Warning: Permanently added '10.128.10.21' (ED25519) to the list of known hosts. 2024/05/12 03:48:48 ignoring optional flag "sandboxArg"="0" 2024/05/12 03:48:48 parsed 1 programs 2024/05/12 03:48:48 executed programs: 0 2024/05/12 03:48:54 executed programs: 4 2024/05/12 03:48:59 executed programs: 10 2024/05/12 03:49:04 executed programs: 18 [ 73.057913][ T2100] [ 73.060333][ T2100] ====================================================== [ 73.067666][ T2100] WARNING: possible circular locking dependency detected [ 73.074840][ T2100] 6.1.90-syzkaller #0 Not tainted [ 73.080022][ T2100] ------------------------------------------------------ [ 73.087101][ T2100] syz-executor.0/2100 is trying to acquire lock: [ 73.093693][ T2100] ffff88810ae7fa20 (&rs->rs_recv_lock){....}-{2:2}, at: rds_wake_sk_sleep+0x17/0x50 [ 73.103678][ T2100] [ 73.103678][ T2100] but task is already holding lock: [ 73.111543][ T2100] ffff8881400cbd00 (&rm->m_rs_lock){....}-{2:2}, at: rds_send_remove_from_sock+0x6b/0x300 [ 73.121618][ T2100] [ 73.121618][ T2100] which lock already depends on the new lock. [ 73.121618][ T2100] [ 73.132079][ T2100] [ 73.132079][ T2100] the existing dependency chain (in reverse order) is: [ 73.141260][ T2100] [ 73.141260][ T2100] -> #1 (&rm->m_rs_lock){....}-{2:2}: [ 73.148959][ T2100] _raw_spin_lock_irqsave+0x5d/0x90 [ 73.154837][ T2100] rds_message_put+0x69/0x3b0 [ 73.159999][ T2100] rds_clear_recv_queue+0xab/0xe0 [ 73.165871][ T2100] rds_release+0x50/0x130 [ 73.170975][ T2100] sock_close+0x42/0xd0 [ 73.175981][ T2100] __fput+0xe1/0x210 [ 73.180526][ T2100] task_work_run+0x79/0xa0 [ 73.185524][ T2100] exit_to_user_mode_loop+0xd2/0xe0 [ 73.191301][ T2100] exit_to_user_mode_prepare+0x9a/0xe0 [ 73.197410][ T2100] syscall_exit_to_user_mode+0x5e/0x210 [ 73.203716][ T2100] do_syscall_64+0x47/0x80 [ 73.208728][ T2100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.215630][ T2100] [ 73.215630][ T2100] -> #0 (&rs->rs_recv_lock){....}-{2:2}: [ 73.227244][ T2100] __lock_acquire+0x146d/0x2830 [ 73.232690][ T2100] lock_acquire+0xe3/0x270 [ 73.237706][ T2100] _raw_read_lock_irqsave+0x65/0xa0 [ 73.243590][ T2100] rds_wake_sk_sleep+0x17/0x50 [ 73.248847][ T2100] rds_send_remove_from_sock+0x9e/0x300 [ 73.254892][ T2100] rds_send_path_drop_acked+0x78/0x130 [ 73.261096][ T2100] rds_tcp_write_space+0xb0/0x210 [ 73.266814][ T2100] tcp_check_space+0x17d/0x200 [ 73.272059][ T2100] tcp_rcv_established+0x4e6/0x620 [ 73.277652][ T2100] tcp_v4_do_rcv+0xdb/0x2c0 [ 73.283248][ T2100] __release_sock+0x92/0x120 [ 73.288337][ T2100] release_sock+0x27/0xa0 [ 73.293329][ T2100] rds_send_xmit+0x683/0x970 [ 73.298526][ T2100] rds_sendmsg+0x961/0xad0 [ 73.303612][ T2100] ____sys_sendmsg+0x189/0x220 [ 73.308881][ T2100] ___sys_sendmsg+0x28f/0x2d0 [ 73.314547][ T2100] __se_sys_sendmsg+0xf4/0x130 [ 73.319821][ T2100] do_syscall_64+0x3b/0x80 [ 73.325078][ T2100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.331691][ T2100] [ 73.331691][ T2100] other info that might help us debug this: [ 73.331691][ T2100] [ 73.342239][ T2100] Possible unsafe locking scenario: [ 73.342239][ T2100] [ 73.349660][ T2100] CPU0 CPU1 [ 73.355082][ T2100] ---- ---- [ 73.360500][ T2100] lock(&rm->m_rs_lock); [ 73.364876][ T2100] lock(&rs->rs_recv_lock); [ 73.371984][ T2100] lock(&rm->m_rs_lock); [ 73.378820][ T2100] lock(&rs->rs_recv_lock); [ 73.383457][ T2100] [ 73.383457][ T2100] *** DEADLOCK *** [ 73.383457][ T2100] [ 73.391653][ T2100] 3 locks held by syz-executor.0/2100: [ 73.397120][ T2100] #0: ffff88810675e8b0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_cork+0xe/0x90 [ 73.406901][ T2100] #1: ffff88810675eb38 (k-clock-AF_INET){++.-}-{2:2}, at: rds_tcp_write_space+0x1c/0x210 [ 73.417051][ T2100] #2: ffff8881400cbd00 (&rm->m_rs_lock){....}-{2:2}, at: rds_send_remove_from_sock+0x6b/0x300 [ 73.427964][ T2100] [ 73.427964][ T2100] stack backtrace: [ 73.433911][ T2100] CPU: 0 PID: 2100 Comm: syz-executor.0 Not tainted 6.1.90-syzkaller #0 [ 73.442202][ T2100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 73.452342][ T2100] Call Trace: [ 73.455602][ T2100] [ 73.458509][ T2100] dump_stack_lvl+0x89/0xd7 [ 73.463074][ T2100] print_circular_bug+0x2c5/0x300 [ 73.468151][ T2100] check_noncircular+0x106/0x110 [ 73.473166][ T2100] __lock_acquire+0x146d/0x2830 [ 73.478075][ T2100] ? debug_check_no_obj_freed+0xd0/0x240 [ 73.483722][ T2100] ? rds_wake_sk_sleep+0x17/0x50 [ 73.488766][ T2100] lock_acquire+0xe3/0x270 [ 73.493273][ T2100] ? rds_wake_sk_sleep+0x17/0x50 [ 73.498464][ T2100] _raw_read_lock_irqsave+0x65/0xa0 [ 73.503735][ T2100] ? rds_wake_sk_sleep+0x17/0x50 [ 73.508814][ T2100] rds_wake_sk_sleep+0x17/0x50 [ 73.514065][ T2100] rds_send_remove_from_sock+0x9e/0x300 [ 73.519748][ T2100] ? lockdep_hardirqs_on+0x94/0xf0 [ 73.524906][ T2100] ? rds_tcp_write_space+0x210/0x210 [ 73.530269][ T2100] rds_send_path_drop_acked+0x78/0x130 [ 73.535782][ T2100] ? datagram_poll+0xe0/0xe0 [ 73.540344][ T2100] rds_tcp_write_space+0xb0/0x210 [ 73.545348][ T2100] tcp_check_space+0x17d/0x200 [ 73.550273][ T2100] tcp_rcv_established+0x4e6/0x620 [ 73.555472][ T2100] tcp_v4_do_rcv+0xdb/0x2c0 [ 73.560039][ T2100] __release_sock+0x92/0x120 [ 73.564615][ T2100] release_sock+0x27/0xa0 [ 73.569015][ T2100] rds_send_xmit+0x683/0x970 [ 73.573569][ T2100] rds_sendmsg+0x961/0xad0 [ 73.577948][ T2100] ? aa_sk_perm+0x215/0x290 [ 73.582500][ T2100] ____sys_sendmsg+0x189/0x220 [ 73.587242][ T2100] ___sys_sendmsg+0x28f/0x2d0 [ 73.591962][ T2100] __se_sys_sendmsg+0xf4/0x130 [ 73.596799][ T2100] do_syscall_64+0x3b/0x80 [ 73.601329][ T2100] ? clear_bhb_loop+0x45/0xa0 [ 73.606231][ T2100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.612084][ T2100] RIP: 0033:0x7f0d5987c959 [ 73.616598][ T2100] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 73.636806][ T2100] RSP: 002b:00007f0d5a60d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.645613][ T2100] RAX: ffffffffffffffda RBX: 00007f0d5999bf80 RCX: 00007f0d5987c959 2024/05/12 03:49:10 executed programs: 24 [ 73.653645][ T2100] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 73.661675][ T2100] RBP: 00007f0d598d8c88 R08: 0000000000000000 R09: 0000000000000000 [ 73.670308][ T2100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.678720][ T2100] R13: 0000000000000006 R14: 00007f0d5999bf80 R15: 00007ffd20a21468 [ 73.687128][ T2100] 2024/05/12 03:49:15 executed programs: 31