Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. [ 408.055351][ T4255] [ 408.057711][ T4255] ====================================================== [ 408.064897][ T4255] WARNING: possible circular locking dependency detected [ 408.071887][ T4255] 5.15.160-syzkaller #0 Not tainted [ 408.077183][ T4255] ------------------------------------------------------ [ 408.084254][ T4255] syz-executor389/4255 is trying to acquire lock: [ 408.090733][ T4255] ffff8881097e9498 (&rs->rs_recv_lock){...-}-{2:2}, at: rds_wake_sk_sleep+0x16/0x60 [ 408.100567][ T4255] [ 408.100567][ T4255] but task is already holding lock: [ 408.107901][ T4255] ffff888140633100 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0xd8/0x330 [ 408.117979][ T4255] [ 408.117979][ T4255] which lock already depends on the new lock. [ 408.117979][ T4255] [ 408.129076][ T4255] [ 408.129076][ T4255] the existing dependency chain (in reverse order) is: [ 408.139235][ T4255] [ 408.139235][ T4255] -> #1 (&rm->m_rs_lock){..-.}-{2:2}: [ 408.147054][ T4255] _raw_spin_lock_irqsave+0x36/0x50 [ 408.152872][ T4255] rds_message_put+0x82/0x3c0 [ 408.158301][ T4255] rds_clear_recv_queue+0x9b/0xd0 [ 408.163836][ T4255] rds_release+0x56/0x140 [ 408.168654][ T4255] __sock_release+0x32/0xa0 [ 408.173652][ T4255] sock_close+0xf/0x20 [ 408.178209][ T4255] __fput+0x8d/0x250 [ 408.182589][ T4255] task_work_run+0x54/0x80 [ 408.187495][ T4255] exit_to_user_mode_prepare+0x1bf/0x1d0 [ 408.193633][ T4255] syscall_exit_to_user_mode+0x19/0x60 [ 408.199849][ T4255] do_syscall_64+0x40/0x80 [ 408.204851][ T4255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.211274][ T4255] [ 408.211274][ T4255] -> #0 (&rs->rs_recv_lock){...-}-{2:2}: [ 408.219233][ T4255] __lock_acquire+0x10b6/0x1a40 [ 408.224582][ T4255] lock_acquire+0xbb/0x2a0 [ 408.229518][ T4255] _raw_read_lock_irqsave+0x42/0x90 [ 408.235392][ T4255] rds_wake_sk_sleep+0x16/0x60 [ 408.240733][ T4255] rds_send_remove_from_sock+0x103/0x330 [ 408.246968][ T4255] rds_send_path_drop_acked+0x121/0x150 [ 408.253291][ T4255] rds_tcp_write_space+0x9a/0x220 [ 408.258802][ T4255] tcp_check_space+0x31/0x110 [ 408.263973][ T4255] tcp_rcv_established+0x27e/0x730 [ 408.269769][ T4255] tcp_v4_do_rcv+0x17c/0x2f0 [ 408.274850][ T4255] __release_sock+0x54/0xd0 [ 408.279869][ T4255] release_sock+0x26/0xa0 [ 408.284694][ T4255] rds_send_xmit+0x5cc/0xa00 [ 408.290184][ T4255] rds_sendmsg+0xea1/0x1100 [ 408.295189][ T4255] __sock_sendmsg+0x2e/0x40 [ 408.300519][ T4255] ____sys_sendmsg+0x234/0x250 [ 408.305965][ T4255] ___sys_sendmsg+0x6e/0xb0 [ 408.311255][ T4255] __sys_sendmsg+0x54/0xa0 [ 408.316176][ T4255] do_syscall_64+0x33/0x80 [ 408.321224][ T4255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.327878][ T4255] [ 408.327878][ T4255] other info that might help us debug this: [ 408.327878][ T4255] [ 408.338233][ T4255] Possible unsafe locking scenario: [ 408.338233][ T4255] [ 408.345660][ T4255] CPU0 CPU1 [ 408.351000][ T4255] ---- ---- [ 408.356332][ T4255] lock(&rm->m_rs_lock); [ 408.360627][ T4255] lock(&rs->rs_recv_lock); [ 408.367850][ T4255] lock(&rm->m_rs_lock); [ 408.374757][ T4255] lock(&rs->rs_recv_lock); [ 408.379342][ T4255] [ 408.379342][ T4255] *** DEADLOCK *** [ 408.379342][ T4255] [ 408.387460][ T4255] 3 locks held by syz-executor389/4255: [ 408.393099][ T4255] #0: ffff888109719820 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_cork+0xe/0x40 [ 408.402811][ T4255] #1: ffff888109719ad8 (k-clock-AF_INET){++.-}-{2:2}, at: rds_tcp_write_space+0x1a/0x220 [ 408.412694][ T4255] #2: ffff888140633100 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0xd8/0x330 [ 408.423153][ T4255] [ 408.423153][ T4255] stack backtrace: [ 408.429109][ T4255] CPU: 1 PID: 4255 Comm: syz-executor389 Not tainted 5.15.160-syzkaller #0 [ 408.437668][ T4255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 408.447826][ T4255] Call Trace: [ 408.451185][ T4255] [ 408.454084][ T4255] dump_stack_lvl+0x57/0x7d [ 408.458553][ T4255] check_noncircular+0xcc/0xe0 [ 408.463401][ T4255] ? register_lock_class+0x41/0x630 [ 408.468563][ T4255] ? enqueue_to_backlog+0x2f3/0x500 [ 408.473889][ T4255] __lock_acquire+0x10b6/0x1a40 [ 408.478890][ T4255] lock_acquire+0xbb/0x2a0 [ 408.483282][ T4255] ? rds_wake_sk_sleep+0x16/0x60 [ 408.488293][ T4255] ? rds_send_remove_from_sock+0xd8/0x330 [ 408.494184][ T4255] _raw_read_lock_irqsave+0x42/0x90 [ 408.499617][ T4255] ? rds_wake_sk_sleep+0x16/0x60 [ 408.504710][ T4255] rds_wake_sk_sleep+0x16/0x60 [ 408.509457][ T4255] rds_send_remove_from_sock+0x103/0x330 [ 408.515073][ T4255] ? lockdep_hardirqs_on_prepare+0x9d/0xf0 [ 408.520856][ T4255] ? _raw_spin_unlock_irqrestore+0x44/0x60 [ 408.526637][ T4255] ? rds_tcp_recv_exit+0x10/0x10 [ 408.531659][ T4255] rds_send_path_drop_acked+0x121/0x150 [ 408.537331][ T4255] ? sk_stream_wait_memory+0x370/0x370 [ 408.542857][ T4255] rds_tcp_write_space+0x9a/0x220 [ 408.547949][ T4255] tcp_check_space+0x31/0x110 [ 408.552601][ T4255] tcp_rcv_established+0x27e/0x730 [ 408.557679][ T4255] tcp_v4_do_rcv+0x17c/0x2f0 [ 408.562230][ T4255] __release_sock+0x54/0xd0 [ 408.566836][ T4255] release_sock+0x26/0xa0 [ 408.571163][ T4255] rds_send_xmit+0x5cc/0xa00 [ 408.575726][ T4255] rds_sendmsg+0xea1/0x1100 [ 408.580235][ T4255] ? aa_sk_perm+0x5e/0x310 [ 408.584634][ T4255] __sock_sendmsg+0x2e/0x40 [ 408.589100][ T4255] ____sys_sendmsg+0x234/0x250 [ 408.593832][ T4255] ? import_iovec+0x17/0x20 [ 408.598473][ T4255] ? sendmsg_copy_msghdr+0x77/0xa0 [ 408.603731][ T4255] ___sys_sendmsg+0x6e/0xb0 [ 408.608213][ T4255] ? lock_acquire+0xbb/0x2a0 [ 408.612857][ T4255] ? ksys_dup3+0x160/0x160 [ 408.617250][ T4255] ? find_held_lock+0x2b/0x80 [ 408.621905][ T4255] ? __fget_files+0xb9/0x190 [ 408.626482][ T4255] ? __fget_files+0xd1/0x190 [ 408.631160][ T4255] __sys_sendmsg+0x54/0xa0 [ 408.635658][ T4255] ? lockdep_hardirqs_on_prepare+0xcd/0xf0 [ 408.641442][ T4255] do_syscall_64+0x33/0x80 [ 408.645969][ T4255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.651845][ T4255] RIP: 0033:0x7f6fdfaf06e9 [ 408.656250][ T4255] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 408.676172][ T4255] RSP: 002b:00007f6fdfa6f228 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.684651][ T4255] RAX: ffffffffffffffda RBX: 00007f6fdfb7a368 RCX: 00007f6fdfaf06e9 [ 408.692697][ T4255] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 408.700818][ T4255] RBP: 00007f6fdfb7a360 R08: 00007fffca38ecc7 R09: 00007f6fdfa6f6c0 [ 408.708765][ T4255] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6fdfb7a36c [ 408.717039][ T4255] R13: 00007f6fdfb47064 R14: 0000040000000015 R15: 00007fffca38ecc8 [ 408.725093][ T4255]