Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. 2023/11/26 04:25:57 ignoring optional flag "sandboxArg"="0" 2023/11/26 04:25:57 parsed 1 programs 2023/11/26 04:25:57 executed programs: 0 2023/11/26 04:26:03 executed programs: 4 2023/11/26 04:26:08 executed programs: 10 2023/11/26 04:26:13 executed programs: 17 2023/11/26 04:26:18 executed programs: 24 2023/11/26 04:26:23 executed programs: 30 2023/11/26 04:26:28 executed programs: 36 2023/11/26 04:26:33 executed programs: 43 2023/11/26 04:26:38 executed programs: 49 2023/11/26 04:26:43 executed programs: 57 2023/11/26 04:26:49 executed programs: 63 2023/11/26 04:26:54 executed programs: 70 2023/11/26 04:26:59 executed programs: 76 2023/11/26 04:27:04 executed programs: 83 2023/11/26 04:27:09 executed programs: 89 2023/11/26 04:27:14 executed programs: 95 2023/11/26 04:27:19 executed programs: 104 2023/11/26 04:27:24 executed programs: 111 2023/11/26 04:27:29 executed programs: 118 [ 150.537595][ T2560] [ 150.540022][ T2560] ====================================================== [ 150.547191][ T2560] WARNING: possible circular locking dependency detected [ 150.554182][ T2560] 6.1.63-syzkaller #0 Not tainted [ 150.559267][ T2560] ------------------------------------------------------ [ 150.566528][ T2560] syz-executor.0/2560 is trying to acquire lock: [ 150.572819][ T2560] ffff888106335d20 (&rs->rs_recv_lock){...-}-{2:2}, at: rds_wake_sk_sleep+0x17/0x50 [ 150.582424][ T2560] [ 150.582424][ T2560] but task is already holding lock: [ 150.589759][ T2560] ffff888102be5100 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0x6b/0x300 [ 150.599803][ T2560] [ 150.599803][ T2560] which lock already depends on the new lock. [ 150.599803][ T2560] [ 150.611641][ T2560] [ 150.611641][ T2560] the existing dependency chain (in reverse order) is: [ 150.620872][ T2560] [ 150.620872][ T2560] -> #1 (&rm->m_rs_lock){..-.}-{2:2}: [ 150.628555][ T2560] _raw_spin_lock_irqsave+0x5d/0x90 [ 150.634251][ T2560] rds_message_put+0x69/0x3b0 [ 150.639515][ T2560] rds_clear_recv_queue+0xab/0xe0 [ 150.645460][ T2560] rds_release+0x50/0x130 [ 150.650282][ T2560] sock_close+0x42/0xd0 [ 150.654933][ T2560] __fput+0xe1/0x210 [ 150.659319][ T2560] task_work_run+0x79/0xa0 [ 150.664232][ T2560] exit_to_user_mode_loop+0xd2/0xe0 [ 150.669917][ T2560] exit_to_user_mode_prepare+0x9a/0xe0 [ 150.675860][ T2560] syscall_exit_to_user_mode+0x5e/0x210 [ 150.682063][ T2560] do_syscall_64+0x49/0x80 [ 150.687138][ T2560] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 150.693525][ T2560] [ 150.693525][ T2560] -> #0 (&rs->rs_recv_lock){...-}-{2:2}: [ 150.701302][ T2560] __lock_acquire+0x1464/0x2830 [ 150.706662][ T2560] lock_acquire+0xe3/0x270 [ 150.711661][ T2560] _raw_read_lock_irqsave+0x65/0xa0 [ 150.717451][ T2560] rds_wake_sk_sleep+0x17/0x50 [ 150.722729][ T2560] rds_send_remove_from_sock+0x9e/0x300 [ 150.728765][ T2560] rds_send_path_drop_acked+0x78/0x130 [ 150.734884][ T2560] rds_tcp_write_space+0xb0/0x210 [ 150.740602][ T2560] tcp_check_space+0x17d/0x200 [ 150.745965][ T2560] tcp_rcv_established+0x4e6/0x620 [ 150.751652][ T2560] tcp_v4_do_rcv+0xdb/0x2c0 [ 150.757000][ T2560] __release_sock+0x92/0x120 [ 150.762541][ T2560] release_sock+0x27/0xa0 [ 150.767658][ T2560] rds_send_xmit+0x683/0x970 [ 150.772848][ T2560] rds_sendmsg+0x9ab/0xb30 [ 150.777795][ T2560] ____sys_sendmsg+0x182/0x220 [ 150.784113][ T2560] ___sys_sendmsg+0x28f/0x2d0 [ 150.789555][ T2560] __se_sys_sendmsg+0xf4/0x130 [ 150.794878][ T2560] do_syscall_64+0x3d/0x80 [ 150.799792][ T2560] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 150.806256][ T2560] [ 150.806256][ T2560] other info that might help us debug this: [ 150.806256][ T2560] [ 150.817083][ T2560] Possible unsafe locking scenario: [ 150.817083][ T2560] [ 150.824840][ T2560] CPU0 CPU1 [ 150.830526][ T2560] ---- ---- [ 150.836152][ T2560] lock(&rm->m_rs_lock); [ 150.840628][ T2560] lock(&rs->rs_recv_lock); [ 150.848065][ T2560] lock(&rm->m_rs_lock); [ 150.855014][ T2560] lock(&rs->rs_recv_lock); [ 150.859662][ T2560] [ 150.859662][ T2560] *** DEADLOCK *** [ 150.859662][ T2560] [ 150.867799][ T2560] 3 locks held by syz-executor.0/2560: [ 150.873236][ T2560] #0: ffff888103b61830 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_cork+0xe/0x90 [ 150.883207][ T2560] #1: ffff888103b61ab8 (k-clock-AF_INET){++.-}-{2:2}, at: rds_tcp_write_space+0x1c/0x210 [ 150.893415][ T2560] #2: ffff888102be5100 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0x6b/0x300 [ 150.904157][ T2560] [ 150.904157][ T2560] stack backtrace: [ 150.910021][ T2560] CPU: 0 PID: 2560 Comm: syz-executor.0 Not tainted 6.1.63-syzkaller #0 [ 150.918432][ T2560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 150.928726][ T2560] Call Trace: [ 150.931992][ T2560] [ 150.934902][ T2560] dump_stack_lvl+0x89/0xd7 [ 150.939619][ T2560] print_circular_bug+0x2c5/0x300 [ 150.944718][ T2560] check_noncircular+0x106/0x110 [ 150.950064][ T2560] __lock_acquire+0x1464/0x2830 [ 150.954931][ T2560] ? __lock_acquire+0x541/0x2830 [ 150.959942][ T2560] ? rds_wake_sk_sleep+0x17/0x50 [ 150.965039][ T2560] lock_acquire+0xe3/0x270 [ 150.969441][ T2560] ? rds_wake_sk_sleep+0x17/0x50 [ 150.974458][ T2560] _raw_read_lock_irqsave+0x65/0xa0 [ 150.979718][ T2560] ? rds_wake_sk_sleep+0x17/0x50 [ 150.984727][ T2560] rds_wake_sk_sleep+0x17/0x50 [ 150.989636][ T2560] rds_send_remove_from_sock+0x9e/0x300 [ 150.995248][ T2560] ? lockdep_hardirqs_on+0x94/0xf0 [ 151.000423][ T2560] ? rds_tcp_write_space+0x210/0x210 [ 151.005945][ T2560] rds_send_path_drop_acked+0x78/0x130 [ 151.011549][ T2560] ? datagram_poll+0xe0/0xe0 [ 151.016117][ T2560] rds_tcp_write_space+0xb0/0x210 [ 151.021196][ T2560] tcp_check_space+0x17d/0x200 [ 151.025933][ T2560] tcp_rcv_established+0x4e6/0x620 [ 151.031023][ T2560] tcp_v4_do_rcv+0xdb/0x2c0 [ 151.035769][ T2560] __release_sock+0x92/0x120 [ 151.040569][ T2560] release_sock+0x27/0xa0 [ 151.045568][ T2560] rds_send_xmit+0x683/0x970 [ 151.050139][ T2560] rds_sendmsg+0x9ab/0xb30 [ 151.054628][ T2560] ? aa_sk_perm+0x215/0x290 [ 151.059111][ T2560] ____sys_sendmsg+0x182/0x220 [ 151.063855][ T2560] ___sys_sendmsg+0x28f/0x2d0 [ 151.068516][ T2560] __se_sys_sendmsg+0xf4/0x130 [ 151.073250][ T2560] do_syscall_64+0x3d/0x80 [ 151.077638][ T2560] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 151.083536][ T2560] RIP: 0033:0x7f30e367c959 [ 151.088030][ T2560] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 151.107787][ T2560] RSP: 002b:00007f30e43760c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.116257][ T2560] RAX: ffffffffffffffda RBX: 00007f30e379c050 RCX: 00007f30e367c959 [ 151.124380][ T2560] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 151.132428][ T2560] RBP: 00007f30e36d8c88 R08: 0000000000000000 R09: 0000000000000000 [ 151.140480][ T2560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.148426][ T2560] R13: 0000000000000006 R14: 00007f30e379c050 R15: 00007ffcd2d127d8 [ 151.156472][ T2560] 2023/11/26 04:27:35 executed programs: 125 2023/11/26 04:27:40 executed programs: 132