
--------------------------------------------
kworker/u32:4/76 is trying to acquire lock:
ffff8880283c4268 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0xb0/0x7f0 kernel/bpf/lpm_trie.c:480
but task is already holding lock:
ffff888025472a68 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0xb0/0x7f0 kernel/bpf/lpm_trie.c:480
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&trie->lock);
lock(&trie->lock);
*** DEADLOCK ***
May be due to missing lock nesting notation
8 locks held by kworker/u32:4/76:
#0: ffff88801b091148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204
#1: ffffc90000fbfd80 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
#2: ffffffff8e05ef50 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 kernel/jump_label.c:247
#3: ffffffff8e2dba48 (jump_label_mutex){+.+.}-{4:4}, at: jump_label_lock kernel/jump_label.c:27 [inline]
#3: ffffffff8e2dba48 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x10b/0x1c0 kernel/jump_label.c:238
#4: ffffffff8e07c888 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_queue+0x73/0x120 arch/x86/kernel/jump_label.c:136
#5: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
#5: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#5: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: __bpf_trace_run kernel/trace/bpf_trace.c:2361 [inline]
#5: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 kernel/trace/bpf_trace.c:2403
#6: ffff888025472a68 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0xb0/0x7f0 kernel/bpf/lpm_trie.c:480
#7: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
#7: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#7: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: __bpf_trace_run kernel/trace/bpf_trace.c:2361 [inline]
#7: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 kernel/trace/bpf_trace.c:2403
stack backtrace:
CPU: 2 UID: 0 PID: 76 Comm: kworker/u32:4 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: events_unbound toggle_allocation_gate
Call Trace:
<TASK>
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
print_deadlock_bug+0x2e3/0x410 kernel/locking/lockdep.c:3037
check_deadlock kernel/locking/lockdep.c:3089 [inline]
validate_chain kernel/locking/lockdep.c:3891 [inline]
__lock_acquire+0x2117/0x3c40 kernel/locking/lockdep.c:5226
lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5849
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162
trie_delete_elem+0xb0/0x7f0 kernel/bpf/lpm_trie.c:480
bpf_prog_fdee3c9a1e8a2a6e+0x46/0x4a
bpf_dispatcher_nop_func include/linux/bpf.h:1290 [inline]
__bpf_prog_run include/linux/filter.h:701 [inline]
bpf_prog_run include/linux/filter.h:708 [inline]
__bpf_trace_run kernel/trace/bpf_trace.c:2362 [inline]
bpf_trace_run2+0x231/0x590 kernel/trace/bpf_trace.c:2403
__bpf_trace_contention_end+0xca/0x110 include/trace/events/lock.h:122
__traceiter_contention_end+0x5a/0xa0 include/trace/events/lock.h:122
trace_contention_end.constprop.0+0xf0/0x170 include/trace/events/lock.h:122
__pv_queued_spin_lock_slowpath+0x27e/0xc90 kernel/locking/qspinlock.c:557
pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:584 [inline]
queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline]
queued_spin_lock include/asm-generic/qspinlock.h:114 [inline]
do_raw_spin_lock+0x210/0x2c0 kernel/locking/spinlock_debug.c:116
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:111 [inline]
_raw_spin_lock_irqsave+0x42/0x60 kernel/locking/spinlock.c:162
trie_delete_elem+0xb0/0x7f0 kernel/bpf/lpm_trie.c:480
bpf_prog_fdee3c9a1e8a2a6e+0x46/0x4a
bpf_dispatcher_nop_func include/linux/bpf.h:1290 [inline]
__bpf_prog_run include/linux/filter.h:701 [inline]
bpf_prog_run include/linux/filter.h:708 [inline]
__bpf_trace_run kernel/trace/bpf_trace.c:2362 [inline]
bpf_trace_run2+0x231/0x590 kernel/trace/bpf_trace.c:2403
__bpf_trace_contention_end+0xca/0x110 include/trace/events/lock.h:122
__traceiter_contention_end+0x5a/0xa0 include/trace/events/lock.h:122
trace_contention_end+0xd2/0x140 include/trace/events/lock.h:122
__mutex_lock_common kernel/locking/mutex.c:594 [inline]
__mutex_lock+0x1c2/0xa60 kernel/locking/mutex.c:735
arch_jump_label_transform_queue+0x73/0x120 arch/x86/kernel/jump_label.c:136
__jump_label_update+0x125/0x420 kernel/jump_label.c:513
jump_label_update+0x1d7/0x400 kernel/jump_label.c:920
static_key_disable_cpuslocked+0x158/0x1c0 kernel/jump_label.c:240
static_key_disable+0x1a/0x20 kernel/jump_label.c:248
toggle_allocation_gate mm/kfence/core.c:854 [inline]
toggle_allocation_gate+0x147/0x260 mm/kfence/core.c:841
process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
process_scheduled_works kernel/workqueue.c:3310 [inline]
worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
</TASK>