Warning: Permanently added '10.128.10.38' (ED25519) to the list of known hosts. 2024/04/26 07:02:46 ignoring optional flag "sandboxArg"="0" 2024/04/26 07:02:46 parsed 1 programs 2024/04/26 07:02:46 executed programs: 0 2024/04/26 07:02:52 executed programs: 5 2024/04/26 07:02:57 executed programs: 11 2024/04/26 07:03:02 executed programs: 18 2024/04/26 07:03:07 executed programs: 24 2024/04/26 07:03:12 executed programs: 30 2024/04/26 07:03:17 executed programs: 36 2024/04/26 07:03:22 executed programs: 43 2024/04/26 07:03:27 executed programs: 50 2024/04/26 07:03:32 executed programs: 56 2024/04/26 07:03:37 executed programs: 63 2024/04/26 07:03:42 executed programs: 69 2024/04/26 07:03:47 executed programs: 76 2024/04/26 07:03:52 executed programs: 82 2024/04/26 07:03:57 executed programs: 88 2024/04/26 07:04:02 executed programs: 94 2024/04/26 07:04:07 executed programs: 100 2024/04/26 07:04:12 executed programs: 108 2024/04/26 07:04:17 executed programs: 114 2024/04/26 07:04:23 executed programs: 120 2024/04/26 07:04:28 executed programs: 126 2024/04/26 07:04:33 executed programs: 132 2024/04/26 07:04:38 executed programs: 138 2024/04/26 07:04:43 executed programs: 144 2024/04/26 07:04:48 executed programs: 150 2024/04/26 07:04:53 executed programs: 156 2024/04/26 07:04:58 executed programs: 166 2024/04/26 07:05:03 executed programs: 172 2024/04/26 07:05:08 executed programs: 178 2024/04/26 07:05:13 executed programs: 185 2024/04/26 07:05:18 executed programs: 192 2024/04/26 07:05:23 executed programs: 199 2024/04/26 07:05:28 executed programs: 205 2024/04/26 07:05:33 executed programs: 212 2024/04/26 07:05:38 executed programs: 220 2024/04/26 07:05:43 executed programs: 227 [ 230.068960][ T3091] [ 230.071301][ T3091] ====================================================== [ 230.078279][ T3091] WARNING: possible circular locking dependency detected [ 230.085261][ T3091] 5.15.156-syzkaller #0 Not tainted [ 230.090422][ T3091] ------------------------------------------------------ [ 230.097418][ T3091] syz-executor.0/3091 is trying to acquire lock: [ 230.103701][ T3091] ffff88810a72b8d8 (&rs->rs_recv_lock){...-}-{2:2}, at: rds_wake_sk_sleep+0x16/0x60 [ 230.113037][ T3091] [ 230.113037][ T3091] but task is already holding lock: [ 230.120368][ T3091] ffff8881017f2900 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0xd8/0x330 [ 230.130223][ T3091] [ 230.130223][ T3091] which lock already depends on the new lock. [ 230.130223][ T3091] [ 230.140589][ T3091] [ 230.140589][ T3091] the existing dependency chain (in reverse order) is: [ 230.149568][ T3091] [ 230.149568][ T3091] -> #1 (&rm->m_rs_lock){..-.}-{2:2}: [ 230.157073][ T3091] _raw_spin_lock_irqsave+0x36/0x50 [ 230.162753][ T3091] rds_message_put+0x82/0x3c0 [ 230.167910][ T3091] rds_clear_recv_queue+0x9b/0xd0 [ 230.173415][ T3091] rds_release+0x56/0x140 [ 230.178224][ T3091] __sock_release+0x32/0xa0 [ 230.183208][ T3091] sock_close+0xf/0x20 [ 230.187759][ T3091] __fput+0x8d/0x250 [ 230.192152][ T3091] task_work_run+0x54/0x80 [ 230.197048][ T3091] exit_to_user_mode_prepare+0x1bf/0x1d0 [ 230.203166][ T3091] syscall_exit_to_user_mode+0x19/0x60 [ 230.209107][ T3091] do_syscall_64+0x40/0x80 [ 230.214004][ T3091] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.220382][ T3091] [ 230.220382][ T3091] -> #0 (&rs->rs_recv_lock){...-}-{2:2}: [ 230.228262][ T3091] __lock_acquire+0x10b6/0x1a40 [ 230.233698][ T3091] lock_acquire+0xbb/0x2a0 [ 230.238597][ T3091] _raw_read_lock_irqsave+0x42/0x90 [ 230.244312][ T3091] rds_wake_sk_sleep+0x16/0x60 [ 230.249587][ T3091] rds_send_remove_from_sock+0x103/0x330 [ 230.255703][ T3091] rds_send_path_drop_acked+0x121/0x150 [ 230.261750][ T3091] rds_tcp_write_space+0x9a/0x220 [ 230.267275][ T3091] tcp_check_space+0x31/0x110 [ 230.272433][ T3091] tcp_rcv_established+0x27e/0x730 [ 230.278024][ T3091] tcp_v4_do_rcv+0x17c/0x2f0 [ 230.283528][ T3091] __release_sock+0x54/0xd0 [ 230.288631][ T3091] release_sock+0x26/0xa0 [ 230.293460][ T3091] rds_send_xmit+0x5cc/0xa00 [ 230.298535][ T3091] rds_sendmsg+0xea1/0x1100 [ 230.303623][ T3091] __sock_sendmsg+0x2e/0x40 [ 230.308644][ T3091] ____sys_sendmsg+0x234/0x250 [ 230.313892][ T3091] ___sys_sendmsg+0x6e/0xb0 [ 230.318951][ T3091] __sys_sendmsg+0x54/0xa0 [ 230.323846][ T3091] do_syscall_64+0x33/0x80 [ 230.328983][ T3091] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.335372][ T3091] [ 230.335372][ T3091] other info that might help us debug this: [ 230.335372][ T3091] [ 230.345743][ T3091] Possible unsafe locking scenario: [ 230.345743][ T3091] [ 230.353171][ T3091] CPU0 CPU1 [ 230.358501][ T3091] ---- ---- [ 230.363853][ T3091] lock(&rm->m_rs_lock); [ 230.368142][ T3091] lock(&rs->rs_recv_lock); [ 230.375218][ T3091] lock(&rm->m_rs_lock); [ 230.382035][ T3091] lock(&rs->rs_recv_lock); [ 230.386585][ T3091] [ 230.386585][ T3091] *** DEADLOCK *** [ 230.386585][ T3091] [ 230.394778][ T3091] 3 locks held by syz-executor.0/3091: [ 230.400199][ T3091] #0: ffff88810971e8a0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_cork+0xe/0x40 [ 230.409877][ T3091] #1: ffff88810971eb58 (k-clock-AF_INET){++.-}-{2:2}, at: rds_tcp_write_space+0x1a/0x220 [ 230.419757][ T3091] #2: ffff8881017f2900 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0xd8/0x330 [ 230.430052][ T3091] [ 230.430052][ T3091] stack backtrace: [ 230.435908][ T3091] CPU: 1 PID: 3091 Comm: syz-executor.0 Not tainted 5.15.156-syzkaller #0 [ 230.444808][ T3091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 230.454827][ T3091] Call Trace: [ 230.458074][ T3091] [ 230.460973][ T3091] dump_stack_lvl+0x57/0x7d [ 230.465456][ T3091] check_noncircular+0xcc/0xe0 [ 230.470181][ T3091] ? register_lock_class+0x41/0x630 [ 230.475356][ T3091] ? enqueue_to_backlog+0x2f3/0x500 [ 230.480520][ T3091] __lock_acquire+0x10b6/0x1a40 [ 230.485331][ T3091] lock_acquire+0xbb/0x2a0 [ 230.489707][ T3091] ? rds_wake_sk_sleep+0x16/0x60 [ 230.494606][ T3091] ? rds_send_remove_from_sock+0xd8/0x330 [ 230.500392][ T3091] _raw_read_lock_irqsave+0x42/0x90 [ 230.505583][ T3091] ? rds_wake_sk_sleep+0x16/0x60 [ 230.510709][ T3091] rds_wake_sk_sleep+0x16/0x60 [ 230.515460][ T3091] rds_send_remove_from_sock+0x103/0x330 [ 230.521060][ T3091] ? lockdep_hardirqs_on_prepare+0x9d/0xf0 [ 230.526832][ T3091] ? _raw_spin_unlock_irqrestore+0x44/0x60 [ 230.532625][ T3091] ? rds_tcp_recv_exit+0x10/0x10 [ 230.537530][ T3091] rds_send_path_drop_acked+0x121/0x150 [ 230.543041][ T3091] ? sk_stream_wait_memory+0x370/0x370 [ 230.548462][ T3091] rds_tcp_write_space+0x9a/0x220 [ 230.553451][ T3091] tcp_check_space+0x31/0x110 [ 230.558091][ T3091] tcp_rcv_established+0x27e/0x730 [ 230.563180][ T3091] tcp_v4_do_rcv+0x17c/0x2f0 [ 230.567745][ T3091] __release_sock+0x54/0xd0 [ 230.572209][ T3091] release_sock+0x26/0xa0 [ 230.576516][ T3091] rds_send_xmit+0x5cc/0xa00 [ 230.581079][ T3091] rds_sendmsg+0xea1/0x1100 [ 230.585560][ T3091] ? aa_sk_perm+0x5e/0x310 [ 230.589942][ T3091] __sock_sendmsg+0x2e/0x40 [ 230.594420][ T3091] ____sys_sendmsg+0x234/0x250 [ 230.599143][ T3091] ? import_iovec+0x17/0x20 [ 230.603607][ T3091] ? sendmsg_copy_msghdr+0x77/0xa0 [ 230.608681][ T3091] ___sys_sendmsg+0x6e/0xb0 [ 230.613147][ T3091] ? lock_acquire+0xbb/0x2a0 [ 230.617699][ T3091] ? ksys_dup3+0x160/0x160 [ 230.622076][ T3091] ? find_held_lock+0x2b/0x80 [ 230.626713][ T3091] ? __fget_files+0xb9/0x190 [ 230.631273][ T3091] ? __fget_files+0xd1/0x190 [ 230.635840][ T3091] __sys_sendmsg+0x54/0xa0 [ 230.640221][ T3091] ? lockdep_hardirqs_on_prepare+0xcd/0xf0 [ 230.646008][ T3091] do_syscall_64+0x33/0x80 [ 230.650388][ T3091] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.656245][ T3091] RIP: 0033:0x7f0904cad959 [ 230.660981][ T3091] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 230.680563][ T3091] RSP: 002b:00007f090480f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.688937][ T3091] RAX: ffffffffffffffda RBX: 00007f0904dcd050 RCX: 00007f0904cad959 [ 230.696871][ T3091] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 230.704805][ T3091] RBP: 00007f0904d09c88 R08: 0000000000000000 R09: 0000000000000000 [ 230.712757][ T3091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.720690][ T3091] R13: 0000000000000006 R14: 00007f0904dcd050 R15: 00007ffc0cf40a48 [ 230.728638][ T3091] 2024/04/26 07:05:49 executed programs: 238 2024/04/26 07:05:54 executed programs: 245